Security Recommendations - Siemens SIMATIC RF650R Configuration Manual

Security recommendations

To prevent unauthorized access, observe the following security recommendations when
working with the reader and WBM (Web Based Management).
General
● Check regularly that the device complies with these recommendations and/or other
internal security policies.
● Evaluate your plant as a whole in terms of security. Use a cell protection concept with
suitable products.
● Do not connect the device directly to the Internet. Operate the device within a protected
network area.
Physical access
● Restrict physical access to the device to qualified personnel.
● Lock unused physical ports (e.g. Ethernet ports) on the device. Unused ports can be used
to access the system without authorization.
Software (security functions)
● Keep the software up to date. Keep yourself informed regularly about safety updates for
the product.
You can find additional information about this at the following link
(http://www.siemens.com/industrialsecurity).
● Activate only protocols that you actually need to use the device.
● Limit access to the device using a firewall or rules in an access control list (ACL).
● The configuration files are available in XML format for simple use. Make sure that the
configuration files outside the device are suitably protected. You can, for example,
encrypt the files, store them at a safe location and transfer them only via secure
communications channels.
Passwords
● Activate user management and create new user profiles.
● Change all default passwords for users before operating the device.
● Only use passwords with high password strength. Avoid weak passwords, e.g.
password1, 123456789, abcdefgh.
● Define rules for using devices and assigning passwords.
● Make sure that all passwords are protected and inaccessible to unauthorized personnel.
SIMATIC RF650R/RF680R/RF685R
Configuration Manual, 03/2018, C79000-G8976-C386-06
2
11