Hi, 

I hope someone can help me...

Recently I realized that I must exchange some S612 with another firewall due to the low performance in the S612 v2. I've bought a SC632 in hope it would do the same job. Now I have problem to configure it with the same functionality that I configured my S612.

My process network is on the same adress range as (several) machine networks. 10.50.24.0-10.50.31.255 (flat network)

I would like to configure my SC632 to only allow specific traffic from one IP to another IP.. eg from an ES with IP 10.50.24.199 on the external side <-> PLC with network adress 10.50.25.220 on the internal side.

All my devices is configured with same data.. individual IP adress, netmask 255.255.248.0, default gateway 10.50.24.1

With the old S612 there were no problems to set up IP firewall rules in advanced mode... but with the SC632 it seems not be possible?

Is there a solution...

see attached pdf

Hello,

you wrote you use a flat network? Means, the SCALANCE SC must work in a bridge mode.

In the actual Version, the SCALANCE SC must be in "routing mode". That means, the subnet on internal and external ports (P1 and P2) must be different.

With the next firmware version, the SCALANCE SC should supports the "Bridge firewall", so that you can use a flat network.

 Thank you for your reply... 

[snip]

Best regards, Tony

Pittiplatsch

Hello,

you wrote you use a flat network? Means, the SCALANCE SC must work in a bridge mode.

In the actual Version, the SCALANCE SC must be in "routing mode". That means, the subnet on internal and external ports (P1 and P2) must be different.

With the next firmware version, the SCALANCE SC should supports the "Bridge firewall", so that you can use a flat network.