Without add-on products, conventional firewalls will remain ineffective for OPC, resulting in poor network security of these applications. (Con-nections to the remote device or network are established via this network.) Use a UTP cable (CAT5). WAN port Socket for connection to the external network, e.g., WAN, Internet.
#DEFAULT PASSWORD TO MGUARD SERIAL#
Particularly in existing brown field plants, OPC classic will continue to be deployed for many years to come. The FL MGUARD SMART2 (not the FL MGUARD SMART) can be config-ured so that a serial console is available via the USB plug. However, the penetration of the market and installed base with this new technology is progressing slowly. Router with intelligent firewall and VPN for 10 tunnels (up to 250 supported with optional additional license), CIFS Integrity Monitoring (as an option), metal housing, slot for SD memory card, extended temperature range, high-performance firewall/VPN: up to 124 Mbps/40 Mbps. With OPC Unified Architecture (OPC-UA), a newer generation of OPC based on updated foundations is available which avoids the above deficits. Also, while OPC communication via routers is allowed, the masquerading or rewriting of addresses by network address translation (NAT) often desired for the integration of machinery and equipment into upper level networks has not been feasible without the help of additional OPC tunnels so far. The classic OPC protocol has been criticized long time for the IT security deficits and notorious firewall unfriendliness it inherited from Microsoft’s DCOM model.
#DEFAULT PASSWORD TO MGUARD SOFTWARE#
Besides physical mGuard appliances, all of the functions mentioned are also available in another showcased new software product, mGuard eVA, the embedded Virtual Appliance for Windows PCs.
This option provides for the surveillance of industrial PCs against potential infections and manipulations and has been further improved in its usability. Given the threat to industrial systems by ever more targeted attacks with malware, there is also increased user interest in the mGuard Integrity Monitoring functionality. By various simple triggering events, asset operators can thus switch between firewall rule sets for different operating conditions, e.g., when different connections shall be allowed or denied during production, maintenance, or remote servicing situations.
With the new Conditional Firewall functionality, pre-defined situational firewall rule sets can literally be activated at the push of a button. For OPC communication via mGuard routers, even NAT methods such as masquerading or 1:1 NAT mapping can be used thanks to a special deep packet inspection technique – a true world first and little sensation for experienced OPC users.
Its new module mGuard OPC Inspector masters the complex connection tracking of OPC dialogues across their changing ports and connection directions, thus enabling an effective control and filtering of OPC based on the stateful inspection firewall principle. At Hannover Messe 2014, Innominate will present the upcoming version mGuard 8.1 of its security appliance firmware with unique new functions for industrial cybersecurity.
0 kommentar(er)
