When used with the default configuration and installed according to the network diagrams in the DeltaV S-series and CHARMs Hardware Reference manual, the firewall IPD protects DeltaV controllers from denial-of-service attacks. Emerson strongly recommends against changing the configured thresholds. Additionally, the firewall IPD applies the configured rules of stateful inspection to each packet. The firewall IPD inspects packets one by one, and rejects or drops packets that do not conform to a standard DeltaV address, port, or protocol.
The firewall IPD does not protect controllers from attacks from external networks. It is designed to protect controllers from certain kinds of broadcast attacks that may originate from a DeltaV workstation or other computer located on the unprotected side of the firewall IPD on the DeltaV Control Network. Other measures must be taken to control physical access to DeltaV network switches and PC hardware.