Protection; Overview Of The Protection Functions - Siemens SIMATIC S7-1500 System Manual

Protection

11.1

Overview of the protection functions

Introduction
This section describes the functions for protection from unauthorized access:
• Protection of confidential configuration data
• Access protection
• Know-how protection
• Protection by locking the CPUs
Further measures for protecting the CPU
The following measures additionally increase the protection against unauthorized access to
functions and data of the CPU from external sources and via the network:
• Deactivation of the Web server
• Deactivation of the OPC UA server (you can find more information on the security
mechanisms for OPC UA server in the Communication
(https://support.industry.siemens.com/cs/ww/en/view/59192925) Function Manual)
• Deactivation of the time synchronization via an NTP Server
• Deactivation of the PUT/GET communication
• Deactivation of SNMP
When using the web server, you protect your automation system against unauthorized
access:
• By setting password-protected access rights for specific users in the user management.
• By using the preset option "Permit access only with HTTPS".
The option allows access to the web server only with the secure hypertext transfer
protocol (HTTPS).
When you use the OPC UA server, protect your automation system against unauthorized
access:
• By not setting up OPC UA server access for the "Anonymous" user.
• By disabling the "Automatically accept client certificates during runtime" option.
236
11
SIMATIC Drive Controller
System Manual, 11/2023, A5E46600094-AD