Industrial PCs are protected by firewall and VPN via the CP 1628 Industrial Ethernet communications processor – for secure communication without special operating system settings. This means that computers equipped with the module can be connected to protected cells. The CP 1628 makes it possible to connect SIMATIC PG/PC and PCs with PCI Express slots to Industrial Ethernet (10/100/1000 Mbit/s).

Additional field devices can be flexibly connected to Industrial Ethernet via the integrated switch. Along with the automation functions familiar from CP 1623, the communications processor also contains "Security Integrated", i.e. a Stateful Inspection Firewall and a VPN gateway to protect the PG/PC system against security risks.

• PCI Express card (PCIe x1) with its own microprocessor and integrated 2-port switch (2 x RJ45 connection, 10/100/1000 Mbit/s) for the connection of a PG/PC to Industrial Ethernet
• Integrated security mechanisms (e.g. Firewall, VPN)
• ISO and TCP/IP transport protocol on board
• Communications services via
  • Open IE communication (TCP/IP and UDP)
  • ISO transport protocol
  • PG/OP communication
  • S7 communication
  • Open communication (SEND/RECEIVE)
• Integration into network management systems through the support of SNMP (V1/V3)

Note:

Further information on the CP 1628 can be found in Chapter 2, PROFINET/Industrial Ethernet, under "System connection for PG/PC/IPC/communication for PC-based systems".

Secure redundant connection to CP 1628 and CP 443-1 Advanced