Cyber Security; Overview; Certification - Siemens SWT 3000 Equipment Manual

Functional Description

2.13 Cyber Security

2.13 Cyber Security

Overview

2.13.1
Cyber security is designed to protect SWT 3000 devices against common IT security threats and to minimize
the impact of these threats on system operations. If SWT 3000 devices are under network attack, no device
reset and telecommunication interruption should occur.
Table 2-26
Service
Web Server
Web Server with SSL
Encryption
Time Synchroniza-
tion
DHCP Client
SNMP
SNMP Trap/Inform
SNMP Inform
Acknowledge
SWT 3000 Configu-
ration
SWT 3000 Configu-
ration with SSL
Encryption
NOTE
i
i
The communication protocols of SWT 3000 are disabled in the default configuration of PowerSys.
•
HTTP (80)
•
HTTPS (443)
•
SNMP (161)

Certification

2.13.2
Each device creates a self-signed certificate which has to be trusted on all clients used to access this device.
The IP addresses of both service port and user port are part of this certificate. Therefore, create the certificate
once again after the IP address is changed. Otherwise, a certificate warning message is shown with an IP
address mismatch in the Web browser.
[sccreatc-080513-01.tif, 1, en_US]
Figure 2-30
The certificate creation is done via the device web page: PowerLink > Service Interface Settings or SWT
3000 > Ethernet Interface Settings.
88
List of Communication Protocols of SWT 3000 Service Interface
Layer 4 Layer 7
Protocol Protocol
TCP HTTP
TCP/TLS HTTPS
UDP NTP
UDP DHCP
UDP SNMP
UDP SNMP
UDP SNMP
TCP PowerSys
Protocol
(Proprietary)
TCP/TLS PowerSys
Protocol
(Proprietary)
Parameter: Create Certificate
Client Client Port
Web browser >1024
Web browser >1024
SWT 3000 >1024
SWT 3000 68
NMS >1024
SWT 3000 161
SNMP Trap 162
Receiver
PowerSys >1024
PowerSys >1024
Smart Communication, SWT 3000 Teleprotection, Equipment Manual
C53000-G6040-C605-1, Edition 03.2020
Server Server Port
SWT 3000 80
SWT 3000 443
NTP Server 123
DHCP Server 67
SWT 3000 161
SNMP Trap 162
Receiver
SWT 3000 161
SWT 3000 10001
SWT 3000 10001