Rockwell Automation 1783-RA2TGB, Руководство пользователя, Страница: 9 / 42

Rockwell Automation Publication 1783-UM014A-EN-P - October 2021 9
Chapter 1 Remote Access Architecture
Best Practices
• FactoryTalk Remote Access Administrator enforces two-factor-
authentication.
• The FactoryTalk Remote Access software must be up to date in case
security improvements are released.
• Configure strong, complex user passwords.
• Stratix 4300 routers must be connected to the internet through its WAN
port. Stratix 4300 routers do not enable any service through that port and
only need an outgoing connection through to the configured outgoing
port (TCP port 443, 80, or 5935). An additional firewall can provide more
protection.
• Undertake a formal threat and risk assessment in relation to remote
access.
• Use the provided role-based access control.
• Use the provided physical controls to enable or disable remote access.
• Monitor security incidents and logs pro-actively to provide timely
incident response and accurate forensics.
• Conduct regular reviews and assessments of the secure remote access
solution and technologies to maintain compliance with policies and
procedures.
• Apply defense in depth practices for the secure remote access solution,
including practices to secure the remote computer.