Siemens SIMATIC S7-1500 Function Manual page 14

General information
2.2 Configuring the Web server
14
The available rights can be available for selection as follows in STEP 7:
Figure 2-4 Assignment of user rights in STEP 7
If you have not configured an additional user, access as user "Everybody" is set by
default.
If users have been configured, any user that is not logged on accesses the Web server
as user "Everybody".
User "Everybody"
A user with the name "Everybody" is preset in the user list; this user has minimum access
rights. These are read-only access to the intro page and start page. The user
"Everybody" is defined without a password. However, you can assign all access
authorizations available in STEP 7 to this user.
You can create a maximum of 20 users and a user "Everybody".
Because the user "Everybody" is defined in STEP 7 without assignment of a password,
be careful of the access authorizations which you assign to this user.
Certain authorizations, such as the possibility of changing the operating state, could
represent a security risk.
For the assignment of security-relevant authorizations, we recommend that you configure
a user and always assign a password in STEP 7.
Assign secure passwords to users during configuration. An example of a secure
password is one which is only used for a single application, is more than 8 characters
long, and consists of lower- and upper-case letters as well as symbols and numbers
(?!+%$1234...). In addition, passwords based on common keyboard sequences or words
from the dictionary should be avoided.
Change the password at regular intervals.
Whenever possible, select the option "Permit access only with HTTPS" as soon as you
have assigned a password to at least one user.
Function Manual, 01/2013, A5E03484625-01
Web server