Siemens 6GK5786-1FC00-0AA0, Operating Instructions Manual

Page: 15 / 86

• The following protocols provide secure alternatives:
– SNMPv1/v2c → SNMPv3
Check whether use of SNMPv1/v2c is necessary. SNMPv1/v2c is classified as non-secure.
Use the option of preventing write access. The product provides you with suitable setting
options.
If SNMP is enabled, change the community names. If no unrestricted access is necessary,
restrict access with SNMP.
Use SNMPv3 in conjunction with passwords.
– HTTP → HTTPS
– Telnet → SSH
– TFTP → SFTP
– Syslog Client → Syslog Client TLS
• Using a firewall, restrict the services and protocols available to the outside to a minimum.
• For the DCP function, enable the "Read Only" mode after commissioning.
List of available services
The following is a list of all available services and their ports through which the device can be
accessed.
The table includes the following columns:
• Service
The services that the device supports
• Default port status
This is the status of the port in the delivery state (factory setting).
• Configurable port/service
Indicates whether the port number or the service can be configured via WBM / CLI.
• Authentication
Specifies whether the communication partner is authenticated.
If optional, the authentication can be configured as required.
• Encryption
Specifies whether the transfer is encrypted.
If optional, the encryption can be configured as required.
Service Protocol/port
number Default port
status
Configurable Authentication Encryption
Port Service
DHCP client UDP/68 Outgoing only -- ✓ -- --
DHCP server UDP/67 Closed -- ✓ -- --
DNS client TCP/53
UDP/53 Outgoing only -- ✓ -- --
EthernetIP TCP/44818,
UDP/2222
UDP/44818 Closed -- ✓ -- --
HTTP TCP/80 Open ✓ ✓ ✓ --
Security recommendations
SCALANCE W786-x
Operating Instructions, 12/2021, A5E03678337-14
15