...

• Access restriction
• Black / White access limitation

Recommendation

To achieve a reasonable level of security, while not imposing big changes in software and the ALMA Production Environment (APE), we believe a mixture of the Firewall and a reduced Custom implementation would allow a secured environment to work with.

• The firewall would be configured to block all communications to port 9000 of gas02, with the exception of specific allowed services (source IPs), such as the ObopsOnlineServer
• The ComponentCallerAPI would block all component / method calls, except the allowed ones, such as the weather station information
  • Allowed methods would be configured in the ComponentCaller XMLDoc

Discussion

Conclusions

The conclusions will be prepared after reviewing by the stakeholders and possible discussion meetings are held.

...