Table of Contents
Advertisement
—
9
Configure security (recommended)
To secure access to the XSeries
Totalflow user interfaces and host products support connection with the XSeries
several types of communication ports, protocols, and services. These constitute points of entry that
could be subject to inexperienced, unauthorized or malicious access through a point-to-point
connection or a connection established over a network. Local and remote access must be protected by
controlling physical access to the ports, enabling on-board security, or enforcing authentication prior
to establishing a connection using any of the ports.
This section lists the communication ports, services, protocols, and the open Transmission Control
Protocol (TCP) ports that need to be taken into consideration when securing devices.
The table below lists the default communication ports available in XSeries
configuration. These ports are pre-configured from the factory. When enabled, these ports are ready
for use, but are not secured.
Unprotected ports make the full functionality of the device available to any user. Configure security
passcode or role-based authentication to prevent indiscriminate access.
Table 9-1: Default communication ports in XSeries
Wired connections
communication
ports, default names
MMI, port name:
MMI Serial - COM0
USB, port name:
Totalflow - USB
Ethernet, port name:
Totalflow – TCP
COMM1, port name:
TF – Remote
The Table below lists the wireless interfaces available in XSeries
Table 9-2: Wireless interfaces in XSeries
Wireless connections
communication
interfaces
Wi-Fi, Wi-Fi Access
Point functionality
Onboard Bluetooth,
Port Name: Bluetooth
Bluetooth via USB
Dongle,
Port Name: Bluetooth
9.2.1
User-enabled services
Services are software processes that run on the XSeries
services that open access to the embedded software file system. Unauthorized or malicious use of
these services can cause file corruption and render a device inoperable.
7 6 | XSE RI ES G5 | 2 10 6 02 6MNAA
G5
devices, review the security features implemented.
Default
Default protocol
state
Enabled
Totalflow Local
(Read-only)
Enabled
Totalflow Local
(Read-only)
Disabled
Totalflow/TCP
(Read-only)
Enabled
Totalflow Remote
(Configurable)
G5
Default
Protocol
state
Disabled
Totalflow
Local/TCP
Disabled
Totalflow
Local
Disabled
Totalflow
Local
G5
Security feature available
Bi-Level Security code authentication or
Role-base Authentication (RBAC)
Bi-Level Security code authentication or
Role-base Authentication (RBAC)
Bi-Level Security code authentication or
Role-base Authentication (RBAC)
Bi-Level Security code authentication or
Role-base Authentication (RBAC)
G5
devices with standard configuration.
Security feature available
Passcode protection and standards-based
Wi-Fi security modes (WPA, WPA2)
Role-Based Authentication (RBAC)
Role-Based Authentication (RBAC)
G5
device. The table below lists user-enabled
G5
devices through
G5
devices with standard
Advertisement
Table of Contents
