Imikhuba emihle yezokuphepha yakwa-Nokia et 200sp kumanethiwekhi wezimboni

Uma usebenza nge-automation yezimboni, uhlangabezane ne-Nokia Sim Shimatic et 200sp. Kuyisistimu ye-I / O ethandwayo ye-I / O esetshenziswa emafektri amaningi kanye nezindawo zenqubo ngenxa yosayizi wayo weCompact, ukufakwa okulula, nokuvumelana nezimo.

Kodwa-ke, ngokulula kwamadivayisi axhunyiwe kuza engcupheni yezinsongo ze-cyber. I -hlengware, ukufinyelela okungagunyaziwe, futhi ukuhlaselwa kwenethiwekhi akuzona nje izinkinga ngakho-zezinkinga ezinkulu kuzilungiselelo zezimboni, nazo. Izinsiza ezingavikelekile ezinjenge-ET 200SP zingaba ngamaphoyinti wokungena kalula kwabahlaseli, zibeke wonke umsebenzi wakho engcupheni.

Kungakho uvikela amadivayisi wakho wezimboni, kufaka phakathi ama-Nokia SIMATIC ET 200SP, kubalulekile; Silapha ukuzokuhamba ngendlela yokwenza lokho kahle.

1. Qonda izinsongo kwinethiwekhi yakho yezimboni

Ngaphambi kokungena kwizisombululo, ake sicabangele lokho esikumelene nakho. Izinhlelo zokulawula izimboni (ICS) zivame ukubhekiswa ezindleleni izinhlelo zendabuko ze-IT.

Ezinye zezinsongo ezivame kakhulu zifaka:

● Ukufinyelela okungagunyaziwe: Abaduni noma abashiyishi bathola ukufinyelela kumadivayisi wakho ngaphandle kwemvume.

● I-Malware ne-Ransomware: Isoftware enonya ingakhiya amasistimu wokulawula owonakele.

● Ukuhlaselwa komuntu-in-the-maphakathi: Lapho othile eshintshanisa ngasese ukuxhumana nokweba imininingwane noma ukujova imiyalo.

● Ukuhlaselwa okuphikwayo-of-service (dos): Egcizelela izinhlelo zakho ngethrafikhi, kubangele ukuncipha noma ukuphuma okuphelele.

Ngaphandle kokuvikelwa okufanele, ama-Nokia et 200SP asengozini kubo bonke. Kungakho ukuphepha kudinga ukuba yingxenye yokusetha - hhayi nje kuphela.

2. I-Nokia et 200SP Security Imikhuba Engcono Kakhulu

A. Ukucushwa kwenethiwekhi okuphephile

Enye yezinto zokuqala ongayenza ukugcina izinhlelo zakho zezimboni zihlukane nenethiwekhi yebhizinisi lakho. Sebenzisa ukuhlukaniswa kwe-VLAN ukuhlukanisa i-ET 200SP ngakho-ke i-Office Traffic ayikwazi ukuyifinyelela ngqo.

Faka ama-firewall ukuhlunga ithrafikhi ukungena nangaphandle kwe-ET 200SP. Vumela kuphela okudingekayo. Cisha noma yiziphi izinsizakalo noma amachweba ongawasebenzisi, njenge-HTTP noma i-SNMP, okungaba yingozi uma kushiywe kuvuliwe.

B. Ukulawulwa kokufinyelela okunamandla nokuqinisekiswa

Inombolo emangazayo yezinhlelo isasebenzisa amaphasiwedi azenzakalelayo. Lokho kuyingozi enkulu. Shintsha wonke amaphasiwedi azenzakalelayo ku-ET 200SP kanye nabalawuli bawo abahlobene.

Ku-TIA Portal, ungamisa ukulawula okususelwa kumqhatho (RBAC) Ngakho-ke abasebenzisi bathola kuphela izici ezidingekayo. Uma inguqulo yakho ye-ET 200sp iyaseseka, inika amandla amasheke okuvikeleka okuphephile kanye ne-firmware. Lokhu kuqinisekisa ukuthi uhlelo aluzange luphazanyiswe lapho kubuswa khona.

C. I-Firmware ejwayelekile ne-Patch Management

Abaduni bavame ukusizakala nge-software ephelelwe yisikhathi. Kungakho ukugcina i-firmware yakho yamanje ibalulekile.

Kwenze umkhuba ukufaka izibuyekezo zakamuva ze-firmware ezivela ku-Nokia. Ungabhalisela futhi izeluleko zezeluleko ze-Motoron Security noma ama-CERTERTS, ngakho-ke waziswa ngokushesha lapho kutholakala noma yikuphi ukuba sengozini.

Setha izikhathi zokulungiswa njalo ukuze usebenzise ama-patches-ungabashiyi amasonto.

D. Ukuphepha okuphephile (ukubethela nama-VPN)

Noma nini lapho uxhuma ku-ET 200SP yakho engu-200sp esiteshini sobunjiniyela noma enye insiza, sebenzisa imigomo yokuxhumana ebethelwe njenge-TLS / SSL.

Uma udinga ukufinyelela okukude, qhubeka njalo nge-VPN-ungalokothi uveze idivaysi ngqo kwi-Intanethi. Ungasebenzisa ama-coursers e-Nokia carcance noma isango le-VPN langaphandle lalokhu. Futhi qiniseka ukuthi ukhubaza amaphrothokholi angafakwanga njenge-telnet ne-FTP, ephelelwe yisikhathi futhi engavikelekile.

E. Ukuphepha ngokomzimba nokuqapha

Ngisho ne-BESI-T Digital Security ngeke isize uma othile angangena futhi akhiphe idivaysi yakho.

Qinisekisa ukuthi amamojula we-ET200SP asekukhabethe elikhiyiwe noma egumbini lokulawula futhi atholakala kuphela kubasebenzi abagunyaziwe. Ohlangothini lwenethiwekhi, amathuluzi afana ne-Siem Systems noma isoftware yokutholwa kwe-Anomaly kufanele asetshenziselwe ukuqapha noma yikuphi ukuziphatha okungajwayelekile.

Ngena ngemvume yonke into-kusuka ekufinyeleleni kokufinyelela kokucushwa kwezinguquko - ngakho-ke uhlala unerekhodi elicacile lokuthi kwenzekani.

3. Izici ezengeziwe zokuphepha ezivela ku-Nokia

Abakwa-Nokia banikeza amathuluzi ambalwa enza ukuphatha ukuphepha kube lula.

● ISinec NMS Ingabe uhlelo lwabo lokuphathwa kwenethiwekhi olusiza ukuqapha nokuphatha ukuphepha kwensiza kuyo yonke inethiwekhi yakho.

● Ku-TIA Portal, ungasebenzisa izici ezinjengokubethelwa kwephrojekthi nokuvikelwa kokuvikelwa kanjani ukukopisha okungagunyaziwe noma ukuhlela amaphrojekthi akho ezenzakalelayo.

● Abakwa-Nokia baphinde bagqugquzela isu lokuvikela-in-in-in-in-in-in-ukuvikelwa kuwo wonke amazinga-kusuka kudivayisi kuya kwinethiwekhi.

Uma ulandela la mathuluzi owakhelwe ngaphakathi futhi ubenze babe yingxenye yokuhamba komsebenzi wakho, ukusetha kwakho kwe-ET 200SP kuzoba iphephe kakhulu.

4. Amaphutha ajwayelekile ongawabuka

Ngisho nangezinhloso ezinhle, amanye amaphutha angavula umnyango wokuhlasela. Gwema la maphutha ajwayelekile:

● Ukugcina Ukuqinisekiswa Okuzenzakalelayo: Zishintshe ngokushesha ngemuva kokusetha.

● Amanethiwekhi amafulethi: Uma konke kunethiwekhi eyodwa, ukwephula indawo endaweni eyodwa kungasakazeka yonke indawo. Sebenzisa i-Network Segmentation.

● Akukho ukuhlola okujwayelekile kokuphepha: Ngaphandle kokucwaningwa kwamabhuku noma ukuhlolwa kokungena, ngeke wazi izindawo zakho ezibuthakathaka kuze kube sekwephuze kakhulu.

Ngokuhlala uyazi nokukhuluma nakuqala, ugwema izinkinga ezinkulu kakhulu kamuva.

Ukugcina

Le khasiI-Nokia Sim Shimatic Et 200sp iyingxenye ethembekile futhi esetshenziswe kabanzi kokusetha kwezimboni eziningi. Kepha njengayo yonke imishini exhunyiwe, idingaUkuvikelwa okufanele.

Ukuvikela i-ET 200SP yakho ayidingi amathuluzi amnandi noma ama-expauls amakhulu. Kuthatha nje ukuhlela, isiyalo, kanye nokungaguquguquki. Ukusuka ekulweni okufanele kokufinyelela kanye nokuvuselelwa kwe-firmware kokuxhumana okubethelwe nokuphepha ngokomzimba, zonke izinyathelo ezibalwa.

E-plc-chain.com, siyazi ukuthi imishini enokwethenjelwa kangakanani ekusebenzeni kwakho, kufaka phakathi ukuyigcina iphephile. Uma udinga usizo lokuvikela i-ET 200SP yakho noma ukhethe amamojula afanele ukuze usethelwe, iqembu lethu lilapha ukuzokuxhasa.