Foxboro Evo Process Automation System Model H92 Workstation Security

Workstation Security

The Foxboro Evo workstation supports optional

product features to allow customers to meet plant

requirements for enhanced workstation security.

Plant requirements for enhanced Foxboro Evo

workstation security can be met through a

combination of new product security enhancements

as well as implementing best security policies,

practices, and procedures.

Система автоматизации процессов Foxboro Evo Модель H92 Рабочая станция Безопасность

Foxboro Evo workstation enhanced product security

requirements are supported in two broad categories,

namely, workstation software including passwords,

and workstation platform hardening.

Workstation software supports:

 Changeable log-on passwords

 Individual user passwords

 Password lock-out after a user-configurable

number of unsuccessful log-i attempts and

secured mechanisms to reset login

 Password aging that requires password change

on a periodic basis

 Password support of alphanumeric and symbol

characters as per Microsoft convention

 Password file protection

 User accounts and optional McAfee or Symantec

firewalls for Microsoft Windows 7-based

workstations managed from a central location

through Microsoft Domains and Active Directory

 User account creation, deletion, and modification

tracking

 User logon/ logoff tracking

 Least privilege file and account access

 Necessary system services running in non-admin

accounts where possible

 Security patches from software suppliers,

including Microsoft, with patch status reporting

 Anti-virus software, including malware protection

supported as well as Anti-Spyware software

support

Workstation platform hardening supports:

 Unnecessary services, software, and programs

removed

 Unneeded software ports disabled

 Optional host intrusion prevention to protect the

use of software ports that may be used,

depending on the software configuration

 Documentation on how to re-enable services and

ports where required by special circumstances

 Secure BIOS changes

Installation Considerations

These new security enhancements are supported

only on Microsoft Windows 7 and Windows Server

2008 R2 stations which support the control network

and require a software update to the latest Foxboro

Evo software release to obtain these security

features. The security enhancements can be

deployed on a subset of workstations to increase

security, but in order to maximize security protection,

all workstations need to be updated to the latest

software release to obtain the full benefits