Important preliminary information

The firewall IPD has been configured by Emerson to permit all standard DeltaV communications between controllers and workstations. This configuration enables the firewall IPD to support all DeltaV functions as soon as it is installed.

Standard DeltaV communications include several functions that use well-known communications ports. Some of these ports are used for non-essential communications such as diagnostic information. Users can block these ports if required to further enhance the security of the firewall IPD.

The firewall IPD provides a very high level of security as shipped from Emerson. However, new threats are constantly being developed and added security measures may be required. If your risk analysis shows that your installation might benefit from a higher protection level, the firewall IPD can be configured to block ICMP (Internet Control Message Protocol). Be aware that if ICMP is blocked, an ICMP Ping command issued from the DeltaV Diagnostics application will fail. All other DeltaV commands will function properly. The Multicast Ping command can be used as an alternative to ICMP to ping a device through the firewall IPD. Refer to KBA NK-1600-0290 for information on blocking ICMP and using Multicast Ping.

Emerson highly recommends that you change the default root and management password to unique passwords. Refer to KBA NK-1600-0290 for the default password and for instructions on changing the password.

Note

Occasionally it may be necessary to update the operating system software in the firewall IPD. Updates are distributed through the installed base management organization of Emerson and are available only to users on DeltaV Guardian Support. Updates from sources other than Emerson must not be installed.

Important

Disclaimer — the use of the firewall IPD provides only an additional layer of protection to your DeltaV controller with respect to certain types of undesired actions. This firewall IPD represents only one portion of an overall information security system. The use of this product does not guarantee that your controllers are secure from cyber-attacks, intrusion attempts or other undesired actions. Emerson does not represent or warrant, and specifically disclaims any express or implied representation or warranty, that the use of this product will prevent system disruption due to cyber attacks, intrusion attempts or other undesired actions. Users are solely and completely responsible for their Control system security, practices and processes, and the proper configuration and use of the firewall IPD.