Cellular router - RWS200

RWS200 Cyber Security Guidelines
Product status
Document code
M213179EN
Revision
A
ft:locale
en-US
Product
RWS200
Document type
User guide

If you want to prevent the use of the SIM card in another device, obtain IMEI-locked SIM cards.

In IX20 cellular routers delivered before 2025, the firewall is disabled by default. To enhance security in IX20 and other cellular routers:

  1. Update your cellular router software to the latest version. You can find the latest software for the IX20 cellular router at the Digi International web site (digi.com). For other routers, see the manufacturer web site.
  2. Enable the firewall on the cellular router.
  3. Block all incoming connections.

  4. Open ports separately for the necessary traffic (Web UI, data reporting, cameras). The default ports are the following:

    • Web UI, DTO XML, Datex II: 8443
    • NTCIP polling: UDP: 8161, TCP: 8161
    • MES interface server listening TCP port: 50000
    • First fixed camera: 8043 (open only if absolutely required)
    • Second fixed camera: 8044 (open only if absolutely required)
    • PTZ camera: 8047 (open only if absolutely required)
  5. Make sure that the SSH port (22) is closed. Open it only when needed.

To keep your cellular router and RWS200 secure, update the cellular router software at least once a year during annual site visit.

Digi International has announced that WR21 cellular router is an end-of-life product. The last firmware update was released on June 21, 2024. They recommend updating the router to a supported version to receive new software with security updates.