Security Hardening Guide for Rail Wi-Fi 4 Series

This guide provides detailed instructions on configuring and securing Rail Wi-Fi 4 Series devices, which serve as access points or clients in wireless networks for train-to-ground communication. It outlines best practices for security, including the deployment of devices within access-controlled environments and the necessity of using secure communication mechanisms such as HTTPS and TLS encryption. The document includes sections on initial setup, TCP/UDP port status, and recommended settings to enhance security. It emphasizes the importance of disabling unused services and suggests using secure protocols to mitigate security risks. Additionally, the guide discusses the management of HTTPS and SSL certificates, recommending the use of TLS v1.2 for secure applications. It also covers the Accessible Net List function, which allows for the management of remote host IP addresses to prevent unauthorized access. Overall, the guide serves as a comprehensive resource for ensuring the security of Rail Wi-Fi 4 Series devices.