SCALANCE S Industrial Security Appliance

SCALANCE S Industrial Security Appliance

Firewall and VPN appliances for industrial automation

The SCALANCE S Industrial Security Appliance protects industrial networks and automation systems by segmenting the network and establishing secure communication channels. As a part of the “Defense in Depth” security concept, SCALANCE S protects devices and networks in discrete manufacturing and in the process industry, and helps create a flexible security zone.

Select your Industrial Security Appliance

TIA Selection Tool

Directly select and order via the Industry Mall

Industrial Firewall Appliance

Industrial Firewall Appliances

High-performance Industrial Firewall Appliances offer you versatile firewall mechanisms to protect even flat networks with a throughput of 600 Mbit/s and up to 1,000 firewall rules.

Industrial VPN Appliance

Industrial VPN Appliances

In addition to the firewall mechanisms, powerful Industrial VPN Appliances also permit up to 200 VPN connections with a data throughput of up to 120 Mbit/s.

Promotional package

SCALANCE S Security Appliance and SINEMA Remote Connect 

Find out how easy secured remote access can be – with SCALANCE S Industrial Security Appliances and SINEMA remote connect, the management platform for Remote Networks. Try it out with our discounted promotional packages.

Overview of SCALANCE S

SCALANCE S Industrial Security Appliance at a glance

Whether the goal is cell protection, a demilitarized zone (DMZ), authenticated access via VPN or dynamic firewall rules, SCALANCE S Industrial Security Appliances protect your automation network against many different threats to suit your needs, thanks to a large portfolio of security mechanisms that can be used in combination. In conjunction with comprehensive protection measures, this will build up effective defense against unintentional system accesses or targeted attacks.

Security in industrial networks

SCALANCE S Industrial Security Appliances from Siemens let you seamlessly connect your industrial network to the security structures of the office and IT world. Therefore, the Security Appliances fulfill the special requirements of automation technology, like simple upgrading of existing plants, ease of commissioning, and less downtimes if a fault occurs. The various security measures can be flexibly combined with each other to meet specific needs.

 

The SCALANCE S Security Appliance family is developed in accordance with the Industrial Security Standard IEC 62443-4-1, as certified by the TÜV. These devices ensure the implementation of a flexible security zone (using e.g., network separation, a DMZ or secure remote maintenance), enable configurations using TIA Portal, Web based management (WBM) and CLI, and can be integrated via SINEC NMS network management software. They can also be used in a temperature range of -40 to +70°C.

Directly select and order via the Industry Mall

To the Industry Mall

Security with versatile firewall mechanisms

Industrial Firewall Appliances offer firewall performance of up to 750 Mbit/s and enable secure access between separate network segments using a bridge firewall. Dynamic firewall rules allow temporary network accesses to be granted as required. The connection can be made via 10/100/1000 Mbit/s Ethernet ports and over fiber optic for large distances (up to 200 km). In addition, the SCALANCE SC622-2C Industrial Firewall Appliance can be used for network separation in PROFIsafe environment.

 
SCALANCE SC622-2C
SCALANCE SC632-2C
SCALANCE SC636-2C
Firewall version
Stateful Inspection
Stateful Inspection
Stateful Inspection
Bridge firewall/dynamic firewall
No/Yes
Yes/Yes
Yes/Yes
No. of firewall rules/Firewall data throughput
1,000/750 Mbit/s
1,000/750 Mbit/s
1,000/750 Mbit/s
For network separation in PROFIsafe environment
Yes
No
No
SINEMA Remote Connect license approval
Integrated
Integrated
Integrated
Port characteristics electrical/optical (via combo ports)
2x RJ45 / 2x SFP
2x RJ45 / 2x SFP
6x RJ45 / 2x SFP
MRP client/HRP client
No
No
Yes
Firewall state synchronization
Yes
Yes
Yes
Industry Mall

Secure access via Virtual Private Networks

In addition to the versatile firewall mechanisms of the Industrial Firewall Appliances, Industrial VPN Appliances also permit up to 200 VPN connections with a data throughput of up to 120 Mbit/s. The connection can be made via 10/100/1000 Mbit/s Ethernet ports and over fiber optic for large distances (up to 200 km).

 
SCALANCE S615
SCALANCE SC642-2C
SCALANCE SC646-2C
Firewall version
Stateful Inspection
Stateful Inspection
Stateful Inspection
Bridge firewall/dynamic firewall
No/Yes
Yes/Yes
Yes/Yes
No. of firewall rules/Firewall data throughput
128/100 Mbit/s
1,000/750 Mbit/s
1,000/750 Mbit/s
Layer-2-Tunnel (Bridge Tunnel)
Yes
Yes
SINEMA Remote Connect license approval
Via KEY-PLUG SINEMA RC
Integrated
Integrated
Port characteristics electrical/optical (via combo ports)
5x RJ45 ports
2x RJ45 / 2x SFP
6x RJ45 / 2x SFP
MRP client/HRP client
No
No
Yes
Firewall state synchronization
No
Yes
Yes
Industry Mall

Plug-in transceiver for SCALANCE

Plug-in transceivers allow you to flexibly equip network components of the SCALANCE family with an SFP slot for optical connections.  

More accessories

In the Industry Mall you can find all accessories for products of the SCALANCE family.

SINEC for efficient network management

Efficient and future-proof network management covers all phases – from initial commissioning of the network components, through central management, policy-based configurations and transparent monitoring of the network to conveniently centrally managed network services.

SINEMA Remote Connect – management platform for remote networks

Users can utilize SINEMA Remote Connect to conveniently and securely maintain widely distributed plants or machines via remote access.

Use cases

Solutions for many different challenges

Use SCALANCE S Industrial Security Appliances to solve many potential challenges. Issuing access authorizations and network accesses from secured and unsecured networks are just two possible scenarios.
Additional information

Downloads, support, and services

Want to know more about our products for improved network security? Download our information or find out about our portfolio – covering every stage from efficient planning to implementation.

The fastest way to the experts

Proposed solutions for your queries and direct access to our experts in Technical Support

Service offers

To remain competitive over the long term, companies in industry must ensure – and ideally increase – the availability and productivity of  machines and plants. As your partner, we offer a unique range of services and support based on our extensive technology and industry expertise.

Well trained for excellent handling

Receive standardized or individual expertise directly from the manufacturer – with training centers in more than 60 countries.

Portfolio for industrial networks

Trusted experts for your networks

Powerful and reliable industrial communications networks are more than just the sum of components used. That’s why no aspect of their design, planning, and implementation can be left to chance. Instead, these sophisticated challenges require a high level of skill in all relevant disciplines combined with solid sector and application expertise. It’s this combination that makes us your ideal partner for future-proof industrial communications networks.
Teaser Cybersecurity for Industry
Cybersecurity for Industry

Security information

In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial security concept. Siemens’ products and solutions only form one element of such a concept. For more information about industrial security, please visit.

 

siemens.com/cybersecurity-industry