Siemens SIMATIC NET System Manual page 272

SCALANCE network components
4.8 SCALANCE S Industrial Security Appliance
The SINEMA RC Server is configured via the Web Based Management (WBM). The
connection to the WBM via the Internet/WAN takes place over the HTTPS protocol. The
access to the SINEMA RC Server is protected against unauthorized accesses via
authentication mechanisms as well as through specified task-specific access rights.
Note
You will find more information on SINEMA RC in SINEMA RC
remote-connect).
Features and functions
SINEMA RC has the following characteristics and functions:
● Protocol-independent, IP-based communication
● Central management of all VPN connections
● Connection management
– Establishment of encrypted connections with OpenVPN and IPsec
– Establishment of permanent or event-based connections, for example via wake-up
● Multi-factor authentication with username/password and PKI smartcard
● Support of the current encryption process, TLS 1.2
● Easy management of different users
– Device and user management with group management
– User management with the configuration of rights
● Connection of subnetworks behind SCALANCE M or Industrial Security Appliances
SCALANCE S industrial routers
– Support of routing
– Support of NAT for mapping local identical subnetworks
– Support of NAT for mapping dedicated local IP addresses
– Support of multiple subnetworks behind SCALANCE M industrial routers or Industrial
– User-specific access rights to unique IP addresses in the subnetwork
● Address book function in the SINEMA RC client
– List display of all devices assigned to a user
● SIMATIC TeleService
– Selection of a device for execution of TeleService in the SIMATIC environment
● Proxy server
– For communication with networks behind a proxy server infrastructure
● Support of HTTPS and SOCKS Proxy servers
272
message or through a signal at the digital input
Security Appliances SCALANCE S
(https://siemens.com/sinema-
System Manual, 09/2019, C79000-G8976-C242-10
Industrial Ethernet