Our full technical support staff does not monitor this forum. If you need assistance from a member of our staff, please submit your question from the Ask a Question page.


Log in or register to post/reply in the forum.

security of connection ( Ethenet vs RS232)


to-ya farm Jun 28, 2021 01:59 AM

hi ^^


my AWS(CR1000X) is connected to desktop via RS232(RJ45 line).

I hear it can be connected to Ethenet(static IP).

I wonder which one could be more secure?

i guess RS232 would be more secure because i can install virus programm to desktop.

or is Ethenet also connected to desktop?

i need advice ^^;


thx.


Nico Jul 2, 2021 10:33 AM

What is between the logger and the desktop? A LAN?

What kind of threats do you want to be protected from? Internet? Neighbors? Man in the middle attacks?

If your home network is connected via a router to the internet your router needs a (most have a basic) firewall and if you want to go one step further you can add an extra (better) firewall between the router and the internet (see pfsense or opensense for examples).
If you got WiFi and rely on anything worse than WPA2 for protecting that entry point into your LAN the best firewall at the router is not going to stop passerbys to intrude into your LAN.


to-ya farm Jul 4, 2021 03:17 AM

thank you Nico for reply. ^^

i think,,,

IP network can be searched and tracked by someone.

so ip address can have weakness that someone can intrude to personal network. 

i heard even personal IP addresses can be search by someone ramdomly in IP network.

RS232 is not open in public.so i assume RS232 is more secure.

but desktop is on the network, i think it can be same as IP network.

i guess desktop can be guarded by virus software, so RS232 can be more secure than IP network

(cause static ip address is directly connected to IP network) -> i am not sure this part

thx.


Nico Jul 4, 2021 08:33 PM

"IP network can be searched and tracked by someone."

Not if you got an up to date firewall and do no install malware behind it and then allow it's traffic through that firewall.

"so ip address can have weakness that someone can intrude to personal network."

If someone can get INTO your machine it doesn't matter if the logger then is accessible via Ethernet or RS232.

"i heard even personal IP addresses can be search by someone ramdomly in IP network."

This all depends on your network security.Please read up on it here:

https://en.wikipedia.org/wiki/Firewall_(computing)

"RS232 is not open in public.so i assume RS232 is more secure."

RS232 has no security whatsoever. Once someone gets onto your LAN they can access RS232 devices via your computers without an problems.If you want to protect your CRxyz logger from unauthorized access set it's passwords (see Device Configuration Utility)

"i guess desktop can be guarded by virus software, so RS232 can be more secure than IP network"

Virus software =/= Firewall.

Virus software protects your computer against malicious code being run, but is no protection against hacking your network and taking control of devices that are not secure, which means if your operatin system has got a flaw that lets outsiders access your machine no virus software will protect against that. I repeat myself.. read above link from wikipedia bout firewalls.Then talk to someone in your area that is able to set up a pfsense or opensense firewall for you if you are that worried and your router built in firewall is not good enough for you.

"(cause static ip address is directly connected to IP network) -> i am not sure this part"

Any LAN accessible device - fixed IP, static IP or random IP will be accessible.
If the device in question can be hacked (read - no working firewall) then any device connected to it will be accessible as well (this means your RS232 connection to the datalogger).

Read about network security:

https://en.wikipedia.org/wiki/Network_security

 


to-ya farm Jul 6, 2021 06:51 AM

thank you. ^^

you are truly helpful person. -> i am not sure whether this is correct expression or not in english

Log in or register to post/reply in the forum.