Siemens SIMATIC S7-1500 System Manual page 48

Industrial cybersecurity
4.9 Secure operation of CPUs
Procedure
To configure the CPU to transfer syslog messages to a syslog server, following these steps:
1. Select the required CPU in the device or network view of STEP 7.
2. In the Inspector window, navigate to "Properties > Protection & Security > Syslog > Syslog
server".
3. In the "Connection to syslog server" area, select the "Enable transfer of syslog messages to a
syslog server" option. The selection options below become editable.
4. Select one of the following options from the "Transport protocol" drop-down list:
– "Transport Layer Security (TLS) - server and client authentication": Encrypted data
– "Transport Layer Security (TLS) - only server authentication": Encrypted data transfer,
– "UDP": Unencrypted data transfer, syslog server and client (CPU) do not need to
In the next sections you can read how to select the certificates for authentication (logon)
depending on the settings specified.
5. In the "Addresses of the syslog servers" column, enter a valid server address.
6. In the "Port" column, enter one of the following port numbers depending on the transport
protocol used:
– Standard TCP port for TLS: 6514
– Standard UDP port: 514
Result: You have configured the transfer of syslog messages to a syslog server.
Figure 4-3
46
transfer, syslog server and client (CPU) must authenticate themselves.
only the syslog server needs to authenticate itself.
authenticate themselves.
Transfer of syslog messages to a syslog server configured
SIMATIC Drive Controller
System Manual, 11/2023, A5E46600094-AD