Ip Access Protection With Programmed Communications Connections - Siemens S7-1500 Operating Instructions Manual

Configuration, programming

4.8 IP access protection with programmed communications connections

Notes on the syntax
The following applies to the file name of a file DB:
● The file name begins with "cpuX" (where X=1 for S7-1500).
Note
Keep to the notation (lower case for "cpu" and no leading spaces at the start of the row).
Otherwise, the files will not be recognized.
● Length: maximum 64 characters (including "cpuX")
FTPS access only with security functions enabled
FTPS access to the S7-1500 station as an FTP server is only possible if a user with suitable
rights has been created in the STEP 7 project. This means that the security functions must
be enabled on the CP. For this, security settings are available in the global user
administration.
4.8 IP access protection with programmed communications connections
Restrictions with programmed connections and configured security functions
In principle, it is possible to set up communications connections program-controlled using the
program block TCON and at the same time by configuring the firewall.
When configuring specified connections (active endpoints) in STEP 7, the IP addresses of
the partners are not entered automatically in the firewall configuration.
The configuration of IP access protection and the aspects of activated security are described
in the online help of STEP 7.
52
Operating Instructions, 05/2017, C79000-G8976-C289-07
CP 1543-1