Category: Foxboro

Workstation platform hardening supports:

 Unnecessary services, software, and programs removed

 Unneeded software ports disabled

 Optional host intrusion prevention to protect the

use of software ports that may be used,

depending on the software configuration

 Documentation on how to re-enable services and

ports where required by special circumstances

 Secure BIOS changes

Installation Considerations

These new security enhancements are supported

only on Microsoft Windows 7 and Windows Server

2008 R2 stations which support the control network

and require a software update to the latest Foxboro

Evo software release to obtain these security

features. The security enhancements can be

deployed on a subset of workstations to increase

security, but in order to maximize security protection,

all workstations need to be updated to the latest

software release to obtain the full benefits

Workstation software supports:

 Changeable log-on passwords

 Individual user passwords

 Password lock-out after a user-configurable

number of unsuccessful log-i attempts and

secured mechanisms to reset login

 Password aging that requires password change

on a periodic basis

 Password support of alphanumeric and symbol

characters as per Microsoft convention

 Password file protection

 User accounts and optional McAfee or Symantec

firewalls for Microsoft Windows 7-based

workstations managed from a central location

through Microsoft Domains and Active Directory

 User account creation, deletion, and modification

tracking

 User logon/ logoff tracking

 Least privilege file and account access

 Necessary system services running in non-admin

accounts where possible

 Security patches from software suppliers,

including Microsoft, with patch status reporting

 Anti-virus software, including malware protection

supported as well as Anti-Spyware software

Workstation Security

The Foxboro Evo workstation supports optional

product features to allow customers to meet plant

requirements for enhanced workstation security.

Plant requirements for enhanced Foxboro Evo

workstation security can be met through a

combination of new product security enhancements

as well as implementing best security policies,

practices, and procedures.

Система автоматизации процессов Foxboro Evo Модель H92 Рабочая станция Безопасность

Foxboro Evo workstation enhanced product security

requirements are supported in two broad categories,

namely, workstation software including passwords,

and workstation platform hardening.

The workstation supports a mouse or optional

trackball, an alphanumeric keyboard, up to four USB

annunciator or annunciator/numeric keyboards, and

one to four monitors. The H92 workstation also

supports an optional USB touchscreen (purchased

separately with the monitor) and an optional USB

speaker set (purchased separately).

The workstation features up to three internal serial

ATA hard disk drives, which may be optionally

configured as RAID1, and comes with 4 GB of ECC

RAM memory (expandable to 16 GB). The processor

supports an internal DVD+RW drive.

Client/server communication is accomplished using

the TCP/IP networking protocol with the integrated

Ethernet network port or optional Ethernet network

interface cards (NICs).

As indicated by the CE logo, the Model H92

workstation conforms to the applicable European Union directives.

Critical software processes are often placed onto stand-alone workstations, with redundancy provided

through replicating that configuration. This permits continued plant operation during maintenance as well as

in the unusual event of a workstation failure. Workstations can be remotely mounted in secure enclosures

and/or spaces with the operator interface equipment installed through the use of Remote Graphics Units.

Обзор рабочей станции Foxboro Evo Process Automation System Model H92

OVERVIEW

The Model H92 workstation can be used with

Foxboro Evo™ Control Core Services software and

Foxboro Evo Control Software, and can also provide

a platform for Foxboro®, third-party, and user-written

applications.

As a multipurpose workstation running the

Windows 7 64-bit operating system, the H92

workstation supports execution of system

applications, data communications for a

broad range of applications, file serving

capabilities, and display of graphics and text. It also

interfaces with corporate networks at a local or

worldwide level.

EXTENSIVE LINE

Unsurpassed breadth of line for measurement

types, materials, and process connections. Can also

be provided with direct connect or capillary

connected pressure seals, and industry specific

seals for sanitary, and pulp and paper processes.

The line also includes a selection of traditional or low

profile differential pressure transmitters.

HIGH DEPENDABILITY

 Silicon strain gauge sensors successfully fieldproven in hundreds of thousands of installations.

 Standard 5-year warranty

INTELLIGENT TRANSMITTER FEATURES AT

AN ECONOMICAL PRICE

When you want the flexibility and performance of a

configurable, intelligent transmitter, but you don’t

need a digital output signal, these transmitters

provide exceptional benefits at a very affordable price:

 Liquid Crystal Display (LCD) Digital Indicator

with On-Board Pushbuttons

 Pushbutton Configuration and Calibration:

– Zero and Span Settings

– Adjustable Damping

– Forward or Reverse Output

– Failsafe Output; upscale or downscale

– Reranging without applying pressure

The Foxboro® brand Models IAP10, IGP10, IAP20, IGP20, and IDP10 are low power, voltage output

transmitters that provide precise, reliable measurement of gauge, absolute, and differential pressure, draw

no more than 3 mA, and transmit a 1 to 5 V dc output signal.

LOW POWER DESIGN

When you need a low power, low voltage transmitter,

these I/A Series Pressure Transmitters deliver:

 1 to 5 V dc Output Signal

 9 V dc Minimum Voltage

 3 mA Maximum Current

Полевые устройства Foxboro – Технические характеристики изделий, работающих под давлением

CERTIFICATIONS

 Transmitters meet numerous Agency

requirements for hazardous area locations.

Versions available to meet Agency flameproof

and zone requirements.

 Dual Seal certified to meet

ANSI/ISA 12.27.01-2003 requirements.

FUNCTIONAL SPECIFICATIONS

24-GIGABIT (RJ-45) PORT MANAGED SWITCH (P0973LK)

Ethernet Standards Supported

 IEEE 802.1q VLAN support

 IEEE 802.1d MAC Bridging (including STP)

 IEEE 802.1p Quality of Service (QoS, Priority)

 IEEE 802.1w Rapid Spanning Tree (RSTP)

 IEEE 802.3 including:

• Fast Ethernet: IEEE 802.3u, 100Base-T

(Copper)

• Gigabit Ethernet: IEEE 802.3z, 1000Base-X

(Fiber)

• Gigabit Ethernet: IEEE 802.3ab, 1000Base-T

(Copper)

Power

INTERNAL

AC Input power (auto-sensing)

100 V AC to 240 V AC, 50 to 60 Hz

EXTERNAL

Supports connection for redundant power supply

HEAT DISSIPATION

164 BTUs/hour

POWER CONSUMPTION

48 Watts

MAXIMUM CURRENT

Up to 2A

FEATURES

The 24-Gigabit RJ-45 port managed switch features:

 20 10/100/1000Base-TX Gigabit ports

configurable as 1G uplink ports

 Four (4) optional 10/100/1000Base-TX or SFP(2)

1000Base-X Mini-GBIC ports for uplink (ISL)

connector modules

 SFP(2) ports for 1000Base-X Mini-GBIC uplink

(ISL) connector modules

 Full-duplex operation

 Configuration tasks through a local console port,

and monitoring through any SNMP/RMON based

management application

 Port mirroring technology and diagnostics that

allow local network traffic to be redirected to an

external probe for detailed analysis

 When installed with the optional redundant power

supply, there is no single point of failure due to

power disruptions.

OVERVIEW

The 24-Gigabit (RJ-45) Port managed switches

(P0973LK) provide 20 10/100/1000Base-TX Gigabit

ports and four (4) combo ports 10/100/1000Base-TX

or SFP ports that can be populated with 1000Base-X

Mini-GBIC uplink (ISL) connector modules. If an SFP

port is populated with a Mini- GBIC then the

corresponding 1000Base-TX copper port cannot be used.

The switches allow high-performance, full-featured

layer-2 Ethernet switching in small to medium-sized

network applications.

UPLINK/SWITCH INTERFACES

Table 3 lists the MGBIC modules that can be added

to the 24-Gigabit RJ-45 Port Managed Switch

(P0973LK) switch. The MGBIC modules are added to

specific SFP ports to provide connectivity for ISL

ports.