Programming concepts
7.6 Protection
S7-1200 Programmable controller
212 System Manual, V4.2, 09/2016, A5E02486680-AK
To access remote connection partners with PUT/GET instructions, the user must also have
permission.
By default, the "Permit access with PUT/GET communication" option is not enabled. In this
case, read and write access to CPU data is only possible for communication connections
that require configuration or programming both for the local CPU and for the communication
partner. Access through BSEND/BRCV instructions is possible, for example.
Connections for which the local CPU is only a server (meaning that no
configuration/programming of the communication with the communication partner exists at
the local CPU), are therefore not possible during operation of the CPU, for example:
● PUT/GET, FETCH/WRITE or FTP access through communication modules
● PUT/GET access from other S7 CPUs
● HMI access through PUT/GET communication
If you want to allow access to CPU data from the client side, that is, you do not want to
restrict the communication services of the CPU, follow these steps:
1. Configure the protection access level to be any level other than "No access (complete
protection)".
2. Select the "Permit access with PUT/GET communication" check box.
When you download this configuration to the CPU, the CPU permits PUT/GET
communication from remote partners
You can also protect the external load memory (memory card) from copies. To prevent the
copying of internal load memory to external load memory follow these steps:
1. From the device configuration of the CPU in STEP 7, select "Protection" from the General
properties.
2. In the "External Load Memory" section, select "Disable copy from internal load memory to
external load memory".
See also the topic Inserting a memory card in the CPU (Page 139) for a description of how
this property affects the insertion of a memory card into the CPU.