User Guide

System Security Guidelines
Current Software and Firmware Version Status
3
A6V11979523_en_b
11 | 26
3 System Security Guidelines
The NK823x Ethernet port is a BACnet gateway that can integrate legacy fire and
intrusion detection systems over serial connections and provide Desigo CC with a
BACnet/IP connectivity over local and remote networks.
NK823x units can also support onboard I/O lines and local DF8000 I/O modules.
NOTICE
The NK823x firmware specific for Desigo CC/Cerberus DMS must be downloaded
to the NK823x unit before using it with Desigo CC. For instructions, in the Desigo
CC online help, see Checking and Updating NK823x Firmware and Kernel.
Fig. 1: NK823x Ethernet Port
NOTICE
BACnet/IP unprotected protocol on TCP/IP
The communication between Desigo CC and NK823x is based on the BACnet/IP,
which is an unprotected protocol on TCP/IP. This requires that the connection
between Desigo CC and the NK823x Ethernet port must be protected from
attacks and unauthorized access.
Fig. 2: Unprotected Connection Between Desigo CC and NK823x
LAN ( Ethernet TCP / IP )
Server / Client Client
AlgoRex
CS11 STT11/20 DF8000
Sintony
SI410
NK823x CC is BACnet GW
Upstream Protocol
BACnet/IP
FS20