Airwall configuration for SBH300 - Verasys - LIT-12013026 - LC-ENT100-01 - LC-SBH300-0 - LC-SBH300-0LA - LC-SBHPNL-01 - Building automation software - Verasys Enterprise - 5.0

Verasys Enterprise Security and IT Guide

Brand
Verasys
Product name
Verasys Enterprise
Document type
User Guide
Document number
LIT-12013026
Version
5.0
Revision date
2023-09-19
Product status
Active
Language
English

The SBH300 includes Tempered Airwall zero-trust software. The Tempered Airwall zero-trust software uses Host Identity Protocol (HIP) to secure network communication between the SBH300 and OBC. In addition, it secures communication for any remote access requirements.

Configure the SBH300 to use the following DNS settings:
  • Auto DNS = Off
  • Primary DNS = 9.9.9.9
  • Secondary DNS = 149.112.112.112
The SBH300 communicates outbound to OBC on the following ports:
  • UDP 53 for the DNS servers
  • TCP 8096 for encrypted TLS traffic
  • UDP 10500 for encrypted HIP traffic

Before you can access the SBH300, you must first commission the Airwall Agent. The Airwall Agent provides access to the SBH300 from anywhere and secures your connection with industry standard Zero Trust Based Security.

The following table lists the documentation for installing the Airwall Agent and connecting to the SBH300 on Windows, Apple macOS, Apple iOS, and Android devices.
Table 1. Related documentation
For information about Refer to
Installing the Airwall Agent on a Windows device Verasys Airwall Agent for Windows Application Note (LIT-12014307)
Installing the Airwall Agent on a macOS device Verasys Airwall Agent for macOS Application Note (LIT-12014321)
Installing the Airwall Agent on an iOS device Verasys Airwall Agent for iOS Application Note (LIT-12014323)
Installing the Airwall Agent on an Android device Verasys Airwall Agent for Android Application Note (LIT-12014322)
Note: To begin the set-up process for Airwall, contact Verasys Support at be-verasyssupport@jci.com. The support team provides a form for you to complete with your site information and the list of users that you want to give access to the SBH300. This process may take up to 48 hours from the submission of the form.