EL3060 CONTINUOUS GAS ANALYZERS | OI/EL3060-EN REV. A 13
Network and data security
Customer's responsibility
The gas analyzer is designed to be connected to and to communicate infor-
mation and data via a network interface.
It is the customer's sole responsibility to provide and continuously ensure a
secure connection between the gas analyzer and the customer’s network or
any other network (as the case may be). The customer shall establish and
maintain any appropriate measures (such as but not limited to the installa-
tion of firewalls, application of authentication measures, encryption of data,
installation of anti-virus programs, etc.) to protect the product, the network,
its system and the interface against any kind of security breaches, unau-
thorized access, interference, intrusion, leakage and/or theft of data or in-
formation.
ABB Ltd and its affiliates are not liable for damages and/or losses related to
such security breaches, any unauthorized access, interference, intrusion,
leakage and/or theft of data or information.
Active services and open ports on the Ethernet interface
22/tcp Used for software update only. No direct access to the device.
502/tcp Used for Modbus/TCP. The device allows any Modbus client to
connect, there is no access restriction to authorized clients only.
8100/tcp Used for Test and Calibration Software. Binary, proprietary pro-
tocol.
Modbus and PROFIBUS interfaces
The customer shall be aware that Modbus and PROFIBUS protocols are in-
secure protocols.
Access credentials
Access to the calibration and to the menus used to change the configuration
of the device can be restricted by password protection (see page 102).
Password protection is not activated ex works (except for gas analyzers
used for emission monitoring).
It is recommended to activate the password protection using the software
tool ECT ("EasyLine Configuration Tool", see page 53). Thus, the access to
the software tool ECT itself as well as to the device's calibration and config-
uration functions is restricted.