Security Hardening Guide for Rail Wi-Fi 4 Series

This guide provides detailed instructions on configuring and securing Rail Wi-Fi 4 Series devices, which serve as access points or clients in wireless networks for train-to-ground communication. It outlines best practices for security, emphasizing the importance of reviewing and testing configurations before deployment. The document includes sections on general system information, initial setup, and specific configuration and hardening recommendations. It details the necessary steps for secure deployment, including disabling unused services and employing secure protocols such as HTTPS and SSH. Additionally, it covers the management of user accounts, logging, and monitoring, as well as firmware upgrades and configuration backups. The guide also discusses the Accessible Net List function, which allows administrators to control access to the device based on IP addresses. Overall, it serves as a comprehensive resource for ensuring the security of Rail Wi-Fi 4 Series devices in operational environments.