白皮书
Formlabs Logo

Connectivity and security

Connectivity and security

这是一个有关 Formlabs 硬件和软件的连接和安全性概述。有关 Formlabs 所收集信息的完整详情,请查阅 Formlabs 隐私政策,或将问题通过电子邮件发送到 [email protected]

Formlabs 运营着多个数据交换平台:

数据传输采用行业标准 256 位 RSA 加密技术进行加密。

PreForm、formlabs.com 和打印机的通信示意图。

Formlabs 网站和 Dashboard

Formlabs 网站提供有关产品、在线商店和教育资源的信息。Dashboard 是一个在线工具,Formlabs SLA 打印机操作员可利用该工具远程监控其打印机的行为。连接后,Dashboard 会提供有关当前和过去打印任务的状态、一段时间内的材料使用情况以及其他有用的统计数据。

要激活 Dashboard,每位用户都必须创建一个 Formlabs 账号、,将 Formlabs 设备连接到互联网,并通过触摸屏界面向 Dashboard 注册每个设备。有关 Dashboard 所收集的信息的详情,请参阅 Formlabs 隐私政策

连接

PreForm 和 Formlabs 硬件通过端口 443 (HTTPS)、api.formlabs.comgateway.formlabs.com 与 Dashboard 进行通信。

安全

Formlabs 网站和 Dashboard 都使用 HTTPS URL,并使用行业标准的 256 位 RSA 加密进行加密。

Formlabs 使用 Amazon Web Services(亚马逊网络服务系统,AWS)存储数据。AWS 跨多个设备和多个环境控制设施储存冗余数据。AWS 基站和控件接受 SAS-70 II 类年审,且 AWS 信息安全管理流程和控件已获得 ISO 27001 认证。

请确保您的防火墙并未屏蔽这些服务器:

  • api.formlabs.com
  • gateway.formlabs.com
  • *.amazonaws.com
    • 我们部分服务的完整 URL 是动态分配的,因此无法提供精确的 FQDN 列表。同样,我们也没有固定 IP 范围列表。

Formlabs 设备

连接

有三种方法可以将电脑与 Formlabs 设备连接:

  • 通过 USB,不接入任何网络。通过 USB 连接线将运行 PreForm 的电脑与您的设备连接,以更新固件或者(为打印机)接收打印任务,无需使用任何类型的网络连接。
  • 仅通过局域网 (LAN) 访问。通过以太网或 Wi-Fi 将您的设备连接到局域网。对于打印机,如果选择局域网方法,则允许多台运行 PreForm 的电脑连接并提交打印任务。
  • 已联网的局域网 (LAN)。Formlabs 硬件可以与接入互联网的局域网连接。Formlabs 设备必须连接到互联网才能连接 Dashboard 并通过触摸屏实现固件更新。

进一步了解如何连接您的 SLASLS 设备。

如果通过触摸屏设置启用 Formlabs 设备,则该设备会发送性能数据(例如激光校准和打印成功率),以帮助我们排查问题并改进 Formlabs 硬件的功能。

安全

Formlabs 硬件包含以下安全配置:

  • 通过 SSL 将所有外部数据加密。
  • 固件更新采用签名和加密方式。
  • 只使用一个端口 (35) 来处理与 PreForm 之间的所有打印上传和设备通信。
  • 使用行业标准的多播 DNS 发现设备。

打印机通过 NTP(UDP 端口 123)与下列服务器同步时间。请确保您的防火墙并未屏蔽这些服务器:

  • *.formlabs.pool.ntp.org
    • 目前,Formlabs 硬件无法配置为使用客户管理的内部 NTP 服务器。
    • 我们部分服务的完整 URL 是动态分配的,因此无法提供精确的 FQDN 列表。同样,我们也没有固定 IP 范围列表。

PreForm 桌面软件

Connectivity

PreForm operates in the same three connectivity modes as Formlabs devices: without network access, via LAN, and via LAN with internet access. For network connected printers, PreForm communicates through port 35 and checks for updates on updates.formlabs.com via port 443.

PreForm includes the option to participate in a software quality improvement project which logs information for Formlabs to improve PreForm. Choose whether to contribute to the quality improvement project by accessing Help > Help Improve PreForm... in the PreForm menu bar. To contribute, PreForm must operate on an internet-connected computer.

If you opt to participate in PreForm quality improvement, PreForm sends usage data to Formlabs at the URL telemetry.formlabs.com. You can opt to send anonymized crash and usage information, which does not include 3D model data or personal information. You can also opt to upload FORM files to help improve Formlabs products, which may include protected information. Opt out of FORM file collection if your files could contain protected health information or information subject to export controls.

PreForm logs and reports three major events:

  • When PreForm starts.
  • When the user clicks a button.
  • When a print job is sent to the printer.

New versions of printer firmware can be uploaded to the printer via PreForm. If PreForm is on an internet-connected computer, the software checks for new firmware via updates.formlabs.com. The specific URL for Form 2 firmware is updates.formlabs.com/latest/update-check-form-2-firmware-v2. The specific URL for PreForm updates is updates.formlabs.com/latest/update-check-preform-v2. If PreForm cannot connect to the internet, a new firmware version must be saved on a local disk and selected within PreForm in order to update.

Security

PreForm is distributed via a signed installer (for Windows) and signed app bundle (for Mac OS).

Please make sure not to block these on your firewall:

  • updates.formlabs.com
  • telemetry.formlabs.com
  • Sentry ingestion endpoints, used for crash and bug tracking:
    • *.ingest.sentry.io
    • *.ingest.de.sentry.io
    • *.ingest.us.sentry.io
    • Full URLs on some of our services are dynamically allocated, so we cannot provide a list of exact FQDNs. Similarly, we do not have a list of fixed IP ranges. For more information on the IP ranges Sentry uses, see their support page on the topic.

Automatic updates

PreForm uses the Omaha Updater Service to automatically update the software, ensuring that users receive the latest features, improvements, and security patches. The Omaha service operates in the background to streamline the update process, allowing you to stay on the most up-to-date version of PreForm without manual intervention.

As part of this process, PreForm will make requests to the following URLs for update verification and download:

  • https://formlabs-cdn.omaha-consulting.com
  • https://omaha.formlabs.com

These URLs are used by the Omaha service to check for available updates and securely download the latest version of PreForm when necessary. It is important that the software can connect to this service to ensure that updates are applied promptly.

For network administrators and those with strict firewall policies, please ensure that outbound connections to these URLs are allowed for PreForm to function correctly and receive automatic updates.

远程打印

Formlabs 打印机能够将打印任务发送到不在同一网络中的打印机。

注:

远程打印只适用于特定的 Formlabs 打印机。更多信息请参阅以下支持文档:

连接

PreForm、Formlabs 打印机、Formlabs.com 和 Amazon Web Services (AWS) 服务器均通过端口 443 (HTTPS) 通信。

打印机、Formlabs.com 和 AWS 通过端口 443 进行通信的示意图。

安全

所有远程打印任务都使用我们的专用 Formlabs AWS 帐户存储。在传输过程中,信息先通过 HTTPS SSL 进行加密,然后到达我们的专用帐户。上传和下载通过签名的一次性临时上传 URL 来保证安全。

请确保您的防火墙并未屏蔽这些服务器:

  • gateway.formlabs.com
远程打印在 PreForm、Formlabs.com 和 AWS 之间传输的示意图。