Industrial Security Appliances with extended functionality

Siemens has extend­ed the Scalance SC-600 Indus­tri­al Secu­ri­ty Appli­ances to include more func­tion­al­i­ty for even bet­ter and sim­pler pro­tec­tion of pro­duc­tion net­works. The devices now have a Bridge Fire­wall, sup­port redun­dant net­work struc­tures, and allow user-spe­cif­ic fire­walls. This enables users to increase the avail­abil­i­ty of their pro­duc­tion while also reduc­ing the pro­cure­ment costs of net­work components.
The Bridge Fire­wall allows devices to be used in flat net­works. Fur­ther­more, not only Lay­er 3 but also Lay­er 2 data can now be fil­tered. This enables users to secure­ly access automa­tion com­po­nents in Profinet cells for main­te­nance pur­pos­es, for exam­ple. Indus­tri­al Secu­ri­ty Appli­ances can be used with the Ser­vice Bridge (a cor­re­spond­ing­ly con­fig­ured Indus­tri­al Eth­er­net switch from the Scalance XC-200 prod­uct line) as well as with oth­er applications.
The devices can also be inte­grat­ed into redun­dant net­work infra­struc­tures. Sup­port­ing two redun­dan­cy pro­to­cols for Lay­er 2 and Lay­er 3 elim­i­nates the need for addi­tion­al switch­es on the secu­ri­ty tran­si­tions. The Media Redun­dan­cy Pro­to­col (MRP) enables the SC-600 to be inte­grat­ed on the Lay­er 2 lev­el as Profinet devices in the Profinet ring redun­dan­cy with­out need­ing an addi­tion­al man­aged Indus­tri­al Eth­er­net switch. In the event of a ring break, all net­work com­po­nents in the ring switch to the redun­dant path with­in 200 ms and thus avoid a pro­duc­tion stop­page in the event of a fault. Fur­ther­more, the sup­port of the Vir­tu­al Router Redun­dan­cy Pro­to­col (VRRP) allows redun­dan­cy on Lay­er 3. This enables users to group the Scalance SC-600 togeth­er with oth­er routers in the net­work in one log­i­cal group. If the router defined as the mas­ter fails, anoth­er router in the log­i­cal group takes over the func­tion of the default router. The net­work con­se­quent­ly con­tin­ues to com­mu­ni­cate reliably.
The third inno­va­tion is sup­port for user-spe­cif­ic fire­walls. Spe­cif­ic fire­wall rules allow not only device-spe­cif­ic but also user-spe­cif­ic fil­ter­ing of the data. This enables users to assign dif­fer­ing rights. Users con­se­quent­ly ben­e­fit from eas­i­er access man­age­ment for net­work components.
Sup­port of all device ver­sions in the new Sinec NMS net­work man­age­ment soft­ware allows the com­plete, uni­form con­fig­u­ra­tion of all the Scalance net­work com­po­nents on a man­age­ment plat­form. Use of the dig­i­tal input togeth­er with the sig­nal­ing con­tact allows, for exam­ple, the acti­va­tion and deac­ti­va­tion of the VPN tun­nel via the man­age­ment plat­form for remote net­works, Sine­ma Remote Connect.
Siemens at the SPS IPC Dri­ves 2018: Hall 11