Cybersecurity-Relevant Information - Siemens SIMATIC S7-1500 Manual

2.3

Cybersecurity-relevant information

Note all cybersecurity-relevant information.
Topics with cybersecurity-relevant information
Operational application environment and security assumptions
Requirements for the operational application environment of
the system and security assumptions
Area of application
Security properties of the product
Access protection
Physical protection:
• You can protect the CPU against unauthorized access by
locking the front flap.
Password protection
You can also protect the CPU with a password.
Password categories:
• Password to protect confidential configuration data
• Password in the context of user management (UMAC)
• Password for display
Integrated protection functions
• The CPUs have integrated protection functions.
PROFINET Security Class 1
• The device supports PROFINET Security Class 1.
• With the introduction of PROFINET Security Class 1, addi­
tional security settings have been integrated into the
PROFINET communication.
Reading out and verifying signatures
Supported Ethernet services
Interfaces, ports, protocols and services
Information on the following is security related:
• Communications layer and communication role
• Default states
• Enabling/disabling ports and services
Secure operation
CPU 1516-3 PN/DP (6ES7516-3AP03-0AB0)
Equipment Manual, 11/2023, A5E46418484-AD
2.3 Cybersecurity-relevant information
Reference
This section is found in the System Manual
(https://support.industry.siemens.
com/cs/us/en/view/59191792).
You can find the section Area of application (Page 15) in this
Equipment Manual.
Information on locking and on password protection can be
found in this Equipment Manual in the section Operator con­
trols and display elements (Page 27).
Also note the information on the topic of access protection in
the Protection section of the System Manual
(https://support.industry.siemens.
com/cs/us/en/view/59191792).
For information on the protection functions, refer to the
"Overview of protection functions" section of the System
Manual
(https://support.industry.siemens.
com/cs/us/en/view/59191792).
Detailed information about PROFINET Security Class 1 and the
additional security settings can be found in the PROFINET with
STEP 7 Function Manual
(https://support.industry.siemens.
com/cs/us/en/view/49948856).
You can find detailed information on reading and verifying
signatures in the STEP 7 online help (TIA Portal).
Information about supported services can be found in the sec­
tion Technical specifications (Page 41).
You can find detailed information on the supported Ethernet
services in the Communication Function Manual
(https://support.industry.siemens.
com/cs/us/en/view/59192925).
You can find detailed information on these topics in the Com­
munication Function Manual
(https://support.industry.siemens.
com/cs/us/en/view/59192925).
Industrial cybersecurity
11