User Manual

Privacy and Security
8-12 Vscan Extend – User Manual
5721203-100
Rev. D
Local Archive - Security capabilities
The Vscan Extend is provided with an internal archive, for
storing images and patient data locally on the system. The local
archives file repository and patient database do not support file
sharing or remote connection. These can only be accessed
locally.
The patient database is protected with the authentication for
access requirements and no possibility of remote access.
DICOM connections – Security capabilities
The DICOM connection works as defined by DICOM guidelines.
The application accepts connection only to/from DICOM entities
with IP-address, AE Title and port number matching the
configured parameters in the Vscan Extend Ultrasound system.
The communication sessions are on demand and are always
initiated locally from the system.
The Vscan Extend Ultrasound system’s internal firewall has
exemptions for ports used by the defined DICOM dataflows in
the system. Defining a new DICOM dataflow, or changing an
existing dataflow, will cause the internal firewall configuration to
automatically change. This ensures that only ports configured
for a dataflow have an exemption in the internal firewall.
Windows share
Windows share access can be secured by defining a dedicated
user on the server side. The user credentials for the network
share user must be entered in the configuration UI on the Vscan
Extend Ultrasound system.
NOTE: There is no network file share on the Vscan Extend Ultrasound
system.
Network infrastructure
The infrastructure of the network where the Vscan Extend is
connected must be configured to allow traffic as described in
Inbound firewall configuration and Outbound firewall
configuration sections. All other traffic to and from the Vscan
Extend can be blocked in the network infrastructure to prevent
unintended access.