Siemens SIMATIC NET SCALANCE SC622-2C

Security recommendations
SCALANCE SC-600 Web Based Management (WBM)
Configuration Manual, 10/2021, C79000-G8976-C475-03
21
• Authentication
Specifies whether an authentication of the communication partner takes place or
whether an authentication can be configured.
• Encryption
Specifies whether the transfer is encrypted or whether the encryption can be
configured.
Service/Protocol Protocol/
Port number
Default status
Configurable
Authenticati
on
Encryption
VLAN1
*)
VLAN2
*)
Port
Service
DHCPv4 Client
UDP/68
Closed
Open
--
✓
--
--
DHCPv4-Server
UDP/67
Closed
Closed
--
✓
--
--
DNS-Client
TCP/53
UDP/53
Outgoing
only
Outgoing only
--
✓
--
--
DNS-Server
TCP/53
UDP/53
Open
Closed
--
✓
--
--
DDNS
TCP/80
UDP/80
TCP/443
UDP/443
Outgoing
only
Outgoing only
--
✓
✓
--
Firewall State
Sync
UDP/3780
Closed
Closed
✓
✓
--
--
HTTP
TCP/80
Open
Closed
✓
✓
✓
--
HTTP Proxy
TCP/3128
TCP/8080
Outgoing
only
Outgoing only
✓
✓
Optional
--
HTTPS
TCP/443
Open
Closed
✓
✓
✓
✓
IPsec/IKE
UDP/500
UDP/4500
Closed
Closed
--
✓
✓
✓
NTP-Client
UDP/123
Outgoing
only
Outgoing only
✓
✓
--
--
NTP-Server
UDP/123
Closed
Closed
✓
✓
--
--
NTP-Server
(secure)
UDP/123
Closed
Closed
✓
✓
✓
--
OpenVPN-Client
UDP/1194
TCP/1194
Outgoing
only
Outgoing only
✓
✓
✓
✓
OpenVPN-Server
UDP/1194
TCP/1194
Closed
Closed
✓
✓
✓
✓
Ping
ICMP
Open
Closed
--
✓
--
--
RADIUS
UDP/1812
UDP/1813
Outgoing
only
Outgoing only
✓
✓
✓
--
SFTP
TCP/22
Outgoing
only
Outgoing only
✓
✓
✓
✓
Siemens Remote
Service
(cRSP/SRS)
TCP/443
Outgoing
only
Outgoing only
--
✓
Optional
✓
SINEMA RC
HTTPS/443 and
TCP/UDP
depending on
the server
configuration
Outgoing
only
Outgoing only
✓
✓
✓
✓