Siemens SIMATIC MV500, Operating Instructions Manual, Page: 6 / 294

Preface
SIMATIC MV500
6
Operating Instructions, 03/2021, C79000-G8976-C494-05
Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines, and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is
necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial
security concept. Siemens’ products and solutions form one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems,
machines and networks. These systems, machines and components should only be
connected to the enterprise network or the Internet if and only to the extent necessary and
with appropriate security measures (firewalls and/or network segmentation) in place.
You can find more information on protective measures in the area of industrial security by
visiting:
https://www.siemens.com/industrialsecurity.
Siemens’ products and solutions undergo continuous development to make them more
secure. Siemens strongly recommends performing product updates as soon as they are
available and using only the latest product versions. Use of product versions that are no
longer supported, and failure to apply latest updates may increase customer’s exposure to
cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under
https://www.siemens.com/industrialsecurity.
Security recommendations
To prevent unauthorized access, observe the following security recommendations when
working with the optical readers and WBM (Web Based Management).
General
• Check regularly that the device complies with these recommendations and/or other
internal security policies.
• Evaluate your plant as a whole in terms of security. Use a cell protection concept with
suitable products.
• Do not connect the device directly to the Internet. Operate the device within a protected
network area.
Physical access
• Restrict physical access to the device to qualified personnel.
• Lock unused hardware ports on the device. Unused ports can be used to access the system
without authorization.