Siemens SENTRON PAC3200T, Product Manual, Page: 52 / 136

Operation
5.3 Protection against manipulation
50
Equipment Manual, 09/2022, L1V30415168B-03
5.3.2 Password protection
Password protection prevents write access via the communication interfaces, in particular:
•
Changing of device settings, including password.
• Changing and deletion of values/parameters.
• Deletion of data and memory content.
• Resetting to factory settings.
Activation/deactivation of the password function is possible via the "powerconfig"
configuration software.
See chapter Parameterizing the device (Page 54).
5.3.3 Hardware write protection
The hardware write protection prevents write access to the device via the communications
interface. In order to gain write access, the hardware write protection must be deactivated
directly on the device. To activate or deactivate the hardware write protection, the user is
prompted to press the SW button on the device.
If the SW button has not been pressed once 15 minutes have expired, the change is not
applied and the request (flashing of the Power LED) disappears.
Activation/deactivation of the password function is possible via the "powerconfig"
configuration software.
See chapter Parameterizing the device (Page 54).
5.3.4 IP filter (subnet firewall protection)
The IP filter, also called subnet firewall protection, is a configurable protection on the device.
If the protection is activated, write requests are only accepted if the user is in the same
subnet.
5.3.5 Modbus TCP port, configurable
Ports are communication channels which make it possible to access a Modbus-capable device
via a network.
Standard IP ports like port 502 are often tested by port scanners. If an open port is discovered
by an attacker, the device can be attacked via this port.
The PAC3200T allows the Modbus TCP ports to be configured manually. Switching from
standard port 502 to a user-defined port makes it more difficult to scan for open ports.