Re: [foxboro] Firewall

Hmmm...Talk to Ernie, but I think I'd put this ball back in the IT guy's 
court.  From a firewalling standpoint, I/A systems are little different 
from other Unix systems, outside of maybe needing tighter firewalling due 
to the old, relatively vulnerable version of Solaris I/A prior to 7.0 
runs.  We've found that even our remote access stuff -- remote DM/FV, 
Aspen CIM-IO, NetDDE (ok, NetDDE *was* harder, it is after all a M$ 
protocol), mail notifications -- was relatively easy to set up if you knew 
your way around a firewall.  No special knowledge of I/A is really 
required.  We figured out anything we didn't know up front with sniffer 
software, which your IT guys should be handy with.
Corey Clingo
BASF Corp.






"Ghodhbani, Hafedh" <hafedh.ghodhbani@xxxxxxxxxxxx>
Sent by: foxboro-bounce@xxxxxxxxxxxxx
09/18/2004 07:41 AM
Please respond to foxboro

              To:  "'foxboro@xxxxxxxxxxxxx'" 
              cc:  "Rakaczky, Ernie"
         Subject:       Re: [foxboro] Firewall






Thanks Alex,
I contacted our IT administrator, As he doesn't know the Foxboro node
so he asked me (as Foxboro system administrator) to find the best solution
to protect both systems from non authorised navigation.
I wait if Ernie contacts me.
Regards
Hafedh

-----Original Message-----
From: Johnson, Alex (Foxboro) [mailto:ajohnson@xxxxxxxxxxx]
Sent: 18 September 2004 13:43
To: foxboro@xxxxxxxxxxxxx
Cc: Rakaczky, Ernie
Subject: Re: [foxboro] Firewall


Best is hard to answer.

The minimum would be replace the hub with a firewall from a competent
vendor.

The best advice that I can give you is to involve your in plant IT people.
They will have an opinion on this topic. There are probably company
standards on suppliers and configurations.

We offer security consulting services through a group led by Ernie 
Rakaczky.
I've copied him and I expect that you will hear from him shortly.

Regards,

Alex Johnson
Invensys Process Systems
Invensys Systems, Inc.
10707 Haddington
Houston, TX 77043
713.722.2859 (voice)
713.722.2700 (switchboard)
713.932.0222 (fax)
ajohnson@xxxxxxxxxxx

-----Original Message-----
From: foxboro-bounce@xxxxxxxxxxxxx [mailto:foxboro-bounce@xxxxxxxxxxxxx] 
On
Behalf Of Ghodhbani, Hafedh
Sent: Saturday, September 18, 2004 5:53 AM
To: 'foxboro@xxxxxxxxxxxxx'
Subject: [foxboro] Firewall

Hi list,
Our AW stations (UNIX) are connected to the plant Hub, via the 2nd 
Ethernet
port.
The Hub is connected the the admin network. What is the best solution to
protect
the control stations from the admin network ? how to install the firewall 
?
Regards
Hafedh G
Sr C&I Eng BG-Group
Tel:+21674259250 ex 574

______________________________________________________________________
BG Energy Holdings Limited (a member of BG Group)
Registered in England No: 3763515
Registered Address:
100 Thames Valley Park Drive
Reading
Berkshire   RG6 1PT   UK
Telephone:              +44 (0) 118 935 3222
Website:                http://www.BG-Group.com

This e-mail is intended only for the addressee named above.  As this
e-mail may contain confidential or privileged information, please
advise us immediately if you are not the named addressee or the person
responsible for delivering the message to the named addressee.  The
contents should not be disclosed to any other person nor copies taken.
______________________________________________________________________


_______________________________________________________________________
This mailing list is neither sponsored nor endorsed by Invensys Process
Systems (formerly The Foxboro Company). Use the info you obtain here at
your own risks. Read http://www.thecassandraproject.org/disclaimer.html

foxboro mailing list:             http://www.freelists.org/list/foxboro
to subscribe:         mailto:foxboro-request@xxxxxxxxxxxxx?subject=join
to unsubscribe:      mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave



_______________________________________________________________________
This mailing list is neither sponsored nor endorsed by Invensys Process
Systems (formerly The Foxboro Company). Use the info you obtain here at
your own risks. Read http://www.thecassandraproject.org/disclaimer.html

foxboro mailing list:             http://www.freelists.org/list/foxboro
to subscribe:         mailto:foxboro-request@xxxxxxxxxxxxx?subject=join
to unsubscribe:      mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave


_____________________________________________________________________
This message has been checked for all known viruses by the
Message Labs Virus Control Centre.

______________________________________________________________________
BG Energy Holdings Limited (a member of BG Group)
Registered in England No: 3763515
Registered Address:
100 Thames Valley Park Drive
Reading
Berkshire   RG6 1PT   UK
Telephone:              +44 (0) 118 935 3222
Website:                http://www.BG-Group.com

This e-mail is intended only for the addressee named above.  As this
e-mail may contain confidential or privileged information, please
advise us immediately if you are not the named addressee or the person
responsible for delivering the message to the named addressee.  The
contents should not be disclosed to any other person nor copies taken.
______________________________________________________________________


_______________________________________________________________________
This mailing list is neither sponsored nor endorsed by Invensys Process
Systems (formerly The Foxboro Company). Use the info you obtain here at
your own risks. Read http://www.thecassandraproject.org/disclaimer.html

foxboro mailing list:             http://www.freelists.org/list/foxboro
to subscribe:         mailto:foxboro-request@xxxxxxxxxxxxx?subject=join
to unsubscribe:      mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave






 
 
_______________________________________________________________________
This mailing list is neither sponsored nor endorsed by Invensys Process
Systems (formerly The Foxboro Company). Use the info you obtain here at
your own risks. Read http://www.thecassandraproject.org/disclaimer.html
 
foxboro mailing list:             http://www.freelists.org/list/foxboro
to subscribe:         mailto:foxboro-request@xxxxxxxxxxxxx?subject=join
to unsubscribe:      mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave

Other related posts: