Cerberus Portal UL Operation Manual A6V12237004_enUS_b 2021-03-31 Smart Infrastructure
Edition notice Edition notice Technical specifications and availability subject to change without notice. This document may not be reproduced, disseminated to third parties or processed and its contents may not be used or disclosed without express permission. Noncompliance shall result in compensation for damages. All rights, including those resulting from a successful patent application and registration of a utility model or design patent, are reserved.
Copyright Notice Copyright Notice Data and design subject to change without notice. / Supply subject to availability. © Siemens Switzerland (2020) Cerberus is trademark of Siemens Schweiz AG. Other product or company names mentioned herein may be the trademarks of their respective owners. We reserve all rights in this document and in the subject thereof.
Cyber security disclaimer Cyber security disclaimer Siemens provides a portfolio of products, solutions, systems and services that includes security functions that support the secure operation of plants, systems, machines and networks. In the field of Building Technologies, this includes building automation and control, fire safety, security management as well as physical security systems.
Contents 1 About this document ......................................................................................... 7 1.1 Reference documents .......................................................................................... 9 1.2 Download center .................................................................................................. 9 1.3 Revision history .................................................................................................. 10 2 Getting started .
7.3 Filter by date and category ................................................................................. 38 7.4 Export data ......................................................................................................... 38 8 Edit notes .......................................................................................................... 39 9 Connect tunnel ................................................................................................. 40 9.
About this document 1 Reference documents 1 About this document This document must be transferred from the installation personnel to the system operator. Safekeeping and availability NOTICE Missing information Damage due to misuse ● This document must remain available in a usable condition throughout the entire life cycle of the product. Keep the document safe so that it can be consulted and make sure that it is accessible to the relevant target groups.
1 About this document Reference documents Target group Activity Project Engineer ● ● ● Installation personnel ● ● Commissioning personnel ● ● ● Maintenance personnel ● ● ● Recommended qualification Parameterizes the product for specific ● countries and/or customers. Checks the operability and releases the product for commissioning at the ● site of use. Is responsible for troubleshooting. Has obtained suitable specialist training for the function and for the products.
About this document 1 Reference documents ⊳ Requirement for a behavior instruction 1. 2.
1 About this document Revision history You will also find information about search variants and links to mobile applications (apps) for various systems on the home page. 1.
Getting started 2 User interface 2 Getting started Fire protection companies can monitor, maintain, and remotely connect to all their networked fire protection systems 24/7 with the Cerberus Cloud Apps service.
2 Getting started User interface Overview of all sites 1 2 3 4 5 6 Operating and display elements on the overview page 1 Navigation bar Based on user profile, a user can switch to: ● another portal, Account Manager or Asset Manager ● another site ● another organization ● another Gateway 2 Status bar Displays an overview of the states of all sites registered in the Cloud. 3 Map overview Displays all sites registered in the Cloud.
2 Getting started User interface Overview of selected sites 2 1 3 4 6 5 7 8 Operating and display elements on the overview page 1 Site map Indicates the current site details. 2 Tunnel Connection Performs necessary tasks remotely with the engineering tool through the Tunnel Connection. Requires the appropriate user rights. An agent must first be downloaded (link) and running. A connection through the tunnel is only possible after running the agent.
2 Getting started Explanation of the symbols 5 Incident list Displays all site incidents in a list. Color bars display the corresponding event category. 6 Incident details Displays detailed information on the selected incident. The specific incident must be selected. 7 Category filter The incident list is filtered by the selected category. Multiple selection is possible. The category filter may have a different number of categories depending on the applicable standard (EN, UL, ULC).
2 Getting started Topology The Connect X300 Gateway is incorrectly configured A new site is created in Asset Manager and a Connect X300 Gateway device is added. The icon is then displayed , since the required configuration is not yet completed: – for distribution (see Document Commissioning Connect X300 Gateway, section Assign distribution); – for Site-ID (see document Commissioning Connect X300 Gateway, section Connect fire detection system to Portal). Select to open the edit page.
2 Getting started Safety notes 2.4.1 Cloud Security: Provider and Cloud Hosted Application Infrastructure and Platform Services Cerberus Cloud Apps utilizes AWS (Amazon Web Services) cloud infrastructure to host its application services, which along with Siemens Connect X300 gateway, provides an end-to-end solution to unlock new value for customers.
2 Getting started Safety notes Remote Web Client The recommended browser for use with Cerberus Cloud Apps is Chrome. Incident Handling Siemens has processes in place for handling security incidents. If a cybersecurity threat is suspected or found, immediately contact Siemens Computer Emergency Response Team for products (Product CERT) or your local Siemens customer service. More detail on Incident handling can be found at: https://www.siemens.com/cert/advisories. 2.4.
2 Getting started Trial version Security is a shared responsibility ● ● ● As with any solution that encompasses cloud application and IoT/On-premise connected devices, customers play a key role in keeping their systems secure. Keeping your systems up-to-date and employees educated is key to mitigating cyber risks. Ensure Connect X300 gateway is installed in a physically secure area where access is restricted, that is, access, power and network cable cannot be tampered with. 2.
2 Getting started Technical terms and abbreviations 2. Select Try the demo version. The default summary opens. 3. Select the appropriate site to start your journey of discovery. 2.6 Technical terms and abbreviations A6V12237004_enUS_b AWS Amazon Web Services Cloud Apps Cloud applications to remotely control and monitor various sites. Connect X300 Gateway Family of Siemens gateway devices for Cerberus Cloud Apps; for example, the 'Connect X300' device.
2 Getting started Technical terms and abbreviations Internet. 20 | 47 IDaaS Identity as a Service is an authentication infrastructure that is managed by Siemens. IoT Internet of Things IT/OT Information technology/operational technology network. Information technology/operational technology network. An IT network is used for electronic devices in an office, e.g., PCs, printers, etc.
3 Login and logout Sign in 3 Login and logout The user must be registered to login to the Cerberus Portal. The login procedures are detailed in document A6V12050070 Account Manager. For Siemens employees using a tablet or mobile phone to login, the Siemens Login Service requires a higher security level for mobile authentication since the Smart Card cannot be used. - The option One-time Password per SMS is unavailable if no mobile number is assigned to the personal account.
3 Login and logout Sign in 1. Select the following link: https://cerberusportal.siemens.com. The login page Cerberus Portal opens. The Trial Version button can be opened without a Siemens-ID to gain initial impressions of the Cerberus Portal. 2. Select the user language from the drop-down list in the top right corner. 3. Read the displayed security text. After login you can directly access and influence connected sites and assets as specified in the related documentation.
Login and logout 3 Log out 3.2 Log out 1. Select the abbreviated name in the top right-hand corner. The information dialog window opens. 2. Select Log off A6V12237004_enUS_b .
4 Incident handling Locate incident 4 Incident handling The Cerberus Portal displays all incidents in the corresponding event category. Incidents can be filtered in the views and sent as needed by category to an email address [➙ 30] or via SMS [➙ 31] to a cell phone. All incident numbers are displayed in the status bar. 4.1 Locate incident 1. In the status bar, select Alarms or, in the map overview, the symbol or zoom or . Only sites with alarms are displayed in the site list or map overview. 2.
4 Incident handling Filter Incidents 1. Select the incident. Details on the incident display. 2. Depending on the incident type, notify the operator or service technician. 4.3 Filter Incidents The view can be limited by filters if there are a lot of incidents. The following Filter elements are available: ● Event category ● Date Range ● Find Filter can be applied for individually or combined. Operator AND applies to the individual filters. The Live Incident list is open.
4 Incident handling Notify The text filter applies to columns Incident text and Element category. If you enter, for example, Zone 1, the results from all the columns are listed, including Zone 11. 4.4 Notify One or more Notifications [➙ 30] must be available to send an incident notification to a subscriber. 4.4.1 Receive by email Once an incident occurs, the information is sent to all subscribers registered for the incident. 1. Read the incident text. Do not respond to this email.
4 Incident handling Notify 4.4.2 Receive by SMS Once an incident occurs, the information is sent to all subscribers registered for the incident. 1. Read the incident text. 2. Open Cerberus Portal. 3. Select a facility and then Incidents . The latest message is displayed at the top of the list. 4. Depending on the incident type, notify the operator or service technician. 4.4.3 Unsubscribe 4.4.3.1 Email A registered subscriber can cancel the subscription at any time.
4 Incident handling Notify 1. Select link Click here to Unsubscribe. 2. The landing page opens for Cerberus Portal. 3. Select Unsubscribe. No more notifications are sent for this subscription. The subscription remains inactive in Notifications 4.4.3.2 . SMS A registered subscriber can cancel the subscription at any time. The subscriber must ensure that the information continues to be forwarded to other subscribers before unsubscribing.
Incident handling 4 Notify 1. Select the link in the SMS. 2. The landing page opens for Cerberus Portal. 3. Select Unsubscribe. No more notifications are sent for this subscription. The subscription remains inactive in Notifications A6V12237004_enUS_b .
5 Edit notifications Email notification 5 Edit notifications Incidents can be forwarded by email or SMS to subscribers. Category filters for each subscriber can limit forwarding of incidents. Notifications can also be switched off temporarily for a subscriber, for example, during vacation. Notifications must be setup for each site. 5.1 Email notification 5.1.1 Set up A notification is always setup on one site. 1. Select a facility and then Notifications . 2. Select ADD SUBSCRIBER. 3. Select Email. 4.
Edit notifications 5 SMS notification 5.1.2 Edit 1. Select a facility and then Notifications . 2. Select the email notification. 3. Select Edit. 4. Edit the information in fields Name, Email address or Event category as needed. 5. Select Save. The edited data is saved. The edited notification is activated. 5.1.3 Delete 1. Select a facility and then Notifications . 2. Select the email notification. 3. Select Delete. The Delete subscriber dialog box opens. 4. Select Yes.
5 Edit notifications SMS notification 1. Select a facility and then Notifications . 2. Select ADD SUBSCRIBER. 3. Select SMS. 4. Enter the appropriate data in the Name and Mobile number fields. For telephone number 073 456 123 987 using country code 0041, the number does not include the leading 0 in the area code, e.g. 0041 73 456 123 987. Cerberus Portal does not check whether the telephone number exists. The data cannot be saved in the event of an error message. 5.
Edit notifications 5 Temporarily switch off/on 5.2.2 Edit 1. Select a facility and then Notifications . 2. Select the SMS notification. 3. Select Edit. 4. Edit the information in fields Name, Mobile number or Event category as needed. 5. Select Save. The edited data is saved. The edited notification is activated. 5.2.3 Delete 1. Select a facility and then Notifications . 2. Select the SMS notification. 3. Select Delete. The Delete subscriber dialog box opens. 4. Select Yes.
5 Edit notifications Temporarily switch off/on 1. Select a facility and then Notifications . 2. Select the notification. 3. Select position Off on the on/off switch. The change is saved. The notification is deactivated. Notifications can be activated again by moving the on/off switch to the On.
Display existing panels 6 6 Display existing panels Information on connected panels and fire detectors is displayed in an overview. ◈ Select a facility and then Panels . Displays information on fire control panels. The numbers number of connected devices for a type.
7 Logging Filter by category 7 Logging All incidents for the sites are saved to the Cloud database and can be queried as needed. The selected data can then be exported for further processing. 7.1 Filter by category 1. Select a facility and then History . 2. Select the category to filter. Multiple categories can be selected. The selected categories are highlighted in color. The data is displayed by category filter. 7.2 Filter by date 1. Select a facility and then History . 2.
Logging 7 Filter by date – Weekday 4. Select the end date: – – – Year Month Weekday The date range is taken over and displayed in the tab. Any found data sets are displayed.
7 Logging Filter by date and category 7.3 Filter by date and category 1. Select a facility and then History . 2. Select the category to filter. Multiple categories can be selected. 3. Select Filter by date range. The date dialog box opens. 4. Select the start date. 5. Select the end date. The date range is taken over and displayed in the tab. Any found data sets are displayed. 7.4 Export data The maximum number of data sets for export is 10,000.
Edit notes 8 8 Edit notes The state and work on a plant can be entered in the Notes tab. We recommend structuring the information and entering the latest information at the top. A maximum of 4,000 characters can be entered per site. Example: 2021-02-02 H.Rebuz Checked battery in panel. 2021-01-15 K. Miller Replaced fire detector 35 in the top floor. 1. Select a facility and then Notes . 2. Enter the first info text. 3. Select Save. 4. Select Edit . 5.
9 Connect tunnel Create tunnel connection 9 Connect tunnel Cerberus Tunnel is remotely connected to the fire detection system via the Cerberus Portal to use Cerberus-Remote and remotely access the Cerberus-Engineering-Tool. You must be properly trained to use this function. 9.1 Create tunnel connection NOTICE Avoid connection problems Do not use the Siemens 'Cloud device' tool to connect. Only connect using the following workflow. 1. In a supported browser, enter the link: https://cerberusportal.
9 Connect tunnel Disconnect tunnel connection Check whether you are connected to the Siemens Internetwork if the connection is not established within 10 seconds. 9.2 Disconnect tunnel connection The tunnel connection is connected. ◈ On the right side, select 'Disconnect'. NOTICE Avoid connection problems Only use the 'Disconnect' button to disconnect the Cerberus Portal from the panel.
9 Connect tunnel Check tunnel connection 3. Only analyze the connection entries framed in blue. 4. In the Cerberus Portal, on the right side, select 'Connect'.
Profile 10 Check tunnel connection 10 Profile 1. Select the abbreviated name in the top right-hand corner. The information dialog window opens. 2. Select My user account . Displays information on the user account.
10 Profile User privileges 10.
10 Profile User privileges App End customer End customer + Fire engineer Fire administrator Account Manager ● ● ● Displays the user Role privileges Fire engineer and ...
11 Appendix A - Cryptography employed to secure cloud data 11 Appendix A - Cryptography employed to secure cloud data 46 | 47 Encryption Block-Cipher Management AWS Standard Encryption TLS 1.2 Encryption 256-AES AES_128_GCM. AWS Siemens Certificate Issuer Signing Algorithm Used Management Siemens CA (issued by QuoVadis) AWS CA Comodo CA Digicert CA SHA256 RSA 2048 SHA256 RSA 4096 End point certificates are stored on AWS and managed by Siemens.
Issued by Siemens Industry, Inc. Smart Infrastructure 8 Fernwood Road Florham Park, NJ 07932 +1 973-593-2600 www.usa.siemens.com/fire © Siemens Industry, Inc., 2020 - 2021 Technical specifications and availability subject to change without notice.
