In no event is Honeywell liable to anyone for any direct, special, or consequential damages. The information and specifications in this document are subject to change without notice.
RIGOROUS SYSTEM HARDENING
At the product and system design and development phases, Honeywell uses
in-house and third-party testing tools to evaluate product vulnerabilities
and fix issues to harden the system. To mitigate the risks associated with
malicious code, data privacy breaches and system misconfiguration, Honeywell
employs the Information Communication Technology (ICT) industry’s security
guidelines, which addresses specific video surveillance requirements.
Since IP video surveillance can be installed in both private and public networks, the
exposed cyber thereat can vary accordingly. It is necessary to target system hardening
according to the specific deployment application. System hardening needs to be
aligned with the process of cybersecurity management, system management and
business operations. Customers of Honeywell Video Systems can configure product
and system settings to address threats specific to the planned implementation.
NETWORK PORT MANAGEMENT
A network port is a logical end point for communication purposes. To connect to
external services, IP devices use network ports identified by specific numbers
from 0 to 65535; ports between 0 and 1023 are considered reserved and are
officially assigned by the Internet Assigned Numbers Authority (IANA).
A network port is always associated with the IP address of the host and the
protocol of communication and completes the destination or origination
network address of a communication session. Well-known port numbers are
allotted to the standard process applications of an IP device. For example, Port
21 is used for File Transfer Protocol (FTP), Port 23 is used for Telnet remote
login service, and Port 80 is used for Hypertext Transfer Protocol. These wellknown ports are highly vulnerable to cyber-attacks. Honeywell disables unused
communication ports by default – such as FTP port 21, SSH port 22 and
Telnet port 23 – to eliminate hijacking risk via vulnerable legacy protocols.
