INM MTL Tofino configurator REV 3.2 iii
DRAFT - 19 March 2018DRAFT - 19 March 2018
DECLARATION OF CONFORMITY ...........................................ii
1 INTRODUCTION ............................................................1
1.1 Description .....................................................................1
1.2 Navigating the Eaton Tofino Configurator ............................................2
1.3 Search Functionality ..............................................................4
2 NINE STEPS TO A SECURE CONTROL SYSTEM. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
3 INSTALLING YOUR EATON TOFINO CONFIGURATOR .............................8
3.1 Running the Eaton Tofino Configurator Installer .......................................8
3.2 LED Unit Connectors .............................................................2
4 PROJECTS ...............................................................11
4.1 Creating a New Project ..........................................................12
4.2 Opening an Existing Project ......................................................14
4.3 Editing Project Details ...........................................................14
4.4 Deleting a Project ...............................................................16
4.5 Duplicating a Project ............................................................17
4.6 Exporting a Project File ..........................................................17
5 TOFINO SAS .............................................................19
5.1 Defining the Tofino SAs ..........................................................19
5.1.1 Manually creating a Tofino SA .............................................................20
5.1.2 Discovering a Tofino SA ..................................................................23
5.2 Editing a Tofino SA ..............................................................25
5.3 Deleting a Tofino SA .............................................................26
5.4 Tofino SA Status Page ...........................................................27
6 ASSETS .................................................................28
6.1 Asset Templates ................................................................29
6.1.1 Creating an Asset Template ...............................................................29
6.1.2 Deleting an Asset Template ...............................................................32
6.2 Creating Assets .................................................................32
6.2.1 Creating an Asset Manually ...............................................................33
6.2.2 Creating an Asset from a Template .........................................................35
6.3 Editing an Asset or an Asset Template ..............................................36
6.4 Creating an Asset Template from an Existing Asset ...................................37
6.5 Deleting an Asset ...............................................................38
6.6 Detecting an Asset ..............................................................39
7 FIREWALL RULES .........................................................42
7.1 Creating Firewall Rules ..........................................................46
7.2 Suggesting Firewall Rules ........................................................49
7.2.1 Suggesting Firewall Rules ................................................................51
7.3 Deep Packet Inspection Firewalls ..................................................55
7.3.1 Creating a Modbus TCP Enforcer Rule ......................................................57
7.3.2 Creating an OPC Classic Enforcer Rule ......................................................60
7.3.3 Creating IEC104 Enforcer Firewall Rule .....................................................62
7.3.4 Creating an EtherNet/IP Enforcer Rule ......................................................65
7.3.4.1 Ethernet IP Wild Card Feature ........................................................68
7.3.5 Creating a DNP3 Enforcer Rule ............................................................69
7.3.6 Creating a GOOSE Enforcer Rule ..........................................................71