Emerson WirelessHART Gateways

Restrict access to ports TCP/33333, TCP/5094, and UDP/5094-5126. Restrict physical access to the Gateway and to instruments. Enable the Remote Logging feature found under System Settings -> Gateway -> Logging. Change passwords on all built-in user accounts to complex passwords. Run the Security Setup Utility to generate client certificates; ensure that the insecure HART-IP and AMS protocols are disabled and instead only enable the AMS Secure, HART-IP Secure, and other ‘Secure’ versions of protocols are enabled. Note, however, that once ‘secure’, these protocols will be encrypted and will make monitoring for malicious instrument changes more difficult.