Ignition Evaluation for Vulnerabilities

[jose.granero]

• Has Ignition been independently evaluated for vulnerabilities and remediated/patched?

• Does Ignition have a released statement saying something to the effect that Ignition software is in a continuous state of vulnerability assessment and patching?

[Matrix_Engineering]

Leaving Port 8088 Open

If you’re properly using HTTPS/TLS, and have appropriate firewalls in place, then yes, you’re correct - the risk is significantly reduced. At that point, it basically comes down to your preference: is the additional maintenance burden of a VPN worth the reduced risk of some unknown exploit in Ignition compromising things. In pretty much all respects, the VPN is the “safer” option - I can’t make the decision for you, but if you don’t have a compelling reason to, I would be pretty cagey about expo…

@PGriffith mentions they have been externally checked but doesn't give much detail further

[JordanCClark]

IA Targeted in Ethical Hacking Competition: What You Need to Know

[jose.granero]

Thank you, Jordan

[bkarabinchak.psi]

One thing that will be on you for your projects is to make sure to use named queries so that you your vision clients do not need Legacy SQL Access - requiring this leaves you open to SQL injection.