Siemens 9810 Series, Руководство пользователя, Страница: 112 / 218

Security
Security
Security overview
Your Siemens Industry product is equipped with security-enabling features.
These features arrive in a default state and can be configured for your installation
needs. Please note that disabling or modifying settings within the scope of these
individual features can impact the overall security robustness of the device and
ultimately the security posture of your network in either positive or negative ways.
Review the security intent and recommendations for the optimal use of your
device’s security features.
Products are hardened to increase security robustness. This is an ongoing
process consisting of secure development practices, inclusion of security features
and testing at our security test facilities. Following system hardening best
practices is also necessary to help ensure your overall system security.
Security features on your device
Your device comes with security features that you can configure to help protect
against unauthorized configuration and access to your device’s data through its
user interfaces or communications.
Enable/disable communication ports
You can disable physical communication ports when they are not in use.
These can be disabled through the display, ION Setup or through the meter’s
webpages.
Leaving unused ports open provides additional attack surfaces for a potential
attacker. Minimizing the number of ports open on the device reduces the likelihood
of unauthorized intrusions by providing fewer entry points.
Related Topics
• Disabling serial communications using ION Setup
• Disabling serial communications using the meter webpages
• Disabling serial communications using the display
Network port control
This feature provides you with the ability to enable and disable individual network
ports and to change port numbers from their default values.
Leaving unused ports open provides additional attack surfaces for a potential
attacker. Minimizing the number of ports open on the device reduces the likelihood
of unauthorized intrusions by providing fewer entry points.
Once your meter is configured, all network ports related to unused protocols
should be placed in the OFF state/position. Minimize the number of open ports,
temporarily opening ports for activities such as periodic firmware / software
downloads when required.
Network ports that remain open should be changed from their default values
wherever possible.
112 7EN05-0390-00