Siemens Simatic S7-1500 / ET 200MP - Protection; Overview of the Protection Functions

Automation system
System Manual, 01/2023, A5E03461182-AK
223
Protection
10
10.1 Overview of the protection functions
Introduction
This section describes the following functions for protecting the S7-1500 automation
system/ET 200MP distributed I/O system against unauthorized access:
Protection functions
S7-1500
ET 200MP
Protection of confidential configuration data
✓
---
Access protection
✓
---
Know-how protection
✓
---
Copy protection
✓
---
Protection by locking the CPU/interface module
✓
✓
Further measures for protecting the CPU
The following measures additionally increase the protection against unauthorized access to
functions and data of the S7-1500 CPU from external sources and via the network:
• Deactivation of the Web server
• Deactivation of the OPC UA server (you can find additional information on the security
mechanisms for OPC UA server in the Communication
(https://support.industry.siemens.com/cs/de/de/view/59192925/en) Function Manual)
• Deactivation of the time synchronization via an NTP Server
• Deactivation of the PUT/GET communication
When you use the Web server, protect your S7-1500 automation system against
unauthorized access:
• By setting password-protected access rights for specific users in the user administration.
• By using the pre-set option "Permit access only via HTTPS".
The option allows access to the web server only with the secure hypertext transmission
protocol HTTPS.