GE PACSystems* RX3i, Secure Deployment Manual

GFK-2904D 

July 2018 

i 

Table of Contents

PACSystems* PROFINET IO Devices Secure Deployment Guide GFK-2904D

Table of Contents ............................................................................................................................................................. i

Table of Figures ............................................................................................................................................................... iii

Chapter 1

About this Guide ....................................................................................................................................... 1

1.1

Revisions in this Manual .......................................................................................................................... 2

1.2

PACSystems Documentation................................................................................................................. 3

Chapter 2

Introduction ............................................................................................................................................... 5

2.1

Security ....................................................................................................................................................... 5

2.2

Firewall ........................................................................................................................................................ 5

2.3

Defense in Depth ....................................................................................................................................... 5

2.4

General Recommendations .................................................................................................................... 6

2.5

Checklist ...................................................................................................................................................... 6

Chapter 3

Communication Requirements.............................................................................................................. 7

3.1

Supported Protocols ................................................................................................................................ 8

ETHERNET Protocols ......................................................................................................................................... 8

Serial Protocols .................................................................................................................................................... 8

3.2

Service Requests ....................................................................................................................................... 9

SNP ........................................................................................................................................................................... 9

3.3

PROFINET .................................................................................................................................................. 10

Installing an I/O Device .................................................................................................................................. 10

Network Discovery and Device Identification ...................................................................................... 10

Using an I/O Device ......................................................................................................................................... 11

3.4

Ethernet Firewall Configuration ......................................................................................................... 12

Lower-Level Protocols ................................................................................................................................... 12

Application Layer Protocols ......................................................................................................................... 13

Chapter 4

Security Capabilities .............................................................................................................................. 15

4.1

Capabilities by Product ......................................................................................................................... 15

4.2

Access Control and Authorization ..................................................................................................... 15

Authorization Framework ............................................................................................................................ 15

Specifying Access Rights ............................................................................................................................... 16