48 ControlEdge HC900 Process & Safety Controller User and Installation Manual Revision 10
May 2019
Communication from Remote location
It is not recommended to connect a ControlEdge HC900 controller installed in a remote location to the
public network. The communication to ControlEdge HC900 controller installed in a remote location is
recommended to be on a private leased line or secured by setting up VPN device external to the
ControlEdge HC900.
The below figure illustrates a scheme of securely connecting to a remote location:
Figure 27: Communication from Remote location
3.7. ControlEdge HC900 Security Features
Mode Switch
The Mode Switch on the front panel of controller provides a mechanism method to restrict certain
operation on the ControlEdge HC900 system. Suggest to switch the Mode Switch to RUN position after
commissioning to prevent unauthorized operations like firmware upgrade, configuration download to the
running controller.
For more information, see “Controller Modes” in the ControlEdge HC900 Process and Safety Controller
User and Installation Manual.
IP whitelisting
The ControlEdge HC900 controller can be configured to accept Modbus TCP writes and peer to peer
(UDP) communication writes only from a specific list of IP addresses. This configuration can be done
using HC designer tool.
For more information, see “Configure Modbus/Peer Write Access” in the ControlEdge HC900 Process
and Safety Controller User and Installation Manual.
Controller Password
This feature protects the controller from unauthorized users accessing the controller. It allows the user to set a
password for the controller. This password must be provided while accessing the controller utility functions.
For more information, see HC Designer help file.
Note: The physical security for the ControlEdge HC900’s mode switch has to be maintained to prevent
unauthorized controller password modifications.
It is a recommended practice to change the controller password periodically.
To Next Page
Loading...
