Siemens SIMATIC NET SCALANCE W734-1, Руководство по эксплуатации

Страница: 8 / 66

Security recommendations
SCALANCE W774-1 /W734-1
8
Operating Instructions, 07/2020, C79000-G8976-C325-14
• Use a central logging server to log changes and access operations. Operate your
logging server within the protected network area and check the logging information
regularly.
• Use WPA2/ WPA2-PSK with AES to protect the WLAN. If iPCF or iPCF-MC is used,
use the AES encryption.
Passwords
• Define rules for the assignment of passwords.
• Regularly change your passwords to increase security.
• Use passwords with a high password strength.
• Make sure that all passwords are protected and inaccessible to unauthorized
persons.
• A password must be changed if it is known or suspected to be known by unauthorized
persons.
• Do not use the same password for different users and systems.
Keys and certificates
• The device contains a pre-installed certificate with key. Replace this certificate with a
self-made certificate with key. We recommend that you use a certificate signed by a
reliable external or internal certification authority. You can install the certificate via
the WBM (System > Load and Save).
• Use the certification authority including key revocation and management to sign the
certificates.
• Ensure that user-defined private keys are protected and inaccessible to unauthorized
persons.
• Verify certificates and fingerprints on the server and client to prevent "man in the
middle" attacks.
• It is recommended that you use password-protected certificates in the PKCS#12
format.
• It is recommended that you use certificates with a key length of at least 2048 bits.
• Change keys and certificates immediately, if there is a suspicion of compromise.