Monitoring

What is a TCP setup?

TCP setup is more or less a historical thing. It allows the user to change some network and low level settings using telnet. If you telnet to port 99 of any unit, you will enter the TCP setup. Its main advantage is a much faster search for sensors, but it is really not needed for anything else. 

Why do we change the default configuration?

By principle, the TCP setup is a device configuration, so it will stop all Poseidon and Damocles activities when it is being used. Therefore it presents a security issue. The settings are protected by a username and password, but only connecting to port 99 will stop your unit from measuring and alarming. This is not an issue when you are on a firewall protected internal network, but it can present a way for an attacker to disable your measurements.

I am using the TCP setup and I do not want to lose it!

You will not lose the TCP setup, but you need to manually enable it (on new and factory reset units) on the General setup page of the WWW interface. You will do this by setting the "TCP Telnet Setup" port to anything but 0. So far, 99 has been the default value.

How do I secure an existing device?

If you are worried about the security, you can disable the TCP setup by setting the "TCP Telnet Setup" port to 0. This way the TCP setup will be disabled.

We believe this change will not present any issues to you and that it will improve the security of your devices. If you have any questions regarding this change, please contact our technical support at support [at] hwg [dot] cz.

You can get the latest firmware HERE.

The IP filter setting is available in  Security / IP Access Filter folder:

Always only the IP addresses range is set, using the default IP address and the range around the entered value (mask), following the pattern where AND is bit multiplication. Access is granted if the above condition is true.

IP trying to access AND IP Mask Range) = IP Address Value

The first procedure explains steps of setting when the sender phone number is included in ARES device list – there is not needed to know the password.

1. Setting of portal address SETCFG portal­_server=http://sensdesk.com/portal.php
2. Portal switching on SETCFG portal_cfg=1
3. Proceeding of manual Push Push

Similar procedure of setting, when the sender phone number is not included in ARES device list using password:

The example below use default password 1234

1. Setting of portal address 1234 SETCFG portal­_server=http://sensdesk.com/portal.php
2. Portal switching on 1234 SETCFG portal_cfg=1
3. Proceeding of manual Push 1234 Push