Cooper SMP 4 - Securing the Substation

SMP Gateway User Manual • 17
REAL-TIME
DATA EXCHANGE
MODBUS
SLAVE
MODBUS
MASTER
RS-232
CONNECTION
RS-232
CONNECTION
WEB
SERVER
IEC 1131
SOFT PLC
PASSTHRU
VISUAL
SUBSTATION
SNMP
SCADA
INTERNET
EXPLORER
VISUAL
SUBSTATION
HMI
DEVICE
DNP3
SLAVE
SEL
MASTER
TCP/IP
CONNECTION
RS-232
CONNECTION
SCADA
DEVICE
STATS LOGS TRACES
MAINTENANCE
TOOLS
LOCAL HMI
TOUCH
SCREEN
Figure 10 The substation SMP Gateway
2.2.6 Securing the Substation
Widespread data access within the SMP Gateway can become an important security risk if it is
compromised, but it can also become a security asset. This is why SMP Gateways are ready for
NERC CIP-002-1 to CIP-009-1 Cyber Security Standards. The gateway provides a single point of
access to all substation data. The security features of the SMP Gateway allow you to protect the
substation devices (see Figure 11).
If y
ou activate the security features within your substation SMP Gateway, you will be able to:
 comply with authentication and authorization policies;
 set up a firewall to protect from substation LAN security breaches;
 monitor and lock out remote connections.
File integrity check is also periodically performed on the SMP Gateway files.
The access inside the firewall protection has additional layers of protection, so that only a few
users of your choice will have the possibility to modify parameters inside the substation.