GE PACSystems RX3i Secure Deployment Manual page 5

Contents
Enforcement ...................................................................................................................................................... 16
Authentication ........................................................................................................................................ 17
4.3
Server Protocols ............................................................................................................................................... 17
Authentication Supported by the PROFINET Protocol...................................................................... 17
Plaintext Login ................................................................................................................................................... 17
Recommendations .......................................................................................................................................... 17
Password Management ......................................................................................................................... 19
4.4
Changing Passwords ....................................................................................................................................... 19
Confidentiality and Integrity ............................................................................................................... 20
4.5
Communication Protocols ............................................................................................................................ 20
Firmware Signatures ...................................................................................................................................... 20
Logging and Auditing ...................................................................................................................................... 20
Configuration Hardening ...................................................................................................................... 21
Chapter 5
Scanner ...................................................................................................................................................... 21
5.1
Genius Gateway ...................................................................................................................................... 22
5.2
Network Architecture and Secure Deployment ............................................................................. 23
Chapter 6
Reference Architecture ......................................................................................................................... 23
6.1
Remote Access and Demilitarized Zones ......................................................................................... 24
6.2
Access and Process Control Networks ............................................................................................. 24
6.3
Access and PROFINET Networks ........................................................................................................ 25
6.4
Other Considerations ............................................................................................................................ 27
Chapter 7
Patch Management ................................................................................................................................ 27
7.1
Real-time Communication .................................................................................................................... 27
7.2
Additional Guidance .............................................................................................................................. 27
7.3
Protocol-Specific Guidance .......................................................................................................................... 27
Government Agencies and Standards Organizations ....................................................................... 27
ii PACSystems PROFINET IO Devices Secure Deployment Guide GFK-2904D