The ICS Integrity web interface allows you to configure justifications for open ports. You can specify the ports and associated services for every baseline that you need to create. Use this method for small changes to open port justifications.
If you have a large amount of open port information to add to Integrity, use a spreadsheet to compile and import the data. For more information, see Importing Spreadsheet into Open Ports Justification.
To create the open ports justification:
-
Open the ICS Integrity web interface.
-
In the left most menu, select Asset Hierarchy, and then click the Settings for Open Port Justification node you previously created. The Open Port Justification window is displayed.
-
Click Add Justification Item.
-
Type the values to define the open port and the justification for that open port. Fields marked with a red asterisk indicate the field is required if a workflow is implemented for baselines. You can find the values for the required fields in the open port object in the Recon asset configuration. The Listening Port(s) value can include a single port number, a range of numbers, or a series of comma delimited numbers.
-
Click Save and refresh the ICS Integrity web interface. The identifier for the justification node in the left pane indicates the Listening Port(s) values of that justification.