Siemens SCALANCE M804PB, Руководство по эксплуатации

Страница: 12 / 68

Security recommendations
SCALANCE M804PB
12
Operating Instructions, 07/2018, C79000-G8976-C496-01
● To prevent unauthorized access to the device or network, take suitable protective
measures against non-secure protocols.
● If you require non-secure protocols and services, activate these at interfaces that are
located within a protected network area.
● Using a firewall, restrict the services and protocols available to the outside to a minimum.
● For the DCP function, enable the "DCP read-only" mode after commissioning.
Available protocols per port
The following list provides you with an overview of the open ports on this device. Keep this in
mind when configuring a firewall.
With some protocols the port can be open but access is prevented by a predefined IP
package filter rule. You will find further information on the predefined IP package filter rules
in "Security > Firewall > Predefined IPv4 rules".
The table includes the following columns:
● Protocol
All protocols that the device supports
● Port number
Port number assigned to the protocol
● Port status
–
Open
The port is always open and cannot be closed.
– Open (when configured)
The port is open if it has been configured.
● Default port status
Specifies the status of the port in the delivery state (factory setting) at the interface.
Possible status: Open, closed
● Authentication
Specifies whether the communication partner is authenticated.