Siemens S7-1200 Operating Instructions Manual page 16

Application and properties
1.3 Other services and properties
Security functions of the telecontrol protocol
The CP supports the following Security functions:
● Encrypted telecontrol communication
You configure the interval of the key exchange between the CPU and telecontrol server in
STEP 7 in the parameter group "Ethernet interface (X1) > Advanced options > Transfer
settings".
● Configuring authorized phone numbers on the CP
To authorize nodes allowed to establish a connection to the CP during telecontrol
communication.
● Telecontrol password
To authenticate the CP with the telecontrol server
● STARTTLS / SMTPS
For the secure transfer of e-mails
● NTP (secure)
For secure transfer during time-of-day synchronization (with telecontrol communication
disabled)
● HTTPS
For secure access to the Web server of the CPU
Note
Plants with security requirements - recommendation
Use the following option:
• If you have systems with high security requirements, use the secure protocols
NTP (secure) and HTTPS.
• If you connect to public networks, you should use the firewall. Think about the services
you want to allow access to the station via public networks. By using the "bandwidth
limitation" of the firewall, you can restrict the possibility of flooding and DoS attacks.
Industrial Ethernet Security - Security functions of the CP
The following Security functions can be used independently of telecontrol communication.
With Industrial Ethernet Security, individual devices, automation cells or network segments
of an IP-based network can be protected. The data transfer via the CP can be protected from
the following attacks by a combination of different security measures:
● Data espionage
● Data manipulation
● Unauthorized access
16
Operating Instructions, 01/2015, C79000-G8976-C381-01
CP 1243-7 LTE