SCALANCE S602

• Checking of data traffic and protection against unauthorized access by means of stateful inspection firewall.
• Simple and fast configuration of the firewall through global firewall rules and symbolic names for IP addresses.
• Specific access privileges for users in accordance with user-specific firewall rules.
• 10/100/1000 Mbit/s ports for the connection and operation of SCALANCE S in Gigabit networks as well
• In addition to bridge mode, can also be operated in router mode and can therefore also be used directly at IP subnet limits
• Address translation
  • NAT (Network Address Translation) permits the use of private IP addresses in the internal network in that public IP addresses are converted to private ones
  • NAPT (Network Address and Port Translation) permits the use of private IP addresses in the internal network in that frames are converted to private IP addresses depending on the communications port used
• Internal network nodes can receive their IP addresses from the integral DHCP server
• Log files can also be evaluated by the Syslog server
• Enhanced integration in IT infrastructures and network management systems by means of SNMP
• Protection of individual, even alternating, devices by dynamically taking over the IP address (ghost mode)

SCALANCE S612

As SCALANCE S602; additionally:

• Encryption of data transmission with VPN (IPSec)
  • Protection against espionage
  • Protection against unauthorized manipulation
• Secure remote access over the Internet, e.g. in conjunction with the SOFTNET Security Client and the SCALANCE M UMTS router (with IPSec VPN function)

SCALANCE S615

• Checking of data traffic and protection against unauthorized access by means of stateful inspection firewall.
• 10/100 Mbit/s ports
• Router that can be used directly on IP subnet boundaries
• Up to five variable security zones per port-based VLAN
  • Security zones freely programmable
  • Firewall rules freely configurable between security zones
• Address translation
  • NAT (Network Address Translation) permits the use of private IP addresses in the internal network by converting public IP addresses to private ones
  • NAPT (Network Address and Port Translation) permits the use of private IP addresses in the internal network by converting frames to private IP addresses depending on the communications port used
• Internal network nodes can receive their IP addresses from the integral DHCP server
• Log files can also be evaluated by the Syslog server
• Enhanced integration in IT infrastructures and network management systems by means of SNMP
• Encryption of data transmission with VPN (IPSec and OpenVPN)
  • Protection against espionage
  • Protection against manipulation
• Secure remote access over the Internet, e.g. in conjunction with the SOFTNET Security Client and the GPRS/UMTS/LTE routers of the SCALANCE M series (with IPSec VPN function)
• Very simple connection to SINEMA Remote Connect via auto-configuration interface (can be enabled with the KEY-PLUG SINEMA REMOTE CONNECT) with OpenVPN function

SCALANCE S623

As SCALANCE S612; additionally:

• DMZ port with which a protected zone (DMZ = demilitarized) can be set up between two networks. The DMZ is used to provide data for other networks without granting direct access to the automation network, thus increasing security. The DMZ port can also be used to protect remote maintenance access, where, for example, only access to lower-level automation cells is possible and no access to the plant network is required.
• Secure, redundant connection of automation cells through router and firewall redundancy

SCALANCE S627-2M

As SCALANCE S623; additionally:

• Two media module slots for two additional switched red or green ports each.
  • Direct integration in line or ring topologies is possible
  • Integration into redundant rings (MRP, HRP) is possible
  • Secure, redundant connection of automation cells or rings
  • Direct integration in FO networks is possible through the use of FO media modules
  • Bridging of longer cable runs or use of existing 2-wire cables (e.g. PROFIBUS) by deploying the MM992-2VD media modules (variable distance).