Filter:

Submit Search

IMPORTANT
SNS 3.x versions have reached End of Maintenance since July 1st, 2024.
We recommend that you update your SNS firewalls to a version with maintenance to guarantee the protection of your infrastructure.

# ETHERNET/IP

## EtherNet/IP settings

Max. number of pending requests | Maximum number of requests without responses in a single EtherNet/IP session. This value has to be between 1 and 512 (default value: 10).
Maximum request duration (seconds) | This value is the period after which EtherNet/IP requests without responses will be deleted. This value has to be between 1 and 3600 seconds (default value: 10).
Maximum message size (bytes) | This value makes it possible to restrict the size allowed for an EtherNet/IP message. It has to be between 24 and 65535 (default value: 65535).

## EtherNet/IP command management

### Public commands

This list sets out the public EtherNet/IP functions allowed by default on the firewall. The action (Analyze / Block) applied to each command can be modified by clicking in the Action column. The Modify all commands button allows modifying the action (Analyze / Block) applied to all commands.

### Other commands allowed

This list makes it possible to allow additional EtherNet/IP commands blocked by default on the firewall. It is possible to Add or Delete elements to or from this list by clicking on the relevant buttons.

## Support

Disable intrusion prevention | When this option is selected, the scan of the EtherNet/IP protocol will be disabled and traffic will be authorized if the filter policy allows it.
Log every EtherNet/IP query | Enables or disables the logging of EtherNet/IP requests.
Automatically detect and inspect the protocol | If this protocol has been enabled, it will automatically be used for discovering corresponding packets in filter rules.