Siemens SIMATIC NET System Manual page 112

Examples of applications
3.4 Cell protection concept
Solution
The devices in each automation cell must communicate with each other unhindered and do
not have any security functions. However, each automation cell is connected to the
production network via a device with security functions to avoid unauthorized accesses.
There are three device categories that can be used for such an application:
● SIMATIC NET communication processors with integrated security functions (for example,
SIMATIC CP 1543-1 with firewall and VPN)
● Industrial Security Appliances SCALANCE S with firewall functionality (for example,
SCALANCE SC632-2C and SCALANCE SC636-2C)
● Industrial Security Appliances SCALANCE S with firewall functionality and VPN (for
example SCALANCE S615, SCALANCE SC642-2C and SCALANCE SC646-2C)
Benefits
● Effective protection of automation devices from unauthorized access
● Monitoring and logging of accesses from the production network
● Easy configuration of the security functions via Web Based Management
112
System Manual, 09/2019, C79000-G8976-C242-10
Industrial Ethernet