How to block Ewon Cosy+ services on the LAN and/or VPN interface

This document describes how to block all services/servers like HTTP, FTP, IPtoUSB,... on an Ewon Cosy+ device.

This can be needed when, for instance, HTTP and FTP servers cannot be used onsite because not matching the onsite security policies.

APPLICABLE PRODUCTS

Ewon : Cosy+  

IN THIS ARTICLE

• Block HTTP & FTP servers
• Block Ebuddy connections
• Block USBIP Service

Block HTTP & FTP servers

For this, first make sure your device runs the firmware 23.0s0 or above.
From this version, a new COM parameter is available called "ClosedDevice".
You can access it using the tabular edition of the device web interface.



The ClosedDevice parameter is a bitwise value that allows you to block the access to the web server (HTTP) and or the FTP server on the LAN and VPN IP interfaces. With firmware 23.0s0 the WAN interface is fully protected, so no service is available on this interface. 

Here is the table of the possible values :

The HTTP & FTP servers ports blocked by the ClosedDevice parameters are the ones configured in the COM parameters "IpsHttpP1", "IpsHttpP2" and "IpsFtpP"



NOTE : A reboot of the device is required to apply properly the blocking of the selected service.

Block Ebuddy connections

To block the Ebuddy UDP port 1507, you can set the COM parameter "CfgProtoDis" to 1.