GE PACSystems RX3i - Default Chapter; Table of Contents

GFK-2904D July 2018 i
Table of Contents
PACSystems* PROFINET IO Devices Secure Deployment Guide GFK-2904D
Table of Contents ............................................................................................................................................................. i
Table of Figures ............................................................................................................................................................... iii
Chapter 1 About this Guide ....................................................................................................................................... 1
1.1 Revisions in this Manual .......................................................................................................................... 2
1.2 PACSystems Documentation................................................................................................................. 3
Chapter 2 Introduction ............................................................................................................................................... 5
2.1 Security ....................................................................................................................................................... 5
2.2 Firewall ........................................................................................................................................................ 5
2.3 Defense in Depth ....................................................................................................................................... 5
2.4 General Recommendations .................................................................................................................... 6
2.5 Checklist ...................................................................................................................................................... 6
Chapter 3 Communication Requirements.............................................................................................................. 7
3.1 Supported Protocols ................................................................................................................................ 8
ETHERNET Protocols ......................................................................................................................................... 8
Serial Protocols .................................................................................................................................................... 8
3.2 Service Requests ....................................................................................................................................... 9
SNP ........................................................................................................................................................................... 9
3.3 PROFINET .................................................................................................................................................. 10
Installing an I/O Device .................................................................................................................................. 10
Network Discovery and Device Identification ...................................................................................... 10
Using an I/O Device ......................................................................................................................................... 11
3.4 Ethernet Firewall Configuration ......................................................................................................... 12
Lower-Level Protocols ................................................................................................................................... 12
Application Layer Protocols ......................................................................................................................... 13
Chapter 4 Security Capabilities .............................................................................................................................. 15
4.1 Capabilities by Product ......................................................................................................................... 15
4.2 Access Control and Authorization ..................................................................................................... 15
Authorization Framework ............................................................................................................................ 15
Specifying Access Rights ............................................................................................................................... 16