Ewon Cosy+ function changes in firmware 23.0

A) FTP server

Changes:

• Disabled by default
• Available on VPN and LAN interfaces; no longer available on WAN interfaces

Description:
The Ewon FTP server is now disabled by default (factory settings and after reset).
It can be enabled on VPN and/or LAN interfaces via the extended parameter 'ClosedDevice'.
Example values are provided; see(link) for details

The parameter can be set using the Tabular output function under Setup > System > Memory > Tabular output > Edit COM cfg.

B) NTP server

Changes:

• Disabled by default

Description:
The Ewon's NTP server is disabled by default. To use the Ewon as an NTP relay, the NTP server must be activated manually under Setup > System > Main > Net Services > NTP server.

C) USB over IP

Changes:

• Disabled by default
• Available for VPN and LAN; no longer available for WAN interfaces

Description:
USB over IP enables access to a USB device via a Talk2m connection, which is displayed locally in eCatcher. To use this function, it must be activated manually under Setup > System > Communication > General > USBIP.

When activating, the default values for Log Level and Start Port can be retained.

Note: A link to the USBIP setup page is available on the Cosy+ overview page under the Gateway status section.

D) HTTP server

Changes:

• Available for VPN and LAN; no longer available for WAN interfaces

Description:
The Ewon HTTP server used to display the web configuration pages is no longer accessible via the WAN interface.

E) SMTP client

Changes:

• SMTP client restricted to VPN interface; no longer available over LAN or WAN (including WiFi and cellular)

Description:
The SMTP client used to send email or SMS notifications (via digital inboxes) now only works over the VPN interface using the Talk2m mail relay.
The use of a separate SMTP server is no longer supported.

F) Profinet Explorer

Changes:

• The network scan now only starts when the user clicks the Refresh button.

Description:
Previously, the Profinet Explorer started the scan automatically when the page was opened. Now the scan must be started manually by clicking the Refresh button.

Path: Setup > System > Main > Network services > Profinet Explorer

G) DynDNS

Changes:

• No longer supported.

Description:
The DynDNS function (dynamic DNS) has been removed from the Ewon device.

Authentication logs:
The Ewon device now logs successful and failed login attempts across all its different configuration interfaces (web server, EBD, FTP server, etc.)

Example EventLog messages:

Logs for the use of data protection assets:
Logging has been added to track the configuration and use of privacy assets (e.g. email and SMS). The log records when values are configured and when they are used.

Example EventLog messages:

Buffer for the Privacy Asset Log (PAL):
A persistent Privacy Asset Log (PAL) has been implemented to fulfill RED requirements and ensure that PrivacyAssetEvent logs are preserved even after a reboot.
A new export block descriptor (EBD), dtPAL, allows all log entries to be downloaded to a single file without deleting them.

EBD syntax example: http://#deviceIP#/rcgi.bin/ParamForm?AST_Param=$dtPAL$fnLogText.txt

Example of the content of the PAL log:
2025-05-27 12:19:18;1342215689;di-Sending email(s) to configured address(es) due to a digital input event (1)

2025-05-27 12:04:23;-268470016;ecfg-Privacy parameter of the COM configuration was changed (DI2AlarmSMSRecipients)

Note: The PAL saves events in three rotating log files, which are located in /usr/PALog/ and are each up to 0.3 MB in size. Older files are automatically deleted to comply with the storage limits.

Device configuration via FTP:
The FTP server is deactivated by default and must first be activated via the graphical user interface (table editor). If it is activated via the LAN interface, it must be deactivated after use unless the physical and LAN access is secured.
Alternatively, the configuration can also be used via a USB stick.

Backup / restore (eBuddy):
Backup and restore via eBuddy is carried out via the FTP server, which must first be activated via the GUI. If the FTP server was activated via the LAN interface, it must be deactivated after use unless physical and LAN access is secured.

Remote access to USB devices:
As the USB-over-IP function is disabled by default, you must first enable it on the Ewon device before you can remotely access the connected USB device.
A link to the USB over IP setup page is available on the Cosy+ overview page under the Gateway status section.