ABB Ability - Cyber Security Deployment Guideline

ABB ABILITY
TM
EDGE INDUSTRIAL GATEWAY
63
11
—
Cyber Security Deployment Guideline
11.1 Secure system setup
11.1.1 Basic system hardening rules
11.2 Access control (Local view)
11.2.1 Web server access
11.2.2 User accounts
11.2.3 SSH (Secure Shell) Access - only for developer &
maintenance role
11.2.4 Adding Gateway hostname in client machine (Windows)
11.2.5 Accessing web server (Local view)
11.3 Ports and services
11.3.1 Ports
11.3.2 Device firewall
11.4 Time service
11.5 Remote syslog (cloud-connected)
11.6 Security event monitoring (Local view)
11.6.1 Web server security events (only for Edge Gateway)
11.6.2 Daemon server security events
11.6.3 System security events
11.7 Firmware update
11.8 Disclaimer