Siemens Releases Network Security Enhancements

Siemens Industry Automation (www.usa.siemens.com/industrialsecurity) announced on May 30 new versions of its Simatic NET CP 343-1 Advanced and Simatic NET CP 443-1 components with integrated security functions to enable companies to enhance the security of their networks in process automation and production automation. These advanced communications processors contain a firewall, as well as a VPN function (Virtual Private Network), which provides secure access to the Simatic S7-300 and S7-400 controller series.

The Industrial PCs can also be equipped with a firewall and VPN client by means of the Simatic NET CP 1628 module. The security module Scalance S623 is also new; with an additional DMZ port for service access, as is the UMTS router Scalance M875 for secure access to plant units via a 3G cellular network using UMTS.

Due to the increased use of Ethernet connections penetrating the field level, security issues are gaining in importance in industry. For comprehensive plant protection, a variety of different measures must be implemented. These range from the company organization and guidelines regarding protective measures for PC and control systems through to protection of automation cells by segmenting the network. Siemens follows the cell protection concept and offers – with the modules of the Scalance M, the Scalance S and the security communication processors – numerous components for building up protected cells. With the cell protection concept, a plant network is subdivided into protected automation cells within which all devices are able to communicate with each other securely. The individual cells are connected to the overall network protected by a VPN and firewall. Cell protection reduces the susceptibility to failure of the entire production plant and increases its availability.