Siemens Desigo CC NK823x Cybersecurity Guidelines

CC Cybersecurity Guidelines of Contents This Document 3 Documents 4 Center 4 Terms and Abbreviations 5 Revision History 8 Security Notices 9 Guidelines Reference 10 Security Guidelines 11 Current Software and Firmware Version Status 12 Protected System Configuration 12 Boundary Protection 13 Through Untrusted Networks 14 15 Measures 15 Settings 16 Operation Maintenance 16 of IT Components 16 out End of Life 16 Operation Environment 17 Definition of Intended Operational Environment 17 Network Deployment 19 Tunneled Network Deployment 21 26 This Document Documents This Document guidelines are designed to provide guidance and conditions for connecting legacy fire and intrusion detection systems over NK823x devices to the Desigo system They describe all the permitted applications for the intended environment security related information for the system owner for maintaining security in the cycle of the system see Operation Maintenance 16 document applies to NK823x and Desigo CC and Availability Due to Misuse document must be available in a usable format throughout the entire life of the product Keep the document for reference and ensure that it can be by target groups you require another copy of this document contact Customer Support at 49 89 9221 8000 or email fs support sbt siemens com Audience owner according to EN 50110 1 is person with the overall to ensure the safe operation of the electrical installation by setting and organization or framework person can be the owner employer or a delegated person of these duties can be delegated to as required For large or complex electrical installations or networks the can be delegated for parts of the installations or the network security officers support companies when it comes to assessing the security of solutions and services and defining and implementing improvements are technical experts in all aspects of IT security Manager coordinates the deployment of all persons and resources in the project according to schedule provides the information required to the project has obtained suitable specialist training for the function and for the and has attended the training courses for Project Managers Personnel configure the product at the place of installation to customer specific requirements check the product operability and the product for use by the operator search for and correct malfunctions obtained suitable specialist training for the function and for the products and attended the training courses for commissioning personnel Language and Reference Document The reference version of this document is the international version in English international version is not localized 26 This Document Documents Documents of electrical installations Part 1 requirements ID Reference 50110 1 2013 communication networks Network and security 1 1 Terminology concepts models 62443 1 1 communication networks Network and security 2 1 Establishing an automation and control system security 62443 2 1 technology Security techniques for cybersecurity 27032 2012 technology Security techniques security 27033 Part 1 technology Security techniques security 27034 Part 1 CC V4.1 Cybersecurity Guidelines Center download various types of documents such as datasheets mounting and license texts Go to the following website the Search for field enter the document ID Click Search the homepage you will also find other criteria to search for documents and applications apps for the various systems 26 This Document Terms and Abbreviations Terms and Abbreviations is a function that enables one or more switch ports in a Cisco of virtual local area networks VLANs to carry traffic for any or all VLANs accessible through a particular switch In Cisco Dynamic Protocol DTP a port can be set to autotrunking by default DTP Automation is a communication protocol for Building Automation and Control networks BACnet was designed to allow communication of building and control systems for applications such as heating and air conditioning control HVAC lighting control access and fire detection systems and their associated equipment The protocol provides mechanisms for computerized building devices to exchange information regardless of the particular service they perform or demilitarized zone is a physical or logical subnetwork that contains exposes an organization external facing services to an untrusted usually a larger network such as the Internet The purpose of a is to add an additional layer of security to an organization local area LAN an external network node can access only what is exposed the DMZ while the rest of the organization network is firewalled The functions as a small isolated network positioned between the Internet the private network and if its design is effective allows the extra time to detect and address breaches before they would penetrate the internal networks of life cycle End Processor is a computer that extends and distributes connectivity field networks The purpose is to off load from the host computer the of managing the peripheral devices transmitting and receiving packet assembly and disassembly error detection and error is a network security system that monitors and controls the and outgoing network traffic based on predetermined security Control Message Protocol International Electrotechnical Commission is an international standards that prepares and publishes International Standards for all electronic and related technologies collectively known as Information Services is an extensible web server created by for use with the Windows NT family IIS supports HTTP HTTP 2 FTP FTPS SMTP and NNTP Protocol version 4 IPv4 is the fourth version of the Internet IP It is one of the core protocols of standards based methods in the Internet an