General Information On Protection - Siemens SIMATIC S7-1500 Operating Instructions Manual

Protection

8.2 General information on protection

8.2 General information on protection
Configuration for the web server
A user with the name "Any" is created by default in the user list of the web server. This user
has minimal access rights such as read-only access to the introduction and home page.
Because the user "Any" does not have a password assigned in STEP 7, pay close attention
to the access rights you assign to this user. Individual authorizations, such as the option to
change the operating mode, may represent a security risk.
To assign safety-related authorizations, create a new user and always assign a password in
STEP 7. Assign secure passwords to users during configuration. An example of a secure
password is one which is only used for a single application, is more than 8 characters long,
and consists of lower-case and upper-case letters as well as special characters and
numbers (?!+%$1234...).
Whenever possible, select the option "Permit access only with HTTPS" as soon as you have
assigned a password to at least one user.
Data blocks for PUT/GET instructions
The PUT/GET instructions are suitable for connections configured at one end or both ends.
When using the PUT/GET instructions, you can only use data blocks with absolute
addressing. Symbolic addressing of data blocks is not possible.
Communication of the tools
Communication between the Control Tool or the Diagnostics Tool and the CPU is not
secure. Make sure that the communication connection is secured by other measures, or
execute the tools only locally on the PC with the CPU using the runtime communication
interface. Use the Defense-In-Depth concept to secure the controller.
Reference
You can find additional information on the configuration of the Web server in the Web server
(https://support.automation.siemens.com/WW/view/en/59193560) Function Manual.
You will find more information on the PUT/GET and NTP instructions in the Communication
(https://support.automation.siemens.com/WW/view/en/59192925) Function Manual.
78
CPU 1505SP (F) Ready4Linux Version 2.7
Operating Instructions, 05/2019, A5E46864285-AA