Siemens Network Router Version: 1.2 User Manual

LISE-MEITNER-ALLEE 4 D - 44801 Bochum TELEFON +49 (0) 234/43 87 02-09 TELEFAX +49 (0) 234/43 87 02-11 E-Mail [email protected] IN

2. Security Services 2.3.1 First Initiation At first initialization an IP address is assigned to the Scalance S moduls. After the IP configuratio

2. Security Services • Exchange of addresses of the internal networks between security modules • Signalizing that a packet was rejected because

3. Security Analysis 3 Security Analysis The security module is designed for the use in automation networks. For automation networks availability

3. Security Analysis The implementation of the IKE protocol does not show any known security weaknesses. No known security weaknesses of the OpenB

3. Security Analysis The pf-packet filter of OpenBSD does not include any known weaknesses. A test of the filter rules set by the configuration to

3. Security Analysis The MiniWeb server is well implemented. The SSL implementation does not show any failures. The only security weakness is the

3. Security Analysis 3.2.1 Configuration Files The configuration tool transfers the configuration data via SSL. Hence, eavesdropping of the conne

4. Summary 4 Summary The security module is designed for using it in an automation network in order to protect the network from data theft and man

5. References 5 References Functional Specification, Version 1.0, 7.10.2003 Security Target, Version 0.2, 31.10.2003 Instruction Handbook, 1/2005

Index Index 1 Introduction...4 2 Security Se

Executive Summary Executive Summary The Scalance S 612/S 613 is a security module to protect the communication between automation networks and to

1. Introduction 1 Introduction The Siemens Scalance S 613 is a security module which protects the communication between automation networks. It pr

1. Introduction Automation networks demand for a variety of security goals such that only basic default-rules are preset. Nonetheless, these defau

2. Security Services 2 Security Services The security module has two Ethernet interfaces, one to the internal network which is protected, and the

2. Security Services and 3 on the security module. The packet filter controls the communication between the internal network and the external netw

2. Security Services Figure 3: VPN-function of the Security-module For the communication over a VPN the security modules are collected in groups

2. Security Services 2.2.4 Firmware Update The firmware of the security device can be updated. For this purpose, Siemens supplies an encrypted an