Device Security Settings
Original instructions
About us
Access the Settings
Access the DEVICE SECURITY SETTINGS from the SETUP web page:
Step
Action
1
Access the cyber security web pages for the module.
2
Select the SETUP tab in the page banner.
3
Expand the MENU navigation tree.
4
Expand the DEVICE SECURITY SETTINGS in the navigation tree banner to see these settings:
NOTE: These security settings are described individually below. When the Control Expert window is active, you can hover the cursor over any field or click the information (i ) icon to see a description of the functionality and the available range of values.
User Account Policy
Apply time and attempt limits to user interactions:
Parameter
Description
Session maximum inactivity (minutes)
The idle session timeout period for HTTPS connections.
Maximum login attempts
The number of times a user may attempt, and fail, to login.
NOTE: When this maximum is reached, no additional logins may be attempted for the configured period.
Login attempt timer (minutes)
The maximum time to enter a user password.
Account locking duration (minutes)
Time period during which no additional logins may be attempted after the maximum login attempts is reached.
Apply
Click this button to apply your changes.
Event Logs
Configure the syslog client in the module. The logs are stored locally in the module and exchanged with a remote syslog server:
Parameter
Description
Service activation
Turn the Syslog client service on or off.
Syslog server IP address
This is the IPv4 address of the syslog server.
NOTE: If you configure the Syslog server, all events are forwarded to this IP address.
Syslog server port
The Syslog client service uses this port number.
Apply
Click this button to apply your changes.
Refer to the topic Event Log Descriptions for a description of event log entries.
Network Services
The SNMP, Syslog, and Modbus network services are not inherently secure protocols. They are rendered secure when they are installed in external VPN devices.
The synergy of these network services constitutes a firewall that permits or denies the passage of communications through the RTU module
Configuration:
Service
Enforce Security
Unlock Security
SNMP Agent
disabled
enabled
Modbus TCP Server
disabled
enabled
DNP3 Outstation
enabled
disabled
Security Banner
Parameter
Description
Banner text
View this editable text when you access the web pages.