OnRobot A/S
6Pages

5220 Odense Denmark info@onrobot.com onrobot.com This whitepaper is intended to inform potential customers about WebLytics infrastructure requirements prior to purchase. WebLytics is a production monitoring server application that is expected to run continuously. It should be installed on a dedicated PC by an IT administrator. Requirements for the host computer: • Windows Server 2019, Windows 10, Debian 10.7 or later, Ubuntu 18 or later. In addition to the system recommendations, the computer • should have continuous access to the Internet, should have UPS for safe and uninterrupted operation, needs scheduled host Operating System updates. The hosting environment must meet the following networking requirements: • Proper Ethernet network cabling in production environment for stable monitoring of robots and access to the Compute Box, Proper network connection between the robot, the Compute Box and the WebLytics server (company Intranet). The recommendation for the company Intranet connection is a router, connected to the public Internet, with: o o WiFi configured, DHCP enabled and configured, UPS for safe, uninterrupted operation.

WebLytics users will be able to access the WebLytics server from any PC or mobile device, via wired LAN or WiFi connection within the same company Intranet. Make sure that all cables are protected against any disturbances for the continuous connectivity between the devices and the WebLytics server. The illustration above shows the recommended network configuration. It is possible to deploy WebLytics in a different configuration, e.g., with several IP subnetworks connected by one or more routers. Regardless of the specific network configuration, it is important to ensure that the WebLytics...

WEBLYTICS SECURITY OVERVIEW Teglvaerksvej 47H 5220 Odense Denmark This document is based on the results of security tests and reviews of the WebLytics software performed by Prueba Cybersecurity, an independent cybersecurity company. ‘WebLytics Security Overview’ is designed to provide an overview of the WebLytics installation and how WebLytics handles important security issues to provide a secure service to the end users. Overview of WebLytics WebLytics is a locally installed software that operates in the local network to collect metrics from the robots, OnRobot Compute Boxes and OnRobot...

and reduce the risk of attack. Upon successful authentication, WebLytics uses a securely signed and managed web token for session management. The token is safeguarded from client-side theft vulnerabilities. Compliant telemetry collection Telemetric data is collected by OnRobot on a regular basis for development and product improvement purposes. To ensure GDPR compliance with telemetric data, collected data samples from different hardware have been reviewed and shown not to contain any GDPR sensitive information. No user information from the WebLytics installation is collected. External...

General recommendations Beyond the security implemented into the WebLytics product itself, a customer can increase their own security posture when handling WebLytics by following these recommendations: • Segregate the network where WebLytics and hardware units are deployed and ensure that proper firewalling is in place. Use a password manager to generate random passwords and store them securely. Use up-to-date browsers to access the WebLytics web interface. Provide access to the WebLytics web interface via a private network connection or company VPN. Secure physical access to the WebLytics...

Prueba Cybersecurity also had access to numerous OnRobot contacts throughout the process. OnRobot experts were able to supply information and access to all WebLytics systems, without creating any limitations that would hinder or obstruct Prueba Cybersecurity’s security tests or reviews. Throughout the process, the identified issues and the received hardening recommendations were handled by an immediate fix or recognized and prioritized for fixing by OnRobot. Prueba Cybersecurity understands that OnRobot is committed to fixing identified issues and to continuously delivering the required...