Siemens S7-400 - Configuration and Operation; Security Recommendations

CP 443-1 Advanced
Equipment Manual, 03/2023, C79000-G8976-C256-07
53
Configuration and operation
6
6.1 Security recommendations
Keep to the following security recommendations to prevent unauthorized access to the
system.
General
• You should make regular checks to make sure that the device meets these
recommendations and other internal security guidelines if applicable.
• Evaluate your plant as a whole in terms of security. Use a cell protection concept with
suitable products.
• Do not connect the device directly to the Internet. Operate the device within a protected
network area.
• Check the Siemens Web pages regularly for the latest information.
– You can find information on Industrial Security here:
Link: (http://www.siemens.com/industrialsecurity)
– You can find information on security in industrial communication here:
Link: (https://support.industry.siemens.com/cs/ww/en/view/92651441)
• Keep the firmware up to date. Check regularly for security updates of the firmware and
use them.
Information regarding product news and new firmware versions is available at the
following address:
Link: (https://support.industry.siemens.com/cs/ww/en/ps/15353/dl)
Physical access
Restrict physical access to the device to qualified personnel.
Network connection
Do not connect the PC directly to the Internet. If a connection from the CP to the Internet is
required, arrange for suitable protection before the CP, for example a SCALANCE S with
firewall.
Security functions of the product
Use the options for security settings in the configuration of the product. These includes
among others:
• Enable the security functions of the CP and set up the firewall.
• Use the secure protocol variants HTTPS, FTPS, NTP (secure) and SNMPv3.