Safety Notices - Siemens SIMATIC RTLS System Manual

Safety notices

General
Note the following security recommendations to prevent unauthorized access:
● You should make regular checks to ensure that the devices meet these recommendations
and/or other security guidelines.
● Evaluate your plant as a whole in terms of security. Use a cell protection concept with
suitable products
pages/default.aspx).
● When the internal and external network are disconnected, an attacker cannot access
internal data from the outside. Therefore operate the devices only within a protected
network area.
● For communication via non-secure networks use additional devices with VPN functionality
to encrypt and authenticate the communication.
● Terminate the management connections properly (SIMATIC RTLS Locating Manager and
its clients).
● Keep the firmware up to date. Check regularly for security updates for the device. You can
find information on this at the Industrial Security
global/en/industrial-security/pages/default.aspx) website.
● Inform yourself regularly about security recommendations published by Siemens
ProductCERT (https://www.siemens.com/cert/en/cert-security-advisories.htm).
● Only activate protocols that you require to use the devices.
● Restrict access to management of the devices by assigning "Users" and "User groups" as
needed.
● Use a central logging server to log changes and access operations. Operate your logging
server within the protected network area and check the logging information regularly.
Password security
Note the following security recommendations for handling passwords:
NOTICE
Prior to the first commissioning
Connect to the devices and change the standard passwords for the "Users" and "User groups"
before you operate the device.
● Define rules for the assignment of passwords.
● Regularly change your passwords to increase security.
System Manual, 04/2019, C79000-G8976-C577-01
(https://www.industry.siemens.com/topics/global/en/industrial-security/
(https://www.industry.siemens.com/topics/
2
11