Siemens SINAMICS Configuration Manual page 78

Security measures for SINAMICS
5.7 Information about individual interfaces
If you implement such an application, you must comply with the following boundary conditions:
● Position the switch in the locked control cabinet so that it is protected.
● Parameterize the switch corresponding to the SECURITY requirements of the operator.
● Keep a port open for local service access. Notify the operator of any deviating access data.
Deviating access data can also be managed by the operator.
● Reduce LAN interfaces which are networked outside of the SINAMICS MV cabinets to a
minimum. Configure an appropriate switch corresponding to the SECURITY requirements
of the operator.
● Disable any unneeded ports and services via settings on the switch that meets security
requirements.
X140 serial interface (RS232)
You can connect an external HMI device for operator control/parameter assignment via the
serial interface X140.
NOTICE
Access to the inverters only for authorized personnel
Unauthorized persons may be able to damage or alter production equipment as a result of
gaps in a company's physical security. Confidential information can also be lost or altered as
a result of this. This can be prevented if both the company's site and the production areas
are protected accordingly.
● You can find information on suitable protective measures in chapter "AUTOHOTSPOT".
X150 P1/P2 PROFINET
In accordance with the Defense in Depth concept, PROFINET must be isolated from the
remaining plant network. Access to cables and possibly open connections must be
implemented in a protected fashion, as in a control cabinet. You will find notes on this in chapter
"General security measures (Page 19)"
Additional information
You can find further information in the document "Supplementary component description" on
the CD that accompanies the converter, and in the annex "Communication (Page 83)".
78
Configuration Manual, 08/2017, A5E36912609A
Industrial Security