Limited program access to WinCC from S7-400 CPU

Hello Experts,

My problem statement is as follows:

Hardware Configuration (My Scope): CPU 416-2 DP + CP443-1 + Unmanaged Scalance Switch (8 Ports) + Simatic Manager (Step 7) software

Customer Scope: Simatic WinCC SCADA

The customer knows my whole program and from WinCC he can access all data. So, I want to restrict him from accessing unnecessary data. I want him to access only 2 Data Blocks as DB_SEND_TO_SCADA and DB_RECEIVE_FROM_SCADA. Communication between CPU and WinCC is ProfNet.

Please help to resolve the problem.

Thanks with Regards

SICOT

Hi SCOT, 

Simatic Manager has the features of limited access and protection. 

But I have question about how WinCC read data and your client can access whole program. Could you give more detail on it?

Quick follow I think if u mean is OS/PC where WinCC installed, and they are using remote apps to have access on engineering station where your Simatic Manager and program on it, then u need to limit the engineering station access.

But if WinCC which can achieve data from controller, probably u should limit the access by reprogramming the WinCC.

Anyways, here's the feature of Simatic Manager family related of limited access and protection that u need

• Block project access

How can you install block protection for self-created blocks? - ID: 10025431 - Industry Support Siemens

How do you install the improved block protection for FBs and FCs in STEP 7 V5.5 on... - ID: 45632073 - Industry Support Siemens

• Whole project access

• CPU access

What options exist for assigning passwords? - ID: 16650102 - Industry Support Siemens

Hello Utalika,

Thank you for the Nice Explanation.

The first thing is that WinCC is not in my scope. The person who is developing WinCC program can read/write DB addresses from WinCC through TCP/IP connection. He knows all the DB addresses present in my PLC. So, I want to restrict him from reading / writing the unwanted DB addresses from WinCC.

This my exact requirement.

Thanks with Regards

SICOT

Hi SICOT,

you can't do some restrictions for accessing your PLC. This would be possible with an S7-1200/1500, but not with the PLCs of the older S7-300/400 family.

Kind regards
Stefan