Contents:1. About this manual .................................................................................. 51.1. Copyright ........................................................................................ 51.2. Disclaimer ..................................................................................... 51.3. Conformity ..................................................................................... 61.4. Trademarks .................................................................................... 61.5. Document conventions .................................................................. 61.6. Use of symbols .............................................................................. 71.7. Terminology .................................................................................... 71.8. Abbreviations ................................................................................. 81.9. Related documents ........................................................................ 91.10. Document revisions ....................................................................... 92. Introduction ........................................................................................... 102.1. General information about the COM600 series ........................... 102.2. COM600 product series variants and rationale ........................... 102.3. Overview ...................................................................................... 113. Security Guidelines .............................................................................. 133.1. Access Control ............................................................................. 133.1.1. Access Control .............................................................. 133.1.2. BIOS access ................................................................. 133.1.3. User Accounts ............................................................... 133.1.4. User groups .................................................................. 143.1.5. Local security policy ...................................................... 143.2. Ports and services ....................................................................... 163.2.1. Ports and services ........................................................ 163.2.2. Ports .............................................................................. 163.2.3. Windows Firewall .......................................................... 183.2.4. COM600 Configuration Service .................................... 213.2.5. Remote desktop ............................................................ 233.2.6. Time service .................................................................. 243.3. Security Event Monitoring ............................................................ 243.3.1. Windows Security Events ............................................. 243.3.2. COM600 Security Events .............................................. 253.4. Malicious Code Prevention .......................................................... 263.4.1. Data Execution Prevention ........................................... 263.4.2. Antivirus programs ........................................................ 273.5. Secure Patch Management ......................................................... 283.5.1. Windows Operating System updates ............................ 284. Appendix 1 ........................................................................................... 314.1. Launch Gateway Management Tool ............................................ 315. Appendix 2 ........................................................................................... 323COM600 series 5.0Cyber Security Deployment Guideline1MRS758267Issued:13.3.2015Version:A/24.5.2017