Siemens SICAM CP-8050 Administrator Security-Handbuch Seite 9

3.6.4 Deaktivierung unnötiger Standard-User ........................................................85
3.6.5 Einschränkung der Rechte von Nutzern und Programmen...........................85
3.7 Security Penetration Testing ..............................................................................86
4 Kommunikationsprotokolle ............................................................................................87
4.1 Serielle Kommunikationsprotokolle ....................................................................88
4.1.1 End-End-/Gemeinschaftsverkehr ..................................................................88
4.1.2 Wählverkehr ..................................................................................................88
4.2 Ethernet basierte Kommunikationsprotokolle .....................................................89
4.2.1 Ethernet based IO Bus (EbIO) ......................................................................89
4.2.2 IP-basierte Protokolle SICAM A8000 CP-8050 .............................................89
4.2.2.1 IPSec VPN in SICAM A8000 CP-8050 ....................................................89
4.2.2.1.1
4.2.2.1.2
4.2.2.1.3
4.2.2.2 IP-Kommunikationsmatrix SICAM A8000 CP-8050 .................................93
4.2.3 IP-basierte Protokolle SICAM AK3, AK, TM, BC, SICAM A8000 CP-
8000/21/22 .....................................................................................................96
4.2.3.1 IPSec VPN in SICAM RTUs .....................................................................97
4.2.3.1.1
4.2.3.1.2
4.2.3.1.3
4.2.3.2 SNMPv3 Agent & Traps .........................................................................100
4.2.3.3 SYSLOG Client ......................................................................................100
4.2.3.4 IEC 62351-3 in SICAM A8000 Serie / SICAM RTUs .............................101
4.2.3.4.1
4.2.3.4.2
4.2.3.5 IEC 60870-5-104 mit TLS-Verschlüsselung nach IEC 62351-3:
Performance und Dimensionierung ........................................................112
4.2.3.6 IP-Kommunikationsmatrix ......................................................................118
4.2.4 TCP Keep Alive ...........................................................................................122
4.2.5 IEC 61850 - Goose .....................................................................................122
4.3 Andere Layer 2 Kommunikationsprotokolle ......................................................123
4.3.1 Secure Maintenance State ..........................................................................123
5 Patchmanagement .........................................................................................................125
5.1 SICAM A8000 Series / SICAM RTUs ...............................................................126
5.2 SICAM PTS Protocol Test System ...................................................................127
5.3 SICAM TOOLBOX II .........................................................................................128
5.3.1 Live Update .................................................................................................128
5.4 SICAM Device Manager ...................................................................................129
6 Virenschutz .....................................................................................................................131
6.1 Allgemeines ......................................................................................................132
SICAM A8000 Serie / RTUs / TOOLBOX II / Device Manager
ADMINISTRATOR Security-Handbuch
DC0-114-2.15, Ausgabe 12.2017
Aktivierung von IPSec VPN .................................................................90
IPsec Parameter .................................................................................90
Ändern des Pre-shared keys...............................................................92
Aktivierung von IPSec VPN .................................................................97
IPsec Parameter .................................................................................98
Ändern des Pre-shared keys...............................................................99
IEC 62351-3 für IEC 60870-5-104 ....................................................101
Erstellung eines Zertifikats ................................................................102
Inhaltsverzeichnis
9