Omron NX Series Hardware User Manual page 20

Safety Precautions
Security measures to prevent unauthorized access
Take the following measures to prevent unauthorized access to our products.
• Install physical controls so that only authorized personnel can access control sys-
tems and equipment.
• Reduce connections to control systems and equipment via networks to prevent ac-
cess from untrusted devices.
• Install firewalls to shut down unused communications ports and limit communica-
tions hosts and isolate control systems and equipment from the IT network.
• Use a virtual private network (VPN) for remote access to control systems and equip-
ment.
• Adopt multifactor authentication to devices with remote access to control systems
and equipment.
• Set strong passwords and change them frequently.
• Scan virus to ensure safety of USB drives or other external storages before connect-
ing them to control systems and equipment.
Data input and output protection
Validate backups and ranges to cope with unintentional modification of input/output da-
ta to control systems and equipment.
• Checking the scope of data
• Checking validity of backups and preparing data for restore in case of falsification
and abnormalities
• Safety design, such as emergency shutdown and fail-soft operation in case of data
tampering and abnormalities
Data recovery
Backup data and keep the data up-to-date periodically to prepare for data loss.
When using an intranet environment through a global address, connecting to a SCADA
or an unauthorized terminal such as an HMI or to an unauthorized server may result in
network security issues such as spoofing and tampering. You must take sufficient
measures such as restricting access to the terminal, using a terminal equipped with a
secure function, and locking the installation area by yourself.
When constructing an intranet, communication failure may occur due to cable discon-
nection or the influence of unauthorized network equipment. Take adequate measures,
such as restricting physical access to network devices, by means such as locking the
installation area.
When using a device equipped with the SD Memory Card function, there is a security
risk that a third party may acquire, alter, or replace the files and data in the removable
media by removing the removable media or unmounting the removable media. Please
take sufficient measures, such as restricting physical access to the Controller or taking
appropriate management measures for removable media, by means of locking the in-
stallation area, entrance management, etc., by yourself.
18
NX-series NX502 CPU Unit Hardware User's Manual (W629)