Module-Specific Security Information - Siemens SIMATIC S7-1500 Manual

Security information

2.2 Module-specific security information

2.2 Module-specific security information
Observe the following security instructions. In this way, you protect the TM NPU against
unauthorized access.
In addition, you prevent:
• Loss of data
or
• Manipulation
or
• Limited availability of the module
Use of the Ethernet interface
The TM NPU Ethernet interface and the services contained therein are exclusively designed
for communication in an access-protected area of your system.
Connecting the TM NPU Ethernet to a cloud or a device outside of this access-protected area
is a security risk. Establish the communication with external cloud services or devices via a
secure interface, e.g. Industrial Edge.
Note that all FTP, GigE Vision (Page 21) and web server communication is unencrypted.
The following table shows the services, their port numbers and the respective default states:
Service
FTP client
GigE Vision
Web server
When designing the network to which the TM NPU is connected, take the following criteria
into account:
• Avoidance of excessive network load
– A network overload is diagnosed in the value status (status byte, bit 0).
– The module might stop functioning. In this case, restart the module.
• Prevention of unauthorized access
Locking the housing
To protect the data on the SIMATIC Memory Card from unauthorized access, lock the housing
using a lock on the front cover (Page 55).
Ports disabled by default: USB and Ethernet
To prevent a third-party device from damaging your system, the USB and Ethernet interfaces
are disabled by default.
To activate the interfaces and related services, use these options:
• Parameter settings in HW Config (Page 26)
8
Port no.
Dynamic
49152
80
You can find more information in section: Status and error information in the process
image input (PII) (Page 28).
Default state
Disabled
Disabled
Disabled
Technology Module TM NPU
Equipment Manual, 07/2023, A5E46384784-AC