Enabling The Web Server - Siemens SIMATIC S7-1200 System Manual

Hide thumbs Also See for SIMATIC S7-1200:

Table of Contents

● Mobile Panels

– Gen 2 KTP700[F], KTP900[F]

For browser-related restrictions that can interfere with the display of standard or user-defined

Web pages, see the Constraints (Page 1082) section.

Enabling the Web server

You enable the Web server in STEP 7 from Device Configuration for the CPU to which you

intend to connect.

To enable the Web server, follow these steps:

1. Select the CPU in the Device Configuration view.

2. In the inspector window, select "Web server" from the CPU properties.

3. Select the check box for "Activate web server on all modules of this device".

4. For increased security, ensure that "Permit access only with HTTPS" is selected to

require secure access to the Web server.

5. If you select "Enable automatic update" for "Automatic update", standard Web pages will

refresh by default every ten seconds. You you can also enter a custom refresh time

period in seconds for the "Update interval" field.

Unauthorized access to the CPU through the Web server

Unauthorized access to the CPU or changing PLC variables to invalid values could disrupt

process operation and could result in death, severe personal injury and/or property

Because enabling the Web server allows authorized users to perform operating mode

changes, writes to PLC data, and firmware updates, Siemens recommends that you

observe the following security practices:

• Enable access to the Web server only with the HTTPS protocol.

• Password-protect Web server user IDs (Page 1005) with a strong password. Strong

• Do not extend the default minimum privileges of the "Everybody" user.

• Perform error-checking and range-checking on your variables in your program logic

• Use a secure Virtual Private Network (VPN) to connect to the S7-1200 PLC Web server

S7-1200 Programmable controller

System Manual, V4.2, 09/2016, A5E02486680-AK

passwords are at least ten characters in length, mix letters, numbers, and special

characters, are not words that can be found in a dictionary, and are not names or

identifiers that can be derived from personal information. Keep the password secret and

change it frequently.

because Web page users can change PLC variables to invalid values.

from a location outside your protected network.

12.1 Enabling the Web server