...
Only outbound connections are required for regular Solar-Log™ operations. Access to the web interface and the Modbus TCP interface of the Solar-Log™ are the exceptions, but generally, this is only required within the local network. All functions listed below are not necessary and need to be specifically activated in the configuration when they are to be used. In large networks with a high level of security, it is often not allowed to open the required outgoing ports. Usually, a proxy server is available in such networks to allow HTTP and FTP export connections via a tunnel. The Solar-Log™ can also establish HTTP and FTP connection connections via proxy servers that use the "CONNECT" method. Use the following table as a guide on which ports need to be opened if you have problems with one of the functions that require Internet access – specific router/firewall configurations.
...
This method of direct remote access to the Solar-Log™ is not particularly secure and SDS Solar-Log GmbH does not recommend its long-term use. Nevertheless, if port forwarding is still needed, be sure that the access rights have been adequately set up to make third-party access extremely difficult. Access should be definitely limited to the required port (e.g. 80) and the device should be password protected.