Mitsubishi Electric MELSEC iQ-R Series User Manual page 43

IP filter settings using the Windows firewall
Adding settings to the Windows firewall allows the IP address of an access source to be identified, and therefore can prevent
unauthorized access.
Set the settings to enable a function which is equivalent to the security function (IP filter function) of MELSEC products.
The IP filter is one method of preventing illegal access (such as a program or data destruction) from an
external device; therefore, it does not completely prevent unauthorized access. To maintain the security
(confidentiality, integrity, and availability) of the programmable controller and the system against unauthorized
access, denial-of-service (DoS) attacks, computer viruses, and other cyberattacks from external devices, take
appropriate measures such as firewalls, virtual private networks (VPNs), and antivirus solutions.
Our company is not responsible for any problems that occur in the programmable controller and system due to
a DoS attack, unauthorized access, computer virus, or other cyber attacks.
Examples of measures for unauthorized access are given below:
• Installing a firewall or VPN
• Installing a personal computer as a relay station and controlling the relay of send/receive data with an
application program
• Installing an external device for which the access rights can be controlled as a relay station (Contact the
network service provider or equipment dealer for details on the external devices for which access rights can
be controlled.)
The IP filter can be implemented by setting the IP address of an access source to the Windows Firewall and then allowing or
blocking the connection.
Create 'New Rule' for the inbound rules of the Windows firewall and set a target IP address to be allowed or blocked by the IP
filter. To set multiple IP filter settings, add multiple rules or combine the settings into one rule. When adding multiple rules,
make sure that the IP address range to be blocked is not duplicated with the range to be allowed.
Precautions
• Whether to allow or block a connection must be determined for all the IP addresses connected to the same network. If there
is a CPU module in which the IP filter function is enabled in the network where a WinCPU module is connected, allow or
block a connection from an IP address specified by the IP filter function of the CPU module.
• By setting the IP filter setting, access from a product other than MELSOFT products is also blocked. To use this setting,
access an Ethernet port from an IP address which is not blocked.
• If there is a proxy server in the LAN line, block the IP address for the proxy server. If the IP address is allowed, it will not be
possible to prevent access from personal computers that access the proxy server.
• To block access from an external device to another station, block access to a connected station (a station connected
directly to an external device) by using the IP filter.
(1)
(1) Connected station
(2) Another station
(3) Access to the connected station is blocked.
(3)
(2)
4 PROCEDURES BEFORE OPERATION
4.3 Setting up Windows
4
41