Siemens SIMATIC NET SCALANCE M826, Operating Instructions Manual

Page: 11 / 74

SCALANCE M826
Operating Instructions, 08/2018, C79000-G8976-C362-05
11
Security recommendations
1
To prevent unauthorized access, note the following security recommendations.
General
● You should make regular checks to make sure that the device meets these
recommendations and/or other security guidelines.
● Evaluate your plant as a whole in terms of security. Use a cell protection concept with
suitable products.
Link: ( https://www.industry.siemens.com/topics/global/en/industrial-
security/pages/default.aspx )
● Separate connections correctly (WBM. Telnet, SSH etc.).
Physical access
● Limit physical access to the device to qualified personnel.
The memory card or the PLUG (C-PLUG, KEY-PLUG) contains sensitive data such as
certificates, keys etc. that can be read out and modified.
● Lock unused physical ports on the device. Unused ports can be used to gain forbidden
access to the plant.
Software (security functions)
● Keep the software up to date. Check regularly for security updates of the product.
You will find information on this on the Internet pages "Industrial Security
( https://www.siemens.com/industrialsecurity )".
● Inform yourself regularly about security advisories and bulletins published by Siemens
ProductCERT ( https://www.siemens.com/cert/en/cert-security-advisories.htm ).
● Only activate protocols that you really require to use the device.
● Restrict access to the management of the device with firewall rules.
● The option of VLAN structuring provides good protection against DoS attacks and
unauthorized access. Check whether this is practical or useful in your environment.
● Use a central logging server to log changes and accesses. Operate your logging server
within the protected network area and check the logging information regularly.
● We recommend formatting a PLUG that is not being used.