plcbug

Hi everybody,

I am again here with a different prolem.

In present case I'm using IM 151-8 CPU with profinet port with 2 Nos of RIO modules. This is connected with a PC & communicates with A VB application software through TCP/IP messaging. PLC also communicates with a SQL database through Wincc Flex RT scripts. Further PC is connected to internet & customer's ERP software. Now I have folllowing concerns:-

1. If somebody tries to Use IP that is already getting used by PLC & RIO modules, what will happen.
2. If there is virus in PC, how it's going to affect my PLC.
3. Is there any possibility if vius can enter through script.
4. What should I do to protect my PLC network against viruses.

Where can you find information on the topic of "Industrial Security"?

SIMATIC NET Industrial Ethernet Security Basics and application Configuration Manual

SIMATIC NET Industrial Ethernet Security Setting up security Getting Started

SIMATIC NET Industrial Ethernet Security SCALANCE S V3.0 Commissioning and Hardware Installation Manual

And here are some basic recommendations found in the manuals above:

· Make sure that the configuration computer (PC/PG) or the projects are protected from unauthorized access. (e.g., firewall, recommended antivirus software)

· Make sure that the guest account is disabled on the configuration computer.

· When using secure communication (for example HTTPS, VPN...), make sure that the security modules involved have the current time of day and the current date. Otherwise the certificates used will not be evaluated as valid and the secure communication will not work.

· We recommend that up-to-date anti-virus software is always installed and active on all configuration computers.

· The SOFTNET security client provides a solution for secure communication with automation cells via VPN. For self-protection of the PC/PG and the corresponding automation cell, it is advisable to use additional measures such as a virus scanner and the Windows firewall.

· To avoid unauthorized configuration data being downloaded to the CP (Note: CP x43-1 Advanced), you will need to make additional security settings in the firewall of the CP (blocking S7 communication or only allowing tunneled communication) or take external security measures.

· To have the security settings adopted in the corresponding (offline) system data blocks, after making changes, select the "Station" > "Save and Compile" menu in HW Config or "Network" > "Save and Compile" in NetPro.

· For each STEP 7 project, a separate unique security configuration is created when security is activated. For this reason, no STEP 7 multiprojects are supported in connection with security.

Hope this helps,
Daniel Chartier