S7-1200 web server is on — how much is too much to expose on a cell VLAN?
The question
OEM left the web server enabled with the default user. I want a diagnostic page for techs. I do not want a browser on the plant Wi-Fi writing outputs. What do you leave on, and what do you kill before the auditor walks?
TS ControlsThe answer
Kill write, kill the default user, put a unique password in the cell binder, VLAN the PLC off guest Wi-Fi. Diagnostic read-only is fine. Watch tables from a browser are not a control strategy. If you need remote, a jump host — not port 443 on the plant SSID.
Replies from members
- Loading replies…
Log in to reply. Google, X or email.
Confirm your email to post. The link is in your inbox.
