Security Functionality Verification

Web Authentication

1. Try to log in to the EcoStruxure Panel Server webpages with no password or enter a wrong password.

   Result: The EcoStruxure Panel Server does not give you access to the webpages.

2. Repeat this action 9 more times.

   Result: The EcoStruxure Panel Server locks for 10 minutes.

3. Try again 5 times.

   Result: The EcoStruxure Panel Server locks for 60 minutes.

Web Authorization

1. Log in to the EcoStruxure Panel Server webpages.

2. Bookmark a webpage (for example, Settings)

3. Open a private navigation window in your browser and open the previously bookmarked webpage.

   Result: You cannot access the webpage, however you are redirected in the login page.

Audit

1. After some or all the preceding tests, access the Logs webpage.

2. Download the log files.

3. Check that the failing attempts are present in the logs.

Firmware Update

1. Go to the Firmware Update webpage.

2. Upload a random file (for example, an image or a text document).

   Result: The EcoStruxure Panel Server reports a wrong signature.

3. Access the audit logs.

4. Check that the failed firmware update is present in the logs.

Disabling Services

1. To access the menu to disable services, select Settings > Network Communication > DPWS.

2. Connect a PC with Windows operating system to the same local network.

3. Click Network from the File Explorer.

   Result: The EcoStruxure Panel Server is not discovered, therefore, does not appear in the list of devices in the network.

Disabling Wireless Services

To access the menus to temporarily disable wireless services:

• For Wi-Fi, navigate to Settings > Network Communication > Wi-Fi, click the Wi-Fi activation slider, and save your changes.

  Result: In your Wi-Fi access point management interface, there is no EcoStruxure Panel Server connected.

• For IEEE 802.15.4, navigate to Settings > Wireless devices > Network configuration, click the Wireless activation slider, and save your changes.

  Result: All wireless devices listed at Settings > Wireless devices > Wireless devices will indicate a Not connected state after a certain time, depending on the wireless device (see your device documentation for more details).