WebConsole - Security Options
45
NX-Series Controllers - WebConsole & Programming Guide
Security Presets
The Master provides three levels of security setting presets: Low, Medium, and High. Each level is a preset of various security
settings. The following table
describes each of the Security Presets presented on the General section of the Security page:
Once any of the settings have been modified, press the Accept button to save these changes to the Master. Once these changes are
saved, the following message appears: "Device must be rebooted for the setting to take effect. To reboot, go to the System Devices
page." A link appears which you can click to jump to the System Devices page (see the System - Devices section on page 58 for
more information.) Click the Reboot button to remotely reboot the target Master.
System Security Options (Cont.)
Option Description
FTP Access Select to enable FTP access to the Master. The default port value used for FTP communication is 21.
NOTE: This port can be disabled/enabled, but its value cannot be changed.
Authenticate on
Server Ports
Select to require user name and password authentication on Telnet, Program, and HTTP/HTTPS ports.
Authentication is always required on FTP/SFTP and SSH ports.
NOTE: If Authenticate on Server Ports is disabled but LDAP is enabled, a login is still required. If you do not
desire a login, LDAP must also be disabled.
Authenticate AMX
Devices On ICSLAN
Ports
Select to require user name and password authentication on devices connected to the ICSLAN ports on the Master.
ICSLAN AMX Device
Connection
Select to allow ICSP access to the Master for Device-type users connected to the ICSLAN ports. Expand the
ICSLAN AMX Device Connection section to view this option.
ICSLAN Encryption Select to enable encryption on the ICSLAN ports on the Master. Expand the ICSLAN AMX Device Connection
section to view this option.
Authenticate AMX
Devices On LAN Ports
Select to require user name and password authentication on devices connected to the LAN ports on the Master.
LAN AMX Device
Connection
Select to allow ICSP access to the Master for Device-type users connected to the LAN ports. Expand the LAN AMX
Device Connection section to view this option.
LAN Encryption Select to enable encryption on the LAN ports on the Master. Expand the LAN AMX Device Connection section to
view this option.
Security Presets
Preset Low Medium High
Audit Log Off On On
Banner Display Off On On
USB Host Port Enabled Enabled Disabled
Authentication On Server Ports Required Required Required
Inactivity Timeout Off On On
Password Expiration Disabled Enabled Enabled
Cryptography Strength Low Low High
Password Complexity Low Medium High
Lockout Access Off On On
FTP Access Both enabled Disabled/Enabled Disabled/Disabled
HTTP/HTTPS Both enabled Disabled/Enabled Disabled/Disabled
Telnet/SSH/SSH FTP Access Both enabled Disabled/Enabled Disabled/Disabled
Authenticate AMX Devices on
ICSLAN Ports
Not required Required Required
ICSLAN AMX Device Connection ICSPS enabled, ICSP enabled -
without encryption
ICSPS enabled, ICSP enabled -
with encryption
ICSPS enabled, ICSP disabled
Authenticate AMX Devices on
LAN Ports
Not required Required Required
LAN AMX Device Connection ICSPS enabled, ICSP enabled -
without encryption
ICSPS enabled, ICSP enabled -
with encryption
ICSPS enabled, ICSP disabled