KNX Security

[ergo14]

What are the basic steps/best practices to protect home KNX installation - especially from misconfigured network? I have Gira X1 - I don't see an option to somehow secure the network interface from programming.

I was thinking I should:
1. Ensure no uPnP is enabled
2. Change default IP multicast address and port for X1
3. Should I set BCU key for my project? (and then do I need to just download application or do full download?)
4. Should but MDT secure module just in case, and that would protect me from destructive scenarios like bricking devices remotely.
5. Anything else?

[meti]

Use a decently configured firewall and router.
I'd say skip 1 and 2 - this is just obscuring things, not protecting anything.
Maybe opt for KNX IP Secure devices (X1 unfortunately doesn't support this).

[S. De Bruyne]

Check also here: https://www.knx.org/knx-en/for-profe...ecklist-en.pdf
(Mind that this is also considering installations with public access, like hotels, schools, etc.)