Disabling Database Write Access for Unauthorized Nodes

By default, iFIX SCADA servers accept database write requests from any remote node. However, you may want to prevent unknown or unauthorized nodes from writing to a SCADA server by entering specific settings into the server's network initialization file, NETWORK.INI. This file contains the parameter accept_unauthorized_writes, which controls whether the SCADA server accepts database writes from iClients.                   

When the accept_unauthorized_writes parameter is not present in the NETWORK.INI file or set to ON, the SCADA server accepts write requests from any computer. When the parameter is set to OFF, access is restricted to the View clients you specify regardless of who is logged into the remote nodes. The exact nodes that can access a SCADA server's database are defined by listing them in the NETWORK.INI file using the following syntax:

writenode#=nodename

For example, to provide access for the View clients, VIEW01 and VIEW05, to a remote server, configure your server's NETWORK.INI file as follows:

[WRITEACCESS]

accept_unauthorized_writes=OFF

writenode1=VIEW01

writenode2=VIEW05

If you subsequently want to restrict database access to VIEW01 only, you can remove VIEW05 from the file. Likewise, if you want to provide VIEW10 access to the SCADA server's database, you can add the following line to the file:

writenode2=VIEW10

Notice that VIEW10 is assigned the same number that VIEW05 had. This is necessary because all node numbers must be consecutive. You cannot define writenode1 and writenode3 without also defining writenode2.

 

See Also

Important Notice

You do not have the latest version of iFIX! You are missing out on the newest capabilities and enhanced security.

For information on all the latest features, see the iFIX product page.

For more information on upgrades, contact your GE Digital sales agent or e-mail [email protected].

For the most up-to-date documentation, go here.