Siemens SIMATIC TeleControl DNP3 - Page 30

Configuration
3.1 Security recommendations
Configuration - DNP3
30 Configuration Manual, 11/2018, C79000-G8976-C508-01
Security functions of the product
Use the options for security settings in the configuration of the product. These includes
among others:
● Protection levels
Configure a protection level of the CPU.
You will find information on this in the information system of STEP 7.
● Security function of the communication
– Using the security functions of the telecontrol protocols.
– Use the secure protocol variants, for example NTP (secure) or SNMPv3.
– Leave access to the Web server deactivated.
Passwords
● Define rules for the use of devices and assignment of passwords.
● Regularly update the passwords to increase security.
● Only use passwords with a high password strength. Avoid weak passwords for example
"password1", "123456789" or similar.
● Make sure that all passwords are protected and inaccessible to unauthorized personnel.
See also the preceding section for information on this.
● Do not use one password for different users and systems.
Protocols
Secure and non-secure protocols
● Only activate protocols that you require to use the system.
● Use secure protocols when access to the device is not prevented by physical protection
measures.
– The NTP protocol provides a secure alternative with NTP (secure).
– The HTTP protocol provides a secure alternative with HTTPS when accessing the
Web server.
● Deactivate DHCP at interfaces to public networks such as the Internet, for example, to
prevent IP spoofing.
Table: Meaning of the column titles and entries
The following table provides you with an overview of the open ports on this device.
●
Protocol / function
Protocols that the device supports.
●
Port number (protocol)
Port number assigned to the protocol.