Siemens Desigo CC V4 1 DNA Novigo Cybersecurity Guidelines

CC V4.1 PACE Cybersecurity Guidelines Infrastructure of Contents This Document 3 Documents 4 Center 4 Terms and Abbreviations 5 8 Revision History 9 Guidelines Reference 10 Security 11 Protected System Configuration 12 Boundary Protection 12 Through Untrusted Networks 14 15 Measures 15 Settings 16 Operation Maintenance 17 of IT Components 17 out End of Life 17 Operation Environment Including Deployment Options 18 Definition of Intended Operational Environment 18 Network Deployment 19 Tunneled Network Deployment 21 27 This Document Documents This Document guidelines are designed to provide guidance and conditions for connecting fire detection systems They describe all the permitted applications for the operational environments This document is intended to be transferred installation personnel to system owner security related information for the system owner for maintaining security in the cycle of the system see Operation Maintenance 17 document applies to Desigo CC V4 x and Availability Due to Misuse document must be available in a usable format throughout the entire life of the product Keep the document for reference and ensure that it can be by target groups you require another copy of this document contact Customer Support at 49 89 9221 8000 Audience owner according to EN 50110 1 is person with the overall to ensure the safe operation of the electrical installation by setting and organization or framework This person can be the owner employer or a delegated person Some of these duties can be delegated to as required For large or complex electrical installations or networks the can be delegated for parts of the installations or the network security officers support companies when it comes to assessing the security of solutions and services and defining and implementing improvements are technical experts in all aspects of IT security Manager coordinates the deployment of all persons and resources involved the project according to schedule provides the information required to run the has obtained suitable specialist training for the function and for the and has attended the training courses for Project Managers Personnel configure the product at the place of installation to customer specific requirements check the product operability and the product for use by the operator search for and correct malfunctions obtained suitable specialist training for the function and for the products and attended the training courses for commissioning personnel Language and Reference Document The source original language of this document is German de The reference version of this document is the international version in English international version is not localized 27 This Document Documents Documents of electrical installations Part 1 requirements ID Reference 50110 1 2013 communication networks Network and security Part 1 1 Terminology concepts models 62443 1 1 communication networks Network and security Part 2 1 Establishing an automation and control system security 62443 2 1 technology Security techniques for cybersecurity 27032 2012 technology Security techniques security 27033 Part 1 technology Security techniques security 27034 Part 1 CC V4.0 Cybersecurity Guidelines Center download various types of documents such as datasheets mounting and license texts Go to the following website the Search for field enter the document ID Click Search the homepage you will also find other criteria to search for documents and applications apps for the various systems 27 This Document Terms and Abbreviations Terms and Abbreviations is a function that enables one or more switch ports in a Cisco of virtual local area networks VLANs to carry traffic for any or all of VLANs accessible through a particular switch In Cisco s Dynamic Protocol DTP a port can be set to autotrunking by default DTP Automation means that both devices and their cable connection are visible at the time and thus a potential manipulation might be recognizable or demilitarized zone is a physical or logical subnetwork that contains exposes an organization s external facing services to an untrusted usually a larger network such as the Internet The purpose of a is to add an additional layer of security to an organization s local area LAN an external network node can access only what is exposed the DMZ while the rest of the organization s network is firewalled The functions as a small isolated network positioned between the Internet the private network and if its design is effective allows the extra time to detect and address breaches before they would penetrate the internal networks architecture layer It enables the integration between CC and Novigo Cerberus PACE VA PA systems of life cycle End Processor is a computer that extends and distributes connectivity field networks The purpose is to off load from the host computer the of managing the peripheral devices transmitting and receiving packet assembly and disassembly error detection and error is a network security system that monitors and controls the and outgoing network traffic based on predetermined security Control Message Protocol International Electrotechnical Commission is an international standards that prepares and publishes International Standards for all electronic and related technologies collectively known as Information Services is an extensible web server created by for use with the Windows NT family IIS supports HTTP HTTP 2 FTP FTPS SMTP and NNTP Protocol version 4 IPv4 is the fourth version of the Internet IP It is one of the core protocols of standards based methods in the Internet and was the first version deployed production in the ARPANET in 1983 is a connectionless protocol for use on packet switched networks It on a best effort delivery model in that it does not guarantee nor does it assure proper sequenci