User Manual

IF1000series 7
©adstecGmbHRaiffeisenstr.1470771LeinfeldenEchterdingen
3 Introduction
TheIndustrialFirewallconstitutesalinkbetweentheITworldandautomation,therebymeetingthe
requirementsofITsecurityaswellasthosebytheproductionlinemaintenancepersonnel.Itenablesmonitoring
andcontroloftheplantsetupnetwork,andoftherelativeaccesspoints.Itsessentialsecurityprotection
mechanismis
constitutedbytheeventdependentandphysicalnetworkseparation.ThisFirewallfurthermore
offers,amongstothers,asecureaccessintheeventofserviceoperations;itenablestrafficshapingandis
capableofimplementingtheavailablevirusscanners.
Note:
Fortheefficientonlineconfigurationofyouradstecdevices,it
ispossibletodownload
thecurrentversionofthefreetool„IDAlight"onthecompany`shomepage
http://www.adstec.de.Thetooloffersyouforexamplethepossibilityofdefining
individualparametersorwholegroupsofparametersataServerdeviceandtotransfer
yoursettingstoalimitedselectionand/orto
alladstecdevicesofsamedesignand
version,withouthavingtomaketheseconfigurationstimeconsumingateachindividual
device.YoualsohavethepossibilityofassigningsequentialIPaddressesforyouradstec
devices.
WithIDAlightyoucancomfortablyprovideowngroupsofparametersaccordingto
your
specificrequirementsandmodifythematanytime.
3.1 Cut&Stop
Duringcriticalstartuporproductionphases,theEthernetuplinkcanbephysicallydisconnectedi.e.via
hardware,througha24Vinput.Thiswillsafelyruleoutbothintentionalandunintentionalexternal
manipulation.
Theuplinkisreconnectedthroughthesameinput.Thisfunctionmakesintegrationintoanautomationconcept
verysimple.
3.2 Alarming
Intheeventthataruleisviolated,thealarmsignalisreportedtothecontrolcentrethroughanoutput.
Necessarymeasurescanbeautomateddirectly.Forexample,acousticindicatorlightscansignalthealarm
condition.
Emailscanbesentoutautomaticallytosignalarulesviolationevent.
3.3 Eventlog
Azerovoltageeventlogbookwithretentivememorystoresalleventswheneverthefirewallisdisconnected
fromthepowersupply(NVRAMoption).
TheeventlogbookcanbereadouteitherlocallyorviaacentralSyslogserver.
3.4 Display/Keypad
Thebuiltindisplaycanbeusedtoconfiguretheessentialunitfunctions.Itisthuspossibletoobtainaquick
systemanalysis,e.g.ofthenetworkload,directlyfromthedisplay.
Thedisplayandkeyscanbepasswordprotectedagainstunauthorizedmanipulation