How to configure the Cybersecurity applied to ATS480?
Schneider Electric incorporates cybersecurity best practices and solutions in products, systems and services.
Here are some examples allowing more resilience of your assets.
First, a perimeter hardening firewall will help prevent outside access.
Second, network hardening will disable unused or unneeded communication ports and protocols.
Third, workstation hardening like implementing strong authentication of users with password policy.
Finally, device protection and hardening like installing physical controls
to prevent unauthorized access to your device.
Cybersecurity best practices embedded in ATS480 will help you reinforce defense in depth
to help protect against casual or coincidental violation from insiders.
Let us go on a product prospective, there are three different levels when powering on for commissioning.
Minimum, will not configure any Cybersecurity.
Passive security features remain enabled and help protect the device integrity:
Secure root of trust, Achilles, Secure event logging, Cybersecure firmware upgrade.
Advanced, add to minimum profile the activation of user access control
and open the device hardening to configuration:
Access control to the device, User account management, Strong password policy
Import/export security configuration.
And finally, 'Load Security Policy', when using an existing configuration.
It is possible to duplicate from a device to other devices in order to keep consistent security policy
on your overall range of products.
Open SoMove on your computer
Connect your ATS480
In this example, we select advanced to access all the cybersecurity features.
Create a password
Go to the Admin options tab
You can export your cybersecurity policy to duplicate it on other devices and save time.
In the user management tab, you can decide to deactivate or activate the password request
for software tools using Modbus RTU and Modbus TCP.
For the password policy, you can either choose to enable or disable the enforce password policy.
You can modify the Date/Time of your device or synchronize it with your computer.
Date/Time is used to register each event on log files.
Finally, you can download several log files from your device to your computer.
In these files you will find events related to System, Applications, Errors, and Alarms.
You can configure cybersecurity in the same way with your display terminal.
Thank you for watching. For more information, please visit our website.