BACnet/IP

Service management

"Confirmed services" tab

This table lists the IDs and associated confirmed BACnet/IP services (services that require a reply) that have been predefined on the firewall. These codes are classified by service set (Service choice): Alarm and Event, File Access, Object Access, Remote Device Management, Virtual Terminal et Security.

Predefined confirmed BACnet/IP services are allowed by default (Analyze action) and this action can be modified for each one of them. The buttons Block by service set, Analyze by service set and Modify all services allow modifying the action (Analyze / Block) applied to the selected service set or to all BACnet/IP services listed in the table.

Other confirmed services

This list allows authorizing additional confirmed BACnet/IP service IDs blocked by default by the firewall. It is possible to Add or Delete elements to or from this list by clicking on the relevant buttons.

"Unconfirmed services" tab

This table lists the IDs and associated unconfirmed BACnet/IP services (services that do not require a reply) that have been predefined on the firewall.

Predefined unconfirmed BACnet/IP services are allowed by default (Analyze action) and this action can be modified for each one of them. The Modify all services button allows modifying the action (Analyze / Block) applied to all BACnet/IP types listed in the table.

Other unconfirmed services

This list allows authorizing additional unconfirmed BACnet/IP service IDs blocked by default by the firewall. It is possible to Add or Delete elements to or from this list by clicking on the relevant buttons.

Support

Disable intrusion prevention	When this option is selected, the scan of the BACnet/IP protocol will be disabled and traffic will be authorized if the filter policy allows it.
Log every BACnet/IP query	Enables or disables the logging of BACnet/IP requests.