plc.myforum.ro

oleg_barashkov@mail.ru · Junior Joined: 13 Feb 2016 Posts: 1

I need Simatic net security configuration tool v03.00.00.01. Help me

vakon · Member junior Joined: 13 Feb 2016 Posts: 66

vakon · Member junior Joined: 13 Feb 2016 Posts: 66

Simatic Net Configuration Tool V2.2

[URL=https://userscloud.com/nvysyvq70hgo]Simatic Net Configuration Tool V2.2.rar - 83.0 MB[/URL]

maersk · Member 3 Joined: 17 Aug 2014 Posts: 891

Security Configuration Tool SCT V2.2
[URL=https://userscloud.com/53bu3gz5dm94]Simatic Net Configuration Tool V2.2.rar - 83.0 MB[/URL]

Security Configuration Tool SCT V3.1
[URL=https://userscloud.com/1cx5qgdonrow]Simatic Net Configuration Tool V3.1.part1.rar - 200.0 MB[/URL]
[URL=https://userscloud.com/75md87lyq4uc]Simatic Net Configuration Tool V3.1.part2.rar - 141.8 MB[/URL]

Security Configuration Tool SCT V4.2
https://support.industry.siemens.com/cs/document/109738442/
https://support.industry.siemens.com/cs/attachments/109738442/Read_me_OSS.pdf
[URL=https://userscloud.com/vsdfrqnvoi0d]SIMATIC_NET_Security_Configuration_Tool_V4_2.part1.rar - 200.0 MB[/URL]
[URL=https://userscloud.com/10kvxh3d4kne]SIMATIC_NET_Security_Configuration_Tool_V4_2.part2.rar - 200.0 MB[/URL]
[URL=https://userscloud.com/pii7x3aeixr4]SIMATIC_NET_Security_Configuration_Tool_V4_2.part3.rar - 177.7 MB[/URL]

Security Configuration Tool SCT V4.3 HF 1
https://support.industry.siemens.com/cs/document/109744041/
https://support.industry.siemens.com/cs/attachments/109744041/ReadMe_OSS.html
[URL=https://userscloud.com/9k4dmfc5hfl6]SIMATIC_NET_Security_Configuration_Tool_V4_3_0_1.part1.rar - 200.0 MB[/URL]
[URL=https://userscloud.com/chn486cejfoh]SIMATIC_NET_Security_Configuration_Tool_V4_3_0_1.part2.rar - 200.0 MB[/URL]
[URL=https://userscloud.com/euum3c7d5uxe]SIMATIC_NET_Security_Configuration_Tool_V4_3_0_1.part3.rar - 187.3 MB[/URL]

Security Configuration Tool SCT V5.0
https://support.industry.siemens.com/cs/document/109747539/
https://support.industry.siemens.com/cs/attachments/109747539/ReadMe_OSS.htm
[URL=https://userscloud.com/7tm4wogeptig]SIMATIC_NET_Security_Configuration_Tool_V5_0_0_0.part1.rar - 200.0 MB[/URL]
[URL=https://userscloud.com/dpuskp9n9q0w]SIMATIC_NET_Security_Configuration_Tool_V5_0_0_0.part2.rar - 200.0 MB[/URL]
[URL=https://userscloud.com/0sgbeby26ty4]SIMATIC_NET_Security_Configuration_Tool_V5_0_0_0.part3.rar - 79.9 MB[/URL]

maersk · Member 3 Joined: 17 Aug 2014 Posts: 891

What should you watch out for when setting up a VPN tunnel with the SOFTNET Security Client (V4 + HF1)?
https://support.industry.siemens.com/cs/document/94769585/
If the SOFTNET Security Client is being used on the Windows 7 operating system, you need an enabled Windows firewall to establish a VPN connection.
If the PC with SOFTNET Security Client installed has multiple network adapters, you must observe the following rules.
A default gateway may be entered only for one single network adapter. If necessary, remove other default gateways or replace them with static routes.
The IP address of the network card on the PC with SOFTNET Security Client installed, via which the VPN tunnel is to be set up, must not be from the internal network of the VPN partner (Fig. 01, point 1).
The other connected networks on the PC with SOFTNET Security Client installed and the internal network of the VPN partner must be different (Fig. 01, point 2). Even if no cable is connected, the routing function is impaired.
Simatic Net Configuration Tool SCT V03 Re: Simatic Net SCT V03

Simatic Net Configuration Tool SCT V03 Re: Simatic Net SCT V03

Fig. 01
Other VPN Clients
VPN software from third-party manufacturers also causes incompatibilities and prevents proper functioning of the SSC. Uninstall such software; disabling does not suffice. SSC Tunnel to SCALANCE M-800
The text file from the Security Configuration Tool must be changed when using the SOFTNET Security Client (V4 + HF1) in Windows 7. The following changes are necessary:
Security > IPSecVPN > Phase 2
Key Derivation: DH group 2

In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial security concept. Siemens’ products and solutions constitute one element of such a concept. For more information about industrial security, please visit
https://www.siemens.com/global/en/home/company/topic-areas/future-of-manufacturing/industrial-security.html

Configuration limits for Siemens Industrial Security devices
SCALANCE S >= V3.0 (S602 / S612 / S623)
* VPN tunnels per security module: 128 (SCALANCE S612 / S623 only)
* Internal nodes: 128 (SCALANCE S612 / S623 only)
* IP firewall rules: 256 (226 + 30 ranges)
* MAC firewall rules: 256
* Assignable NTP servers: 4 (16 throughout the project)
* Users: 32 (128 throughout the project)
* Roles: 32 (125 throughout the project)
CP 343-1 GX31 Adv. V3 / CP 443-1 GX30 Adv. V3
* VPN tunnels per security module: 32
* IP firewall rules: 256 (226 + 30 ranges)
* MAC firewall rules: 256
* Assignable NTP servers: 4 (16 throughout the project)
* Users: 32 (128 throughout the project)
* Roles: 32 (125 throughout the project)
* FTP(E)S client connections: 10
* FTP(E)S server connections: 2 (CP 343-1 GX31 Adv. V3), 10 (CP 443-1 GX30 Adv. V3)
CP 1628
* VPN tunnels per security module: 64
* IP firewall rules: 256 (226 + 30 ranges)
* MAC firewall rules: 256
* Assignable NTP servers: 4 (16 throughout the project)
* Users: 32 (128 throughout the project)
* Roles: 32 (125 throughout the project)
CP 1543-1 V1.0 / V1.1
* VPN tunnels per security module: 16 (V1.1 only)
* IP firewall rules: 256 (226 + 30 ranges)
* MAC firewall rules: 256
* Assignable NTP servers: 4
* Users: 32 (128 throughout the project)
* Roles: 32 (125 throughout the project)
Valid from software versions:
* Security Configuration Tool >= V3.0
* STEP7 Professional >= V12 SP1
Simatic Net Configuration Tool SCT V03 Re: Simatic Net SCT V03

SCALANCE S V1/V2 modules are no longer supported as of SCT V5.0 and can no longer be inserted in SCT projects. SCALANCE S V1/V2 modules from projects of older SCT versions are simply displayed with their module properties. These properties cannot, however, be edited. Downloading, diagnostics and firmware updates of SCALANCE S V1/V2 devices are also not possible. All the functions described for SCALANCE S modules relate to the firmware versions as of V3.

To retain the configuration data, SCALANCE S V1/V2 modules can be replaced in SCT with SCALANCE S modules with a higher firmware version.
This file is valid for the following SIMATIC NET configuration tools:

Updating an existing installation of the Security Configuration Tool
If you want to replace an existing installation of the Security Configuration Tool with an updated version, make sure that the installed version of the Security Configuration Tool is closed when you install the newer version over it.
Downgrade not possible
Due to a modified setup, downgrading to versions < V4.0.1.1 is not possible. If you have problems, atingere Customer Support

Notes on compatibility with older versions of the Security Configuration Tool
Existing security projects created with the following versions of the Security Configuration Tool can be used in the Security Configuration Tool V5.0:
•Security Configuration Tool V4.3
•Security Configuration Tool V4.2
The Security Configuration Tool V5.0 has not been released for use of security projects created with a version of the Security Configuration Tool < V4.2. It may not be possible to use an older project in the Security Configuration Tool V5.0.
Existing security projects cannot be used in versions of the Security Configuration Tool if they are older than the version in which the security projects were created or last edited and saved. In this case, the Security Configuration Tool displays the message "Access denied".
This restriction applies regardless of whether the Security Configuration Tool is used as the standalone variant or the variant integrated in STEP 7

Sergey177,
Keep in mind the limitations and take care of above considerations.
Please tell me exactly your configuration even in PM if not solved the problems yet.

Sergey177 · Junior Joined: 20 Sep 2017 Posts: 2

Thanks for the answer. I guess I did not quite correctly formulate my question. I'll start in order: S612 was purchased with SCT 3.1 version and SST v4.0 clients. During the operation, we had to transfer the DNS server addresses to the internal network (router mode). This became available in version 4.3 of the HF1. While converting the project, the S612 settings are OK, but when the configuration is downloaded to SSC clients (when creating client and group certificates), a message is displayed that the created configuration is supported by clients not lower than v4.3 and so is. When you open the created SCT in the client - it just does not open. I understand that you need to update clients, or somehow configure the usual VPN (although here you need static addresses, and we have programmers).

maersk · Member 3 Joined: 17 Aug 2014 Posts: 891

Sergey177 · Junior Joined: 20 Sep 2017 Posts: 2

maersk thanks for the excellent answer. In general, the problem was solved in two ways:
1) on VM installed SCT v5.0, converted the initial project into it, uploaded it to all modules (S612, SSC clients) and it all works. Client configurations are opened. Only when creating - a warning:
The following project data may mean that certain module functions cannot execute correctly:

## Security of VPN settings
--------------------------------------------------------------------------------------------------
# The settings of the following VPN groups are less secure than the recommended settings. It is expressly recommended to use more secure settings:
Group1: Phase 1 encryption, DH group, Phase 2 encryption, Fallback VPN profiles

## Use of non recommended VPN settings for modules.
--------------------------------------------------------------------------------------------------
# The following modules use VPN settings that are less secure than the
recommended settings.
It is recommended to use more secure VPN settings.
S612-V4

## Operating system-specific support of the configuration
--------------------------------------------------------------------------------------------------
# The following Responder settings of active VPN profiles of the module 'S612-V4' are not supported on all operating systems by SOFTNET Security Client 'xxxxxxx':
- Phase 1 encryption: AES-256

# The following Responder settings of active VPN profiles of the module 'S612-V4' are not supported on all operating systems by SOFTNET Security Client 'yyyyyyyy':
- Phase 1 encryption: AES-256
2) nevertheless, your answer became very interesting. I tried to create a new similar project in version 5.0 and got the same problem as in 4.3. The last option is to modify to 2. In this case, the configuration is opened by the SSC - although I did not check the performance.
Analyzing your answer, I came to the conclusion that SCT of new versions creates a configuration with security parameters that are not compatible with the old versions of SSC and how we have bypassed it.
When last time there was a problem with 4.3, I was just seeing a message trying to change the security settings (so it's no good I thought), apparently this resulted in a poor configuration of clients.

maersk · Member 3 Joined: 17 Aug 2014 Posts: 891

You said you cannot update SSC.
Indeed there are a lot of problems with compatibility between older versions and newer versions due to increase security concerns and hardware problems.
OK if you solved the problem.

remymartin · Junior Joined: 06 Aug 2022 Posts: 2

Helpp. I also need to use Security Configuration Tool v3.1. Anyone still have it?

vakon · Member junior Joined: 13 Feb 2016 Posts: 66

Anafvroq · Junior Joined: 07 Aug 2022 Posts: 1

remymartin · Junior Joined: 06 Aug 2022 Posts: 2

mrdevito · Junior Joined: 03 Sep 2026 Posts: 2

Hello,

I need the Siemens Security Configuration Tool. Could someone please help me sharing the installer?

Thanks in advance for your help.
Best regards,

DeVito

mrdevito · Junior Joined: 03 Sep 2026 Posts: 2

9haj · Member Joined: 15 Dec 2023 Posts: 179