Siemens SCALANCE S615 - Security information; Firmware

1 Introduction
NAT_S615
Entry ID: 109744660, V1.1, 08/2017
5
 Siemens AG All rights reserved
Contents of this document
This document uses selected UseCases to describe the different options. Each
UseCase describes the starting situation, discusses the requirement and
addresses the advantages / disadvantages.
The aim is to give an overview of the available options and provide an adequate
solution for common use cases.
The following configurations are looked at in detail:
Table 1-1
UseCase
Mechanism
1.
Two-way communication with gateway
Standard routing
2.
Web server access without gateway
(active PC, passive CPU)
NAPT
3.
PG functions on multiple CPUs without gateway
Destination NAT
4.
NATing entire subnets
Destination NAT
5.
PG functions on multiple CPUs without gateway
in series machine manufacturing
Destination NAT
6.
Cross communication for series machines
Destination NAT
7.
Connection to control systems without gateway
(CPU as the active part)
Source NAT
8.
Reaction-free communication using VPN tunnel in
existing plants
Source NAT
9.
Reaction-free S7 communication in existing plants
Source and destination NAT
Note
The functions described in this document require firmware V04.01.01 in the
SCALANCE S615. Make sure that firmware V04.01.01 or higher is installed on
the module (see Chapter 4.2).