User Guide

System Security Guidelines

Current Software and Firmware Version Status

A6V11979532_en_b

11 | 26

3 System Security Guidelines

The NK823x Ethernet port is a BACnet gateway that can integrate legacy fire and

intrusion detection systems over serial connections and provide Cerberus DMS

with a BACnet/IP connectivity over local and remote networks.

NK823x units can also support onboard I/O lines and local DF8000 I/O modules.

NOTICE

The NK823x firmware specific for Desigo CC/Cerberus DMS must be downloaded

to the NK823x unit before using it with Cerberus DMS. For instructions, in the

Cerberus DMS online help, see Checking and Updating NK823x Firmware and

Kernel.

Fig. 1: NK823x Ethernet Port

NOTICE

BACnet/IP unprotected protocol on TCP/IP

The communication between Cerberus DMS and NK823x is based on the

BACnet/IP, which is an unprotected protocol on TCP/IP. This requires that the

connection between Cerberus DMS and the NK823x Ethernet port must be

protected from attacks and unauthorized access.

Fig. 2: Unprotected Connection Between Cerberus DMS and NK823x

LAN ( Ethernet TCP / IP )

Server / Client Client

AlgoRex

CS11 STT11/20 DF8000

Sintony

SI410

NK823x CC is BACnet GW

Upstream Protocol

BACnet/IP

FS20