Security - Softing NETLink S7-Compact User Manual

NETLink S7-Compact - User Guide
9.4.3

Security

The security page serves as a configuration interface that allows users to set up access restrictions.
After the security query (see section
has write-access to all parameters that are implemented for TCP security etc.
Up to 12 IP addresses can be added to the device's whitelist. In order to use the TCP access list, the
corresponding ON option must be enabled (individual list entries are disabled by default).
Whitelisted IP addresses must be entered using the four-octet format (e.g.: 192.168.4.59). If you
want to delete a whitelisted address or undo its addition to the whitelist, simply select OFF in the
corresponding row.
Once the configuration is saved, only stations that are whitelisted in this table will be able to
establish TCP connections to the NETLink S7-Compact unit.
TCP/IP addresses that are not in the white list have read-only access to the web interface. MPI, PPI,
or PROFIBUS functionalities cannot be used. The configuration of the NETLink S7-Compact is also
prevented.
It is also possible to activate additional write protection (primarily for CPUs) for any bus nodes
connected to the NETLink S7-Compact. If the NETLink S7-Compact is used, for example, as a
communications adapter for representing visualization values, only data from the connected
controllers can be read out if write protection is active. In this way, manipulation of the CPU
sequential program is ruled out.
This assumes, of course, that the access data for the NETLink S7-Compact web interface are secure.
Attention: To prevent their use by unauthorized persons, any proxy servers that exist in company
networks may not be entered in the white list. If so, safe use of a NETLink S7-Compact Gateway is not
guaranteed.
With the button [Factory defaults] it is possible to restore all parameters to the as-delivered state of
the NETLink S7-Compact device. All user-defined configurations will be deleted by this function.
By clicking the [Submit] button, the inputs are checked for plausibility. You may then be shown
which inputs are incorrect and what correct input would look like at this point.
46
Note
Rebooting can take up to 15 seconds.
Note
Every submenu features a Help button that can be used to access descriptions of
relevant details and functions.
Note
If you forget the IP addresses on the whitelist, you will no longer be able to reconfigure
the NETLink S7-Compact device from an external PG/PC.
Note
Notice deviation by usage of proxy servers.
45
Basic Configuration ) has been correctly answered, the user
Version EN-062023-1.00