Siemens S7-300 Configuration Manual page 19

● File management and file access with FTP
● Email communication
Security functionality
● Firewall
● Communication made secure by IPsec tunnels
● SNMPv3
● Logging via the Syslog server
● HTML process control using HTTPS
● File management and file access using FTP (explicit mode)
● Time-of-day synchronization and transfer using NTP (secure)
Configuring and commissioning S7 CPs for Industrial Ethernet
Configuration Manual, 09/2013, C79000-G8976-C182-13
The CPs with IT functionality provide additional functions for FTP services.
You can use your S7 station both as an FTP client and address it in FTP server mode.
– S7 station as FTP client
You can transfer data blocks from or to a file server.
– S7 station as FTP server
Another station, for example, a PC writes or reads data blocks on the S7 station or
files in the file system on the CP with IT functionality.
CPs with IT functions provide Email services.
This allows the controller to send messages dependent on process events.
– IP firewall with stateful packet inspection (layer 3 and 4)
– Firewall also for Ethernet "non-IP" frames according to IEEE 802.3 (layer 2)
– Bandwidth limitation
– Global firewall rules
– All network nodes located in the internal network segment of a CP are protected by its
firewall.
The CP x43-1 Adv. can be grouped together with other security modules during
configuration. IPsec tunnels are created between all security modules of a group (VPN).
All internal nodes of these security modules can communicate securely with each other
through these tunnels.
For secure transmission of network analysis information safe from eavesdropping.
To allow monitoring, events can be stored in log files that can be read out using the
configuration tool or can be sent automatically to a syslog server.
For encrypted transmission of system data via a Web browser.
For encrypted transfer of files.
For secure time-of-day synchronization and transmission.
Communication via Ethernet CPs in S7 stations
1.3 SIMATIC S7 communication options with Ethernet CPs
19