10Network and IT Guidance Technical Guidewww.eaton.com/lightingsystemsEaton's view on cybersecurityEaton views security as a cornerstone of a safe, dependable and reliable electrical system. Accordingly, the all Eaton connected lightingsystems employ current industry best practices to reduce, identify, contain and manage security risks. These systems have been designedand engineered with wireless security as a key requirement with flexibility to accommodate improvements if new security attack surfacesare identified. The Eaton Product Cybersecurity Center of Excellence (PCCoE) provided guidance throughout the development of each systemand offers Eaton customers an Internet accessible portal to identify emerging threats, find ways to secure products against them and helpcustomers deploy and maintain Eaton product solutions in a secure environment. More information on the Eaton PCCoE can be found atwww.eaton.com/cybersecurityNetwork topology optionsThe LumaWatt Pro network provides the following topology options:1. Gateways on Separate Secure Network, on premise - IT does not want the system on the corporate LAN2. Cloud Connected Secure Connections, (multiple sites) - Provides secure access to multiple locations - Provides secure access tomultiple locations3. Corporate LAN Deployment with L2 VLAN - Lighting network exists on a Layer 2 VLAN - Lighting network exists on a Layer 2 VLAN4. Corporate LAN Deployment with BMS Connection – Mode 15. Corporate LAN Deployment with BMS Connection – Mode 26. Enterprise Energy Manager Deployment with BMS ConnectionEach topology is explained in detail in the following sections.Sensor Network PoE SwitchGatewayHTTPS- Separate (Isolated from IT) Network- Web Access only if connected to theSensor Network PoE SwitchEthernetEthernetEthernetLumaWatt ProEnergy ManagerEthernetInterface 2SSLSSL, SCPIntelligentfixturesWireless Network Gateway GatewayFloor sub-panelOption 1: Gateways on Separate Secure Network, on premisePhysically Isolated LAN, Secure Shell, SSLWireless- 2.4 Ghz spectrum- AES-128 bit encryption- Hardened LINUX- No “root” access- Only (HTTPS SSH)ports open(120/277VAC mains power)