The DeltaV Firewall IPD is designed to protect DeltaV controllers
from Denial of Service (DoS) attacks originating from DeltaV workstations or
other computers on the DeltaV Control Network.
Important
The DeltaV system requires a specific hardware and software version of the firewall IPD and a special configuration that includes the packet inspection rules and packet rate limits that have been tested with the DeltaV system. DeltaV firewall IPDs ordered from Emerson Automation Solutions are shipped with the supported software and are pre-configured to operate properly with the DeltaV system. To ensure that you have the proper firewall IPD configuration and the correct hardware and software versions, you must purchase the firewall IPD through normal Emerson channels.
Installation notes
- Connect the required 24 VDC system power to the firewall IPD through the detachable screw-terminal block. The firewall IPD can use the same system power supply as the controllers. The terminal block also contains a set of normally closed, potential-free relay contacts to monitor the firewall.
- Install the firewall IPD close to the controllers on the DIN rail. To more tightly control physical access to the firewall IPD, you can install it on a DIN rail with a 24 VDC power supply in the equipment room.
- Connect the ground screw to chassis ground to provide a shield ground for the controller and firewall IPD communications cables.
- Connect only DeltaV workstations to the ports labeled Workstations. Typically, the workstations are connected to a managed switch and the switch is connected to the firewall IPD's workstation port. For controllers that are distributed over wider geographic areas, consider using a firewall IPD on a one-to-one basis with each controller. This is a more secure arrangement because it eliminates the possibility of open switch ports on the controller side.
- Connect DeltaV controllers to the ports labeled Controllers. Typically, the controllers are connected to a managed switch and the switch is connected to the firewall IPD's controller port.
- Install the firewall IPD on the primary and secondary control networks to provide protection on both access ports of the controllers. Among the things to consider when determining the best location in which to install the firewall IPD are:
