Specifications

Crestron DGE-2 Digital Graphics Engine
Operation – Security Infrastructure
Since the DGE-2 does not use a traditional hard drive but rather an image that is
restored every time the touch screen is rebooted, any virus infection is cleared
immediately after a reboot. However, using the currently available tools and
techniques, Crestron has provided an infrastructure that protects against possible
virus infections.
1. Executables/Scripts brought in on external media
The implementation of the DGE-2 series has restrictions on starting any
application or script. The only applications that can be started are those allowed
by Crestron and these can only be started from the Crestron project.
2. Downloaded Program/Script
The browser is customized in such a way that files cannot be downloaded. The
only files the browser can open are the files it has plug-ins for, such as PDF, etc.
The user cannot change the options, as this window has been disabled.
3. Browser Hijack and Browser vulnerability
Crestron has patched all currently known hijacks and vulnerabilities. Future
updates can be downloaded from the Crestron Web site.
4. Email Viruses
There is no e-mail client installed on the DGE-2, so email-based viruses cannot
be executed.
5. Viruses that attack Web/FTP servers
The DGE-2 does not run a Web or FTP server and is therefore not listening to
port 21 or 80. The only ports the system listens to are the ports registered to
Crestron.
6. Virus from other machines on the network
Since drives on the DGE-2 can be shared on the network, it is possible that a
virus can write itself to files/folders on these shares. Our recommendation
therefore is to share as “Read-Only”, so that viruses cannot attach themselves to
files on the DGE-2.
7. ActiveX and Java
The DGE-2 has ActiveX disabled and has no Java Virtual Machine installed.
These applets cannot run on the DGE-2.
NOTE: While browsing the Internet with the DGE-2, clicking on a link may cause a
message box titled “Restrictions” to appear that contains the text “This operation has
been cancelled due to restrictions in effect on this computer. Please contact the
system administrator.” If this message appears, checking Enable
Pop-ups in the “Embedded Apps” window (refer to “Embed Apps (Embedded
Applications)” which starts on page 35) may correct this error. Other restrictions
may also cause this error, so this may not prevent all occurrences.
Operations Guide – DOC. 6809E Digital Graphics Engine with DigitalMedia™ CAT Connectivity: DGE-2 • 63