Re: [foxboro] Infusion on corporte

Congratulations.  You just ran into the classic problem with running  a 
process control system on off-the-shelf IT hardware and software.  The 
only stuff supported is that which the vendor tells you is supported.

I second (third, fourth?) the notion that the best workaround right now is 
to isolate your I/A, except for necessary connections, with a firewall or 
other security appliance.  They even have firewalls out now with built-in 
virus scanning of passing traffic.  To make both sides happy here, IT puts 
up their firewall and we put up ours, back-to-back.  Then we can put 
whatever we need on our side of our firewall (like XP SP1, a particular 
antivirus, 15-year-old Swiss-cheese versions of Solaris, etc.)


I'm personally less fond of VLANs for security, because (depending on the 
switch used) they can be difficult to set up and document properly, and, 
well, I've read about too many ways to hack them :).  For mere traffic 
isolation they are fine, but If you need to pass your "isolated/critical" 
control system traffic across a "public" or "business" network, 
encryption/VPN technologies are more palatable to me.


Corey Clingo
BASF Corporation






"deepa raju" <dipa.dsk@xxxxxxxxx> 
Sent by: foxboro-bounce@xxxxxxxxxxxxx
05/21/2008 02:22 AM
Please respond to
foxboro@xxxxxxxxxxxxx


To
foxboro@xxxxxxxxxxxxx
cc

Subject
[foxboro] Infusion on corporte






We have a infusion system(Server 2003) in our lab which is required to be 
in
corporate network. For this reason we have installed Mcafee and Security
patches, after installing them I am not able to open Archestra IDE. HAs
anyone faced this situtation before.
       Provide some solution to this as soon as possible.
Thanks in advance.
dsk


 
 
 



 
 
_______________________________________________________________________
This mailing list is neither sponsored nor endorsed by Invensys Process
Systems (formerly The Foxboro Company). Use the info you obtain here at
your own risks. Read http://www.thecassandraproject.org/disclaimer.html
 
foxboro mailing list:             http://www.freelists.org/list/foxboro
to subscribe:         mailto:foxboro-request@xxxxxxxxxxxxx?subject=join
to unsubscribe:      mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave

Other related posts: