Process Control Systems SIMATIC PCS 7
Simatic Batch Redundancy Problem
Thread Starter: winarko Started: 6/7/2012 2:54 PM Replies: 20

6/29/2012, 2:13 PM
|
Joined 2/24/2011
Last visit: 5/17/2013
Posts: 674
Rating:
(58)
|
(0)
|
|
|
|
|

7/2/2012, 3:33 AM
|
Joined 6/7/2012
Last visit: 2/11/2013
Posts: 44
Rating:
(0)
|
(0)
|
Unfortunately,yesterday problem appeared again sir..
Any idea?
Thanks..
|
|
|
|

7/2/2012, 10:57 AM
|
Joined 2/24/2011
Last visit: 5/17/2013
Posts: 674
Rating:
(58)
|
(0)
|
Hi,
so what is your currect configuration? Did you use the second network adapter for the redundancy connection? Did you configure it in the Simatic Shell?
Can you please check the Event logs. Right Click on "My Computer" than "Manage". "Event Viewer" under "Application" and "System". Post a Screenshot if you have some inetresting events.
|
|
|
|

7/2/2012, 11:34 AM
|
Joined 6/7/2012
Last visit: 2/11/2013
Posts: 44
Rating:
(0)
|
(0)
|
Hello sir,
My config is using second network adapter only, I have disabled the COM Port. I have 3 network card in the computer. My ethernet configs are: The IP for Terminal bus is 192.168.49.xxx The IP for Redundancy is 192.168.50.xxx The IP for Plant bus is 192.168.49.xxx They use separated network card.
I attached a screenshot from event viewer.
|
|
|
|

7/2/2012, 6:44 PM

7/13/2012, 11:10 AM
|
Joined 2/24/2011
Last visit: 5/17/2013
Posts: 674
Rating:
(58)
|
(0)
|
|
|
|
|

7/16/2012, 5:40 AM
|
Joined 6/7/2012
Last visit: 2/11/2013
Posts: 44
Rating:
(0)
|
(0)
|
No sir, I haven't collected the data yet.. This is very confusing problem, I found Windows is already infected by virus (Kido),and this virus affected the network traffic.
What can I get from that tools,sir?
Thanks..
|
|
|
|

7/18/2012, 12:00 PM
|
Joined 2/24/2011
Last visit: 5/17/2013
Posts: 674
Rating:
(58)
|
(0)
|
Hi,
the tool is collecting all relevant diagnostic informations like SIMATIC diagnostic files, windows diagnostic informations, ...
But when you have a infection by a virus, clean your system first.
I recommend to wipe the system comletely and set it up again, if possible. It will take a whíle but its the cleanest and safest solution.
Also prevent your system from beeing infected again.
check out this entry for security issues: http://support.automation.siemens.com/WW/view/de/50203404
|
|
|
|

7/20/2012, 6:24 AM
|
Joined 6/7/2012
Last visit: 2/11/2013
Posts: 44
Rating:
(0)
|
(0)
|
I read an article in internet about this virus.And I found that this virus is dedicated to attack SCADA system especially Siemens WinCC and PCS7 (http://www.rec-sec.com/category/malware/)
Is it possible to repair the systems without reinstalling Windows and PCS7 software again,sir?
|
|
|
|

7/20/2012, 10:36 AM
|
Joined 2/24/2011
Last visit: 5/17/2013
Posts: 674
Rating:
(58)
|
(0)
|
Hi.
I don't know the recommendations. At least it should be possible to clean a system, because you can't wipe the systems of a running plant...
This is a extract of PCS 7 V8.0 readme. Check out the link to the security informations in Online Support.
Approved antivirus software An overview of the approved virus scanners for each version of the software is available in the Internet at Entry ID 2334224 (http://support.automation.siemens.com/WW/view/en/2334224). You can find additional documents about the PCS 7 and WinCC security concept in the Internet at Safety concept entry list (http://support.automation.siemens.com/WW/view/en/35231330/130000). The following antivirus software has been tested for compatibility with PCS 7 V8.0 incl. Update 1: ● Trend Micro OfficeScan Client-Server Suite V10.6 ● Symantec Endpoint Protection V11.0 ● McAfee VirusScan Enterprise V8.8 Patch 1
|
|
|
|
Actions