Data Security For Data At Rest And In Transit; Data Security For Data At Rest; Data Security For Data In Transit - Honeywell EK205-M Operating Instructions Manual

General
We recommend opening safety zone L0 only for zone L1 and not for zones L2, L3
and L4.
2.4

Data security for data at rest and in transit

2.4.1 Data security for data at rest

Data at rest are the data which are temporarily or permanently stored in the EK205-M. These
data are unencrypted in the EK series. This means it is even more important to protect the device
from unauthorized access.
See section 2.3 "Preventing unauthorized external access using a firewall".

2.4.2 Data security for data in transit

Data in transit are data which are currently being transferred between the EK205-M and, for
example, a control station in a public or trustworthy network.
The protocols used with the EK205-M normally transfer the data in plain text form. If possible, you
should therefore use the secure version of a protocol (see section 4.9 "Supported protocols",
page 28).
See section 2.3 "Preventing unauthorized external access using a firewall".
Using an encrypted VPN connection
We recommend that you use a VPN connection whenever you require a secure
data connection, but a secure protocol is not supported for the data transfer.
In a VPN, the data are transferred between two or more subscribers in encrypted
form. Therefore, a VPN connection is extremely important, for example for mobile
access to a volume conversion device, for accessing a private network or for data
communication using different systems.
17