Siemens SIMATIC ET 200AL - Basics; Network Security

Description
2.2 Setting up PROFINET
PROFINET with STEP 7 V15
38 Function Manual, 12/2017, A5E03444486-AH
Additional information
More information about SCALANCE W Industrial Wireless LAN components can be found in
the manual SIMATIC NET SCALANCE W-700
(http://support.automation.siemens.com/WW/view/en/42784493
).
More information about wired data transmission can be found in the manual SIMATIC NET
Twisted Pair and Fiber Optic Networks
(http://support.automation.siemens.com/WW/view/en/8763736
).
More information about wireless data transmission can be found in the manual Basics for
configuring an industrial wireless LAN
(http://support.automation.siemens.com/WW/view/en/9975764
).
You should also read the PROFINET installation guideline of the PROFIBUS User
Organization on the Internet (
http://www.profibus.com/nc/download/installation-
guide/downloads/profinet-installation-guide/display/). Various documents that assist with the
setting up of your PROFINET automation solution are available here:
● PROFINET planning guideline
● PROFINET installation guideline
● PROFINET commissioning guideline
● Additional documents for setup of PROFINET
2.2.4
Network security
2.2.4.1
Basics
Introduction
The topic of data security and access protection (Security) has become increasingly
important in the industrial environment. The increased networking of entire industrial
systems, vertical integration and networking of levels within a company and new techniques
such as remote maintenance all result in higher requirements for protecting the industrial
plant.
Data security solutions for office environments cannot simply be transferred one-to-one to
industrial applications to protect against manipulation in sensitive systems and production
networks.
Requirements
Additional security requirements arise from the specific communication requirements in the
industrial environment (real-time communication, for example):
● Protection against interaction between automated cells
● Protection of network segments
● Protection against faulty and unauthorized access
● Scalability of network security
● Must not influence the network structure