Siemens SCALANCE S612

Authentication; All incoming data traffic is monitored and checked. IP addres-ses can be falsified (IP spoofing), so it is not sufficient just to check the IP address (of the client access). It is also the case, that client PCs can have alternating IP addresses. Authentica-tion is therefore performed using well-proven VPN mecha-nisms.

Data encryption; Secure encryption is necessary in order to protect data com-munication from espionage and unauthorized manipulation. In this manner, the data communication remains unintelligible to any listener in the network. The SCALANCE Security Module establishes VPN tunnels to other Security Modules for this pur-pose.

The firewall filters data packets and disables or enables commu-nications links in accordance with the filter list (packet filter fire-wall). Both incoming and outgoing communication can be filte-red, IP and MAC addresses, as well as communication protocols (ports).

Logging; It is extremely important to be able to monitor the access as well. Detection of how, when and by whom it has been ac-cessed is as important as detecting access attempts, to ensure that preventative measures can be taken. These data are saved by the Security Module in a log file.

Intuitive configuration without special security knowledge. Easy handling through minimum configuration. No specialist IT security knowledge required. No changes to or adaptations of existing network topology required. Automatic generation of certificates by configuring tool. Low configuration outlay through automatic learning of internal network stations and detection of other security modules in external network.

• SCALANCE S612; -protects up to 3 devices, -up to 64 VPN tunnels simultaneously

Configuration can also be performed by personnel who are not IT experts. Only the Security Modules that have to communicate with each other securely have to be created and configured. All the configuration data can be saved on the C-PLUG swap media so that the Security Module can be replaced quickly in the event of a fault and without the need of a programming device (not included in scope of supply).

• Secure access by programming devices or notebooks to auto-mation devices or complete automation cells

• Simple use on mobile PCs when using the SOFTNET Security Client, as no external device is required for securing the com-munication

• Consistent security concept for the automation system with SCALANCE S612 and SOFTNET Security Client

• Simple operation, can be implemented without special know-ledge

• Non-secure devices can be integrated into the secure data traffic

• Reaction-free; no change to existing network infrastructures is required

• The security of communication is completely independent of the protocol used, e.g. all IP-based communication protocols (PROFINET, Ethernet/IP, MODBUS TCP, HTTP, FTP etc.), even Layer 2 automation protocols are protected

• The security of the communication is independent of the proto-col used (PROFINET, Ethernet IP, MODBUS TCP etc.)