PW7K Security Manual @Honeywell Inc 3
Secure By Default
Configuration
Please refer to the PW7K User Guide for detailed configuration steps.
Web Interface
The PW7K panel supports web interface for the basic installation parameter setup.
It is recommended to:
• Disable web interface before leaving panel in normal operation. Refer to the
PW7K User Guide for more details.
• Enable web interface and physically using dip switches only when installer is
physically close to the panel.
Session Timer
The Session timer logs OFF a user when session is inactive for configured time
interval.
PW7K panel is configured with fifteen (15) minutes as default session time out
which is recommended value to minimize the risk of when an attacker can access
active sessions. Refer to the PW7K User Guide for the detailed step by step
approach for configuring “Web Session Timeout”.
Account and permission Management
The PW7K has accounts, represented by users in the PW7K configuration. It is
important that these accounts are properly managed. Failure to do so can make it
easier for an attacker to penetrate the system, or make it more difficult to detect
that an attack has occurred.
Settings Secure configuration
Web Interface
Disable web interface once basic configuration is done.
Default account
Remove default user login, create a unique user account with a
strong password.
USB interface
Disable USB interface.
SD Card Interface
Disable SD card interface.
SNMP communication
Disable SNMP communication.
Discovery service
Disable discovery service.
Partition encryption
Enable data encryption at rest: This is necessary to protect
cryptographic keys and personal data.
Host communication
Enable only TLS encryption for host communication
To Next Page
Loading...
