The firewall configuration depends on the action done on the controller and the initial configuration state. There are five possible initial states:
oThere is no default script file in the controller.
oA correct script file is present.
oAn incorrect script file is present.
oThere is no default script file and the application has configured the firewall.
oA dynamic script file configuration has already been executed.
|
If... |
Then ... |
|---|---|
|
Boot of the controller |
Firewall is not configured. No protection is activated. |
|
Execute dynamic script file |
Firewall is configured according to the dynamic script file. |
|
Execute dynamic incorrect script file |
Firewall is not configured. No protection is activated. |
|
Download application |
Firewall is configured according to the application settings. |
|
If... |
Then ... |
|---|---|
|
Boot of the controller |
Firewall is configured according to the default script file. |
|
Execute dynamic script file |
The whole configuration of the default script file is deleted. Firewall is configured according to the dynamic script file. |
|
Execute dynamic incorrect script file |
Firewall is configured according to the default script file. The dynamic script file is not taken into account. |
|
Download application |
The whole configuration of the application is ignored. Firewall is configured according to the default script file. |
Incorrect Default Script File Present
|
If... |
Then ... |
|---|---|
|
Boot of the controller |
Firewall is not configured. No protection is activated |
|
Execute dynamic script file |
Firewall is configured according to the dynamic script file. |
|
Execute dynamic incorrect script file |
Firewall is not configured. No protection is activated. |
|
Download application |
Firewall is configured according to the application settings. |
Application Settings with No Default Script File
|
If... |
Then ... |
|---|---|
|
Boot of the controller |
Firewall is configured according to the application settings. |
|
Execute dynamic script file |
The whole configuration of the application settings is deleted. Firewall is configured according to the dynamic script file. |
|
Execute dynamic incorrect script file |
Firewall is configured according to the application settings. The dynamic script file is not taken into account. |
|
Download application |
The whole configuration of the previous application is deleted. Firewall is configured according to the new application settings. |
Execute Dynamic Script File Already Executed
|
If... |
Then ... |
|---|---|
|
Boot of the controller |
Firewall is configured according to the dynamic script file configuration (see note). |
|
Execute dynamic script file |
The whole configuration of the previous dynamic script file is deleted. Firewall is configured according to the new dynamic script file. |
|
Execute dynamic incorrect script file |
Firewall is configured according to the previous dynamic script file configuration. The dynamic incorrect script file is not taken into account. |
|
Download application |
The whole configuration of the application is ignored Firewall is configured according to the dynamic script file. |
|
NOTE: If a USB memory key containing a cybersecurity script is plugged into the controller, booting is blocked. First remove the USB key to correctly boot the controller. |
|
