Description Of The Device - Siemens SIMATIC NET CP 1628 Operating Instructions Manual

Description of the device

Product features
NOTICE
Important information relating to the product
Some parts of the CP 1628 firmware are supplied by a third party. This third-party supplier
has informed us that they will no longer offer maintenance for the supplied software
components. This means that there is no monitoring regarding any future critical
vulnerabilities that may be exhibited by these software components. Siemens, therefore,
can no longer ensure that the firmware does not contain security-critical vulnerabilities for
all CP 1628 purchased after May 2021. Plus, any future security vulnerabilities can no longer
be published in a Security Advisory – due to the fact the Siemens no longer has any
knowledge of such vulnerabilities – and such vulnerabilities also are no longer removed.
However, the basic functionalities of the CP 1628 are not affected by these vulnerabilities.
The only difference is that there is no longer the full guarantee that the secure networks
used with the CP 1628 are fully protected. We therefore recommend that you implement a
state-of-the-art security concept for the entire plant (for more information, see the notes
under https://www.siemens.com/industrialsecurity). We especially recommend that you do
not secure the Internet access of the CP 1628 via the functions integrated into the product
but by using an additional security appliance, such as the SCALANCE SC. In this case, the
plant would be adequately protected even if there was a security-critical vulnerability in the
CP 1628.
The CP 1628 is a PCIe module for connecting PGs/PCs to Industrial Ethernet. The essential
properties are as follows:
• Two RJ-45 ports for Industrial Ethernet for connecting twisted-pair cables
• Can be used as a 2-port switch (both RJ45 connectors lead to the integrated switch)
• The following data rates are supported:
– 10/100 Mbps (half/full duplex)
– 1000 Mbps (full duplex)
• Own processor on the CP 1628 reduces the load on the PG/PC CPU.
• Autosensing, autocrossover, autonegotiation
• ISO and TCP/IP transport protocol onboard
CP 1628
Operating Instructions, 06/2021, C79000-G8976-C280-09
2
9