Siemens Adds Scalance S615 and Sinema Remote Connect to Security Product Line

Flexible Protection for Automation Networks
The Scalance S615 is the latest addition to the Siemens security module product line. This entry-level device from the Scalance S range protects industrial networks and automation systems against unauthorized access. The Scalance S615 security module has five Ethernet ports that offer protection for various network topologies via firewall or virtual private network VPN (IPsec and OpenVPN) and enable flexible implementation of security concepts. Users can configure up to five variable security zones with individual firewall rules. With the auto-configuration interface, the device can be easily integrated and parameterized with the Sinema Remote Connect management platform. The management platform lets users conveniently manage network connections and access widely distributed plants and machinery.

The new Scalance S615 security module has various configuration, management and diagnostics options via web-based management (WBM), command line Interface (CLI), and simple network management protocol (SNMP). As a dynamic host configuration protocol (DHCP) server and client, the device can be used in any virtual local area network (VLAN) security zone. The new device has a key-operated switch function on its digital input for establishing a controlled tunnel connection.

The security modules in the Siemens Scalance S family connect seamlessly to the security structures of the office and IT worlds. They are specially designed to meet the demands of automation systems with features, such as a rugged design for industrial environments, easy installation, minimal downtime in the event of faults due to a redundant power supply, and rapid device replacement via C-plug. Depending on the level of security required, the firewall and VPN security features can be combined.

As with all Scalance products, the new security module comes with a five-year warranty for units with delivery date since January 1, 2015.

Management Platform Enables Secure and Simple Remote Access
Sinema Remote Connect is a management platform supplied by Siemens for efficient and secure remote access to globally distributed machines and plants. The server application simplifies not only remote services, such as the remote maintenance of machines and plants, but also other remote applications, such as condition monitoring. Sinema Remote Connect manages and authorizes all communication connections. The management platform is particularly suitable for standard and special-purpose machine building, as it enables original equipment manufacturers (OEMs) to uniquely identify and control many identical machines at different customer locations.

Sinema Remote Connect ensures the secure administration of VPN tunnels between the control center, service engineers, and the installed plants. Service engineers and the machines to be maintained each establish an independent connection to Sinema Remote Connect. The management platform then verifies the identity of the individual stations by an exchange of certificates, before any access to the machine is granted. Any unauthorized access to the corporate networks in which the plants or machines operate is prevented, thus increasing security. The VPN tunnel connections are certificate-based in accordance with the OpenVPN standard and are protected with up to 4096-bit encryption. The allocation of rights for access to machines can be centrally regulated using the management platform's simple user administration feature. All stations are enabled or blocked manually, so that the customers of the OEMs and the plant operators also have permanent control over every attempt to access their corporate network.

All machines can be uniquely identified and selected via Sinema Remote Connect – even if they have identical local IP addresses – by means of an integrated address book function. The VPN connections can then be established with a simple mouse click. Sinema Remote Connect is protocol-independent. This means that users can use different applications, such as the Simatic Step 7 programming software (TIA Portal), for remote maintenance as soon as the connection to the machine has been established.

Machines can be connected to Sinema Remote Connect via cellular phone networks, DSL, or existing private network infrastructures. Siemens offers a wide portfolio of industrial routers from the Scalance series, such as the Scalance S615, for this purpose. These devices can easily be parameterized via Sinema Remote Connect using an auto-configuration interface. All the information about the respective machines can be stored in the management platform, meaning that the routers only have to be registered once in Sinema Remote Connect, after which all configuration data is assigned to them. This eliminates the otherwise time-consuming programming of the devices.

Keywords: Security Module, Firewall Rules, Distributed Plants, Distributed Machinery, Special-Purpose Machines, Remote Maintenance, ARC Advisory Group.