The Windows firewall service is enabled by default on all DeltaV workstations. The Windows firewall profiles are off by default.
The Windows firewall profiles should not be enabled without fully understanding the potential impact on communications between DeltaV and any applications external to DeltaV on the either the DeltaV 2.5 network or applications in networks above the 2.5 network.
Always refer to the Windows help system for more information about the Windows firewall. The information provided here is designed as an overview of the features you need to enable the Windows firewall profiles and to apply any rules pertinent to the DeltaV system.
Do not enable the Windows firewall profiles for any dedicated DeltaV networks; for example, the DeltaV Primary and Secondary ACNs, DLINK for Redundant Batch, and the Thin Client Primary and Secondary networks. Doing so could disrupt communications between DeltaV nodes.
Networks used to connect to the DeltaV system that are outside of the DeltaV network need to be evaluated for the Windows firewall. If any non-DeltaV traffic is allowed on the network connecting to DeltaV, then enable the Windows firewall on that NIC and use DeltaV Security Administration to select the correct rule to open the necessary ports.