Keenetic PoE switch security
Information and instructions to the user
Document ID: KN-4710-CS-INFO-02
Revision: 1.1
Date: April 2026
Manufacturer: Keenetic Limited. Office 2703A, 148 Electric Road, North Point, Hong Kong.
1. Purpose of this document
This document provides the manufacturer’s description of the intended purpose, essential functionalities, security properties, and foreseeable misuse scenarios of the Keenetic PoE+ Switch 9 (KN-4710).
2. Product identification and general description
The Keenetic PoE+ Switch 9 (KN-4710) is a solution for powering and connecting network devices (e.g., IP cameras, VoIP phones, and wireless access points). With eight Power over Ethernet (PoE) ports, this switch eliminates the need for additional power adapters, simplifying installation and reducing cable clutter.
3. Intended purpose
The product is intended to connect Ethernet-capable devices within a local area network, forward data between those devices, and supply power through its PoE+ ports to compatible IEEE 802.3af/at devices, such as IP cameras, wireless access points, and VoIP telephones. It is intended to be connected to an upstream router or switch.
4. Security environment
The product is intended to be operated within a trusted or appropriately protected indoor Ethernet network. The upstream network connection must be protected by suitable network infrastructure, such as an appropriately configured router, gateway, or firewall, where protection against external or untrusted networks is required.
5. Essential functionalities
The product connects Ethernet-capable devices within a local area network and forwards data between connected devices and an upstream router or network switch. Its PoE+ ports additionally supply electrical power and data through the same Ethernet cable to compatible IEEE 802.3af/at devices. The product automatically detects compatible powered devices and negotiates their power requirements. Its Ethernet ports may also be used to connect non-PoE devices, in which case only network data is transmitted.
6. Security properties
The product is intended to be operated within a trusted or appropriately secured indoor local area network. It should be connected to external networks, including the internet, only through an appropriately configured router, gateway, or firewall. The product automatically forwards Ethernet traffic between connected devices and does not itself provide perimeter protection against external networks. Where required, network access control, traffic filtering, network segmentation, monitoring, and protection against unauthorised external access must be provided by the surrounding network infrastructure. Only authorised and appropriately secured network devices should be connected to the product. The switch and its network connections should be installed in a location protected against unauthorised physical access.
7. Technical support
Technical support for the product is provided via the Keenetic support portal, through which users may obtain product information and request assistance from the technical support team. The support portal is intended to assist with the installation, commissioning, configuration, software maintenance, troubleshooting, and ongoing operation of the product throughout its supported lifetime.
8. Security information
Security information for the product is provided through the product User Manual and related support resources. This information is intended to support the secure installation, configuration, administration, maintenance, and use of the product throughout its supported lifecycle.
9. Foreseeable misuse and cybersecurity risks
Foreseeable circumstances and misuse scenarios that may lead to cybersecurity risks include:
Connection of unauthorised or compromised devices
Connection to an unprotected or untrusted network
Connection of inadequately secured powered devices
Traffic overload
Connection of unauthorised, compromised, or inadequately secured devices may enable unauthorised access to the local network, attacks on connected devices, or disruption of network services.