Siemens SIMATIC NET CP 443-1 Advanced - Configuration and operation; 6.1 Security recommendations

CP 443-1 Advanced (GX30)
Manual, 03/2019, C79000-G8976-C256-05
63
Configuration and operation
6
6.1
Security recommendations
Keep to the following security recommendations to prevent unauthorized access to the
system.
General
● You should make regular checks to make sure that the device meets these
recommendations and other internal security guidelines if applicable.
● Evaluate your plant as a whole in terms of security. Use a cell protection concept with
suitable products.
● Do not connect the device directly to the Internet. Operate the device within a protected
network area.
● Keep the firmware up to date. Check regularly for security updates of the firmware and
use them.
● Check regularly for new features on the Siemens Internet pages.
– Here you can find information on Industrial Security:
Link: (http://www.siemens.com/industrialsecurity)
– Here you will find information on security in industrial communication:
Link: (http://w3.siemens.com/mcms/industrial-communication/de/ie/industrial-ethernet-
security/Seiten/industrial-security.aspx)
– You will find a publication on the topic of network security (6ZB5530-1AP0x-0BAx)
here:
Link:
(http://w3app.siemens.com/mcms/infocenter/content/de/Seiten/order_form.aspx?node
Key=key_518693&infotype=brochures&linkit=null)
Enter the following filter: 6ZB5530
Physical access
Restrict physical access to the device to qualified personnel.
Network attachment
Do not connect the PC directly to the Internet. If a connection from the CP to the Internet is
required, enable the security functions or arrange for suitable protection before the CP, for
example a SCALANCE S with firewall.