SiteManager. Secure High-Availability Remote Access to Industrial Devices. Remote Management - SiteManager and 3229

Transcription

1 Remote Management - SiteManager and 3229 Secure High-Availability Remote Access to Industrial Devices The SiteManager is an off-the-shelf component in the Secomea Industrial Communications Solution program that in combination with Secomea s GateManager and LinkManager ensures unified, uninterrupted and secure access to remote devices. The SiteManager 1029/3229 is a robust DIN mountable appliance that installs in the machine control panel, and provides remote access to all the industrial equipment in the panel via Ethernet,- Serial- or USB connection. The SiteManager 1029/3229 establishes access to the Internet through the firewall of the existing wired network infrastructure, or wireless by installing a standard 4G/3G/GPRS modem in the USB option slot. The SiteManager 1029/3229 allows on-demand connection to any Ethernet device while overcoming any potential routing or IP conflict issues. Additionally the SiteManager features static VPN powered by the unique Secomea EasyTunnel concept. The SiteManager itself and its monitored devices are all centrally managed and accessible from the GateManager server. Built-in serial, USB and Ethernet access agents for most PLC, HMI and Servo vendors in the market, as well as agent templates for video, voice, PC and Scada systems (including support for Siemens PPI and MPI) Firewall friendly communication,- uses standard web protocols, and only inside-out. No requirement for public or fixed IP address. SiteManager is by default DHCP enabled. No need to re-configure the PLC with gateway address etc. Can operate as carrier of alarms, alerts etc. between devices and central logging servers over the Internet. Built-in firewall, AES and x.509 certificates for maximum security All configuration, firmware and feature upgrades are done remotely through an intuitive web GUI User-configurable alerts for status monitoring and configurable I/O ports for custom alarms. USB port for using a standard 4G/3G/GPRS adapter for alternative Internet access or fail-over., or for managing a USB enabled PLC. Includes the unique Secomea EasyTunnel Client feature for allowing easy enrollment in a VPN network. SiteManager

2 Remote Management - SiteManager 1029 and 3229 Unique Specifications EasyStart (Appliance Launcher) Enabled The EasyStart Appliance Launcher is Secomea s setup wizard program which makes it easy to make initial contact to and configuration of Secomea SiteManager appliances. The EasyStart Appliance Launcher is delivered free of charge. GateManager Enabled GateManager enabled for easy, centralized configuration, backup, monitoring and access for remote service and maintenance of Secomea SiteManager and industrial devices. The GateManager is available both as a hosted service and as a stand-alone software package. LinkManager Enabled The LinkManager is a one-step installation Windows application that runs on the support engineer PC. Working with GateManager it provides secure on-demand access to remote devices through the Site- Managers. Once connected, it makes the remote device appear to the field engineer as if the Windows PC was connected directly to the device. So with LinkManager, any remote device is just a few mouse clicks away. State-of-the-Art Security The SiteManager solutions are using state-of-the-art security standards. This includes a built-in stateful Inspection Firewall, authentications using x.509 digital certificate and encryption using the strong AES standard with up to 256-bit. Firewall Friendly The end-user network security is priority number 1. With the SiteManager and the security standard that this includes, it is important that end-user do not need to compromise their own corporate security standards. Therefore all communication is encrypted, even when using port 80 from the inside and out. Local Management and logging The SiteManager has a local web-server, which enables any remote access and access rights to be controlled locally. On top of this, all traffic through the SiteManager is logged, stored and available in the SiteManager itself. PLC / HMI / Servo Ready Avoid all the hassle with equipment requiring different ports. All traffic is encapsulated in e.g. port 80. With the SiteManager s preconfigured built-in agents for all major PLC / HMI / Servo manufacturers, it is as easy as it sounds. Remote PC Ready The SiteManager has built-in preconfigured agents for remote PC using VNC and RDP. In addition to this, it is possible to customize an agent for other requirements. VoIP and Video Ready The Remote Device Management solution supports VoIP and Video. Designed agents are available in the SiteManagers as an easy option for adding new services and possibilities to remote service and support. 4G/3G/GPRS Option with Wake-on-SMS The SiteManager 1029/3229 features an optional USB port for attaching a 4G/3G/GPRS adapter for connecting to the Internet. This feature is useful in cases where no wired infrastructure exists for connecting to the Internet. In addition the SiteManager supports a Wake-on-SMS that prevent consuming data traffic charges when in idle mode. Fail-over / Fail-back By connecting the wired Uplink and the 4G/3G/GRPS Uplink, the Site- Manager can perform fail-over and thereby ensure maximum uptime. By prioritizing the wired uplink, the SiteManager will automatically failback to the wired connection, thus reducing consumption of 4G/3G/ GPRS data charges. EasyTunnel VPN support The SiteManager supports the unique Secomea EasyTunnel VPN concept. Enabling the included EasyTunnel Client in the SiteManager 3229, will allow enrollment in a VPN network controlled by a TrustGate concentrator. EasyTunnel works like ordinary IPSec VPN, but without the need for juggling certificates or keys. Simply enter the serial number of the SiteManager, and it is instantly enrolled in the VPN network. LinkManager GateManager SiteManager SiteManager PLC Programming HMI programming Web Access Scada system Database system Video / Camera Voice / Phone

3 Remote Management - SiteManager 1029 and 3229 Technical Specifications Electrical Characteristics 300 Mhz ARM9 CPU Input V/DC, via screw terminals. Network Interfaces: 2 x 10/100 Mbit Ethernet (UPLINK, DEV1,) RJ45 connection 2 x USB 2.0 full speed (Host) 1 x RS232 DB9 Serial port. Power consumption: max 3W excl. an attached USB network adapter. (Calculate with a total of 8W incl. USB adapter) 2x2 Digital I/O ports via screw terminals Regulations FCC Class A, CE EN55022 Class A EN55024 EN , 3 EN , 3, 4, 5, 6, 8, 11 IEC C-Tick N29451 UL Listed (file #E358541) Physical Charateristics Operating temperature: C, 5 to 95% RH Dimensions, unpacked: 107(H) x 32(W) x 97(D) mm, 450 g DIN mount bracket. Aluminium Chassis. 2-years Warranty Networking Capabilities Choice of Uplink IP-assignment mode - DHCP client, PPPoE client, manual/static Telnet to Serial routing (rfc2217). Siemens MPI/PPI is supported via an adapter. DHCP server on Device LAN USB port for connecting a 4G/3G/GPRS dongle for use as Uplink USB port for managing USB enabled PLCs EasyTunnel support for enabling VPN via Secomea TrustGate Monitoring and Logging Features System log with System Watchdog Central log via GateManager GateManager Alerts (to , SMS; management system) and Alert Log for SiteManager and Agents Configuration and Management EasyStart (Appliance Launcher) for easy initial contact and connection to GateManager Configuration and maintenance of SiteManager via browser (HTTPS/SSL - local or remote from GateManager ) Includes a Setup Assistant Wizard for guided configuration via the Web GUI Configuration backup management (via GateManager ) including scheduled backup and fast hardware replacement (cold backup) Configuration export and import (XML) Pre-defined Device Agents for easy setup of access to all PCs, web devices and all common PLCs and HMIs. LED Signaling and I/Os 3 LEDs for signalling Power, Status and LinkManager connection. Digital Input port for site operator control of remote access Digital Output for signalling active Link- Manager connections 1 configurable digital input port for custom /SMS alert triggering 1 digital output port for toggling from the SiteManager GUI Partnumbers Description SiteManager 1029 including 2 Device Agents SiteManager 3229 including 5 Device Agents Upgrade to 5 agents for model Upgrade to 10 agents for model Upgrade to 25 agents for model Upgrade to 50 agents for model upgrade to 100 agents for model 3229 Secomea A/S Denmark info@secomea.com GateManager settings preconfigured MPI/PPI adapter (Ethernet) SiteManager Doc rev

4 Remote Management - SiteManager and 3239 Secure High-Availability Remote Access to Industrial Devices The SiteManager is an off-the-shelf component in the Secomea Industrial Communications Solution program that in combination with Secomea s GateManager and LinkManager ensures unified, uninterrupted and secure access to remote devices. The SiteManager 1039 and 3239 is a robust DIN mountable appliance that installs in the machine control panel, and provides remote access to all the industrial equipment in the panel via Ethernet,- Serialor USB connection. The SiteManager 1039 and 3239 establishes access to the Internet through the firewall of the existing wired network infrastructure, or wireless by the built-in 3G/GPRS modem. The SiteManager 1039 and 3239 allows on-demand connection to any Ethernet device while overcoming any potential routing or IP conflict issues. Additionally the SiteManager features static VPN powered by the unique Secomea EasyTunnel concept. The SiteManager itself and its monitored devices are all centrally managed and accessible from the GateManager server. Built-in serial, USB and Ethernet access agents for most PLC, HMI and Servo vendors in the market, as well as agent templates for video, voice, PC and Scada systems (including support for Siemens PPI and MPI) Firewall friendly communication,- uses standard web protocols, and only inside-out. No requirement for public or fixed IP address. SiteManager is by default DHCP enabled. No need to re-configure the PLC with gateway address etc. Can operate as carrier of alarms, alerts etc. between devices and central logging servers over the Internet. Built-in SMS modem support on the Serial port and SMS Gateway support on the Ethernet port (typically used by Siemens and CoDeSys ready products) Built-in firewall, AES and x.509 certificates for maximum security All configuration, firmware and feature upgrades are done remotely through an intuitive web GUI User-configurable alerts for status monitoring and configurable I/O ports for custom alarms. Built-in 3G/GPRS for alternative Internet access or fail-over. SiteManager Includes the unique Secomea EasyTunnel Client feature for allowing easy enrollment in a VPN network.

5 Remote Management - SiteManager 1039 and 3239 Unique Specifications EasyStart (Appliance Launcher) Enabled The EasyStart Appliance Launcher is Secomea s setup wizard program which makes it easy to make initial contact to and configuration of Secomea SiteManager appliances. The EasyStart Appliance Launcher is delivered free of charge. GateManager Enabled GateManager enabled for easy, centralized configuration, backup, monitoring and access for remote service and maintenance of Secomea SiteManager and industrial devices. The GateManager is available both as a hosted service and as a stand-alone software package. LinkManager Enabled The LinkManager is a one-step installation Windows application that runs on the support engineer PC. Working with GateManager it provides secure on-demand access to remote devices through the Site- Managers. Once connected, it makes the remote device appear to the field engineer as if the Windows PC was connected directly to the device. So with LinkManager, any remote device is just a few mouse clicks away. State-of-the-Art Security The SiteManager solutions are using state-of-the-art security standards. This includes a built-in stateful Inspection Firewall, authentications using x.509 digital certificate and encryption using the strong AES standard with up to 256-bit. Firewall Friendly The end-user network security is priority number 1. With the SiteManager and the security standard that this includes, it is important that end-user do not need to compromise their own corporate security standards. Therefore all communication is encrypted, even when using port 80 from the inside and out Local Management and logging The SiteManager has a local web-server, which enables any remote access and access rights to be controlled locally. On top of this, all traffic through the SiteManager is logged, stored and available in the SiteManager itself. PLC / HMI / Servo Ready Avoid all the hassle with equipment requiring different ports. All traffic is encapsulated in e.g. port 80. With the SiteManager s preconfigured built-in agents for all major PLC / HMI / Servo manufacturers, it is as easy as it sounds. Remote PC Ready The SiteManager has built-in preconfigured agents for remote PC using VNC and RDP. In addition to this, it is possible to customize an agent for other requirements. VoIP and Video Ready The Remote Device Management solution supports VoIP and Video. Designed agents are available in the SiteManagers as an easy option for adding new services and possibilities to remote service and support. 3G/GPRS Option with Wake-on-SMS The SiteManager 1439/3239 features an built-in 3G/GPRS modem for connecting to the Internet. This feature is useful in cases where no wired infrastructure exists for connecting to the Internet. In addition the SiteManager supports a Wake-on-SMS that prevent consuming data traffic charges when in idle mode. Fail-over / Fail-back By connecting the wired Uplink and the 3G/GRPS Uplink, the SiteManager can perform fail-over and thereby ensure maximum uptime. By prioritizing the wired uplink, the SiteManager will automatically fail-back to the wired connection, thus reducing consumption of 3G/GPRS data charges. EasyTunnel VPN support The SiteManager supports the unique Secomea EasyTunnel VPN concept. Enabling the included EasyTunnel Client in the SiteManager, will allow enrollment in a VPN network controlled by a TrustGate concentrator. EasyTunnel works like ordinary IPSec VPN, but without the need for juggling certificates or keys. Simply enter the serial number of the SiteManager, and it is instantly enrolled in the VPN network. SMS Gateway - on Serial and Ethernet ports The SiteManager s serial port operates as a true SMS modem via the AT command set, and supports both outgoing SMSes generated e.g. by a PLC, as well as incoming SMS queing that a PLC can scan for. Additionally the Ethernet port supports the SMS syntax typically used in Siemens and CoDeSys code blocks for sending SMS messages from a PLC. SiteManager LinkManager GateManager SiteManager PLC Programming HMI programming Web Access Scada system Database system Video / Camera Voice / Phone

6 Remote Management - SiteManager 1039 and 3239 Technical Specifications Electrical Characteristics Physical Charateristics Configuration and Management 300 Mhz ARM9 CPU Input V/DC, via screw terminals. Network Interfaces: 2 x 10/100 Mbit Ethernet (UPLINK, DEV1,) RJ45 connection 1 x USB 2.0 full speed (Host) 1 x RS232 DB9 Serial port with full flow control Power consumption: 5W (dimension power supply to 8W peak) 2x2 Digital I/O ports via screw terminals Integrated broadband modem supporting the frequencies: WCDMA 850/1900/2100 MHz EDGE/GPRS 850/900/1800/1900 MHz 3G/GPRS standard polarity female SMA connector. Standard size SIM slot (available from outside) Regulations FCC Class A, CE EN55022 Class A EN55024 EN , 3 EN , 3, 4, 5, 6, 8, 11 IEC C-Tick N29451 A-tick N1246 (Integrated Sierra Wireless modem) UL Listed (file #E358541) Operating temperature: C, 5 to 95% RH Dimensions, unpacked: 107(H) x 32(W) x 97(D) mm, 500 g DIN mount bracket. Aluminium Chassis 2-years Warranty Networking Capabilities Choice of Uplink IP-assignment mode - DHCP client, PPPoE client, manual/static Telnet to Serial routing (rfc2217). Siemens MPI/PPI is supported via an adapter DHCP server on Device LAN Built-in 3G/GPRS for use as Uplink. USB port for managing USB enabled PLCs EasyTunnel support for enabling VPN via Secomea TrustGate Monitoring and Logging Features System log with System Watchdog Central log via GateManager GateManager Alerts (to , SMS; management system) and Alert Log for SiteManager and Agents Partnumbers Description SiteManager 1039 including 2 Device Agents SiteManager 3239 including 5 Device Agents Upgrade to 5 agents for model Upgrade to 10 agents for model 3239 EasyStart (Appliance Launcher) for easy initial contact and connection to Gate- Manager Configuration and maintenance of SiteManager via browser (HTTPS/SSL - local or remote from GateManager ) Includes a Setup Assistant Wizard for guided configuration via the Web GUI Configuration backup management (via GateManager ) including scheduled backup and fast hardware replacement (cold backup) Configuration export and import (XML) Pre-defined Device Agents for easy setup of access to all PCs, web devices and all common PLCs and HMIs. LED Signaling and I/Os 4 LEDs for signalling Power, Status, 3G/ GPRS status and LinkManager connection. Digital Input port for site operator control of remote access Digital Output for signalling active Link- Manager connections 1 configurable digital input port for custom /SMS alert triggering 1 digital output port for toggling from the SiteManager GUI Upgrade to 25 agents for model Upgrade to 50 agents for model upgrade to 100 agents for model GateManager settings preconfigured Secomea A/S Denmark info@secomea.com SiteManager MPI/PPI adapter (Ethernet) Doc rev

7 Remote Management - SiteManager 1129 and 3329 Secure High-Availability Remote Access to Industrial Devices OPTIONAL OPTIONAL SiteManager is an off-the-shelf component in the Secomea Industrial Communications Solution program that in combination with Secomea s GateManager and LinkManager ensures unified, uninterrupted and secure access to remote devices. SiteManager is security certified according to the highest industry standards of the industry, performed by the independent security organisation ProtectEM GmbH in Germany in close cooperation with the Deggendorf Institute of Technology. The SiteManager 1129 and 3329 are robust DIN mountable appliances that installs in the machine control panel, and provides remote access for ondemand servicing and programming of equipment, concurrently with static connections for monitoring and logging. The SiteManager 1129 and 3329 provide remote access to all types of industrial equipment via Ethernet,- Serial- or USB, using the equipment s native protocols (e.g. Modbus, PROFINET, EtherCAT; EtherNet/IP etc.) The SiteManager 1129 and 3329 establish access to the Internet through the firewall of the existing wired network infrastructure, or optionally wirelessly via a broadband modem or WiFi adapter installed in the USB port. Additionally the SiteManager features static VPN powered by the unique Secomea EasyTunnel concept. The SiteManager itself and its monitored devices are all centrally managed and accessible from the GateManager server. Built-in serial, USB and Ethernet access agents for most PLC, HMI and Servo vendors in the market, as well as agent templates for video, voice, PC and Scada systems (including support for Siemens PPI and MPI) Firewall friendly communication,- uses standard web protocols, and only inside-out. No requirement for public or fixed IP address. SiteManager is by default DHCP enabled. No need to re-configure the PLC with gateway address etc. Can operate as carrier of alarms, alerts etc. between devices and central logging servers over the Internet. Built-in firewall, AES and x.509 certificates for maximum security All configuration, firmware and feature upgrades are done remotely through an intuitive web GUI User-configurable alerts for status monitoring and configurable I/O ports for custom alarms. Optional 4G/3G/GPRS/3G broadband support by installing a standard USB modem. Optional Internet access via the optional WiFi module installed in the USB port Automatic failover between Ethernet Uplink and the optional Wireless Uplink. Includes the unique Secomea EasyTunnel Client feature for allowing easy enrollment in a VPN network. Security certified in accordance with leading standards methodologies specified by NIST, ISA/IEC, BSI and ISECOM.

8 Remote Management - SiteManager and 3329 Secure High-Availability Remote Access to Industrial Devices Unique Specifications PLC HMI PC Cam GateManager Enabled GateManager enabled for easy, centralized configuration, backup, monitoring and access for remote service and maintenance of Secomea SiteManager and industrial devices. The GateManager is available both as a hosted service and as a stand-alone software package. LinkManager Enabled The LinkManager is a one-step installation Windows application that runs on the support engineer PC. Working with GateManager it provides secure on-demand access to remote Serial, IP or USB devices through the SiteManagers. Once connected, it makes the remote device appear to the field engineer as if the Windows PC was connected directly to the device. So with LinkManager, any remote device is just a few mouse clicks away. LinkManager Mobile Enabled The LinkManager Mobile is designed for accessing your devices via a tablet, mobile phone or PC without needing installation of software. LinkManager Mobile allows access to devices using Web browser, VNC/ RDP Remote Desktop clients and selected ios and Android Remote HMI apps. Static Device/Server Relays connections The SiteManager allows Static relays to a GateManager enabling a central server or SCADA system to monitor devices real-time, or to allow devices to push status updates back to the central server. Configurable Routing/Forwarding rules The SiteManager can be configured to port forward or route connections between its Uplink and Device network ports. It can even be used as secure Internet router via an integrated Web proxy. Optional EasyTunnel VPN support The SiteManager supports the unique Secomea EasyTunnel VPN concept. Enabling the included EasyTunnel Client in the SiteManager, will allow enrollment in a VPN network controlled by a TrustGate concentrator. EasyTunnel works like ordinary IPSec VPN, but without the need for juggling certificates or keys. Simply enter the serial number of the SiteManager, and it is instantly enrolled in the VPN network. State-of-the-Art Security The SiteManager solutions are using state-of-the-art security standards. This includes a built-in stateful Inspection Firewall, authentications using x.509 digital certificate and encryption using the strong AES standard with up to 256-bit. The entire solution is Security certified according to the most current standards of the industry. Firewall Friendly The end-user network security is priority number 1. With the SiteManager and the security standard that this includes, it is important that end-user do not need to compromise their own corporate security standards. Therefore all communication is encrypted, even when using port 80 from the inside and out. Local Access Management and logging The SiteManager allows local administered access management via its Web GUI or digital ports, in addition to the central user access management. On top of this, all user connections made to the SiteManager and its connected devices are logged centrally on the GateManager. Drivers for any type device The SiteManager has built-in preconfigured drivers agents for remote accessing any type of device such as PLCs, HMis, IPCs, Robots, Servos, etc. In addition to this, it is possible to customize an agent for other requirements regardless of it being Serial, Ethernet, WiFi or USB attached. WiFi operation in Client mode By applying the Secomea USB WiFi adapter, the SiteManager will automatically enable WiFi Client mode, and the SiteManager will be able to access the Internet via a local access point. 4G/3G/GPRS Option with Wake-on-SMS The SiteManager 1129/3329 features an optional USB port for attaching a standard 4G/3G/GPRS USB modem for connecting to the Internet. This feature is useful in cases where no local infrastructure exists for connecting to the Internet. Fail-over / Fail-back (Wired / Wireless) When enabling both the wired and the wireless Uplink option (broadband or WiFi installed in the USB port), the SiteManager can perform fail-over and thereby ensure maximum uptime. By prioritizing the wired uplink, the SiteManager will automatically fail-back to the wired connection, thus reducing consumption of broadband data charges. Flexible Alert notification system The SiteManager can be used as gateway for alerts generated by local devices via Ethernet, Serial or digital input triggers, or by the GateManager monitoring status of the SiteManager and local devices. Alerts are administered by the central GateManager from where they can be sent as SMS or . In addition all generated alert are centrally logged.

9 Remote Management - SiteManager 1129 and 3329 Technical Specifications Electrical Characteristics 536 Mhz ARM Cortex A5 CPU Input V/DC, via screw terminals. Network Interfaces: 2 x 10/100 Mbit Ethernet (UPLINK, DEV1,) RJ45 connection 2 x USB 2.0 full speed (Host) 1 x RS232 DB9 Serial port with full flow control Power consumption: max 3W excl. any optional USB device.s (Calculate with a total of 8W incl. USB devices) 2 x digital input ports 1 x output relay (max 0,5A), 1 x digital output open drain (max 0,2A) Regulations CE (EN , EN , EN , EN ) FCC 47 cfr part 15 UL Listed (file #E358541, ITE 4ZP8) RCM approval (Available June 2015) Physical Charateristics Operating temperature: C, 5 to 95% RH Dimensions, unpacked: 107(H) x 32(W) x 97(D) mm, 500 g DIN mount bracket. Aluminium Chassis 2-years Warranty Networking Capabilities Choice of Uplink (WAN) Internet access: - Ethernet, - WiFi USB Option (IEEE b/g/n) - Broadband USB Option (4G/3G/GPRS) Choice of Uplink IP-assignment mode: DHCP client, PPPoE client, manual/static Telnet to Serial routing (rfc2217). Siemens MPI/PPI is supported via an adapter DHCP server on Device LAN by Ethernet USB port for remote accessing USB enabled devices (directly or via USB hub) EasyTunnel support for enabling VPN via Secomea TrustGate Support for remote access by any UDP/ TCP based protocol Monitoring and Logging Features System log with System Watchdog Automatic event logging on GateManager Alert notifications generated by SiteManager or GateManager and sent as or SMS from the GateManager Partnumbers Configuration and Management Appliance Launcher for easy initial contact and connection to GateManager Configuration and maintenance of SiteManager via browser (HTTPS/SSL - local or remote from GateManager ) Includes a Setup Assistant Wizard for guided configuration via the Web GUI Easy configuration with pre-defined configuration using a USB stick Configuration backup management (via GateManager ) including scheduled backup and fast hardware replacement (cold backup) Configuration export and import (XML) Pre-defined Device Agents for easy setup of access to all PCs, web devices and all common PLCs and HMIs. LED Signaling and I/Os 3 LEDs for signalling Power, Status and LinkManager connection. Digital Input port for site operator control of remote access Digital or Relay output for signalling active LinkManager connections, and GateManager connection status. Configurable digital input port for custom /SMS alert triggering Output port for custom toggling from the SiteManager GUI Description SiteManager 1129 including 5 Device Agents SiteManager 3329 including 25 Device Agents Secomea WiFi USB adapter for operation as WiFi Client Secomea WiFi USB adapter with SMA adapter for operation as WiFi Client GateManager settings preconfigured Secomea A/S Denmark info@secomea.com MPI/PPI adapter (Ethernet) Doc rev

10 Remote Management - SiteManager 1139 and 3339 Secure High-Availability Remote Access to Industrial Devices OPTIONAL SiteManager is an off-the-shelf component in the Secomea Industrial Communications Solution program that in combination with Secomea s GateManager and LinkManager ensures unified, uninterrupted and secure access to remote devices. SiteManager is security certified according to the highest industry standards of the industry, performed by the independent security organisation ProtectEM GmbH in Germany in close cooperation with the Deggendorf Institute of Technology. The SiteManager 1139 and 3339 are robust DIN mountable appliances that installs in the machine control panel, and provides remote access for on-demand servicing and programming of equipment, concurrently with static connections for monitoring and logging. The SiteManager 1139 and 3339 provide remote access to all types of industrial equipment via Ethernet,- Serial- or USB, using the equipment s native protocols (e.g. Modbus, PROFINET, EtherCAT; EtherNet/IP etc.) The SiteManager 1139 and 3339 establish access to the Internet through the firewall of the existing wired network infrastructure, or wirelessly by the integrated 3G/GPRS modem. Additionally the SiteManager features static VPN powered by the unique Secomea EasyTunnel concept. The SiteManager itself and its monitored devices are all centrally managed and accessible from the GateManager server. Built-in serial, USB and Ethernet access agents for most PLC, HMI and Servo vendors in the market, as well as agent templates for video, voice, PC and Scada systems (including support for Siemens PPI and MPI) Firewall friendly communication,- uses standard web protocols, and only insideout. No requirement for public or fixed IP address. SiteManager is by default DHCP enabled. No need to re-configure the PLC with gateway address etc. Can operate as carrier of alarms, alerts etc. between devices and central logging servers over the Internet. Built-in firewall, AES and x.509 certificates for maximum security All configuration, firmware and feature upgrades are done remotely through an intuitive web GUI User-configurable alerts for status monitoring and configurable I/O ports for custom alarms. Built-in SMS modem support on the Serial port and SMS Gateway support on the Ethernet port (typically used by Siemens and CoDeSys ready products) Integrated GPRS/3G broadband modem for alternative wireless Internet access or failover. Optional Internet access via the optional WiFi module installed in the USB port Includes the unique Secomea EasyTunnel Client feature for allowing easy enrollment in a VPN network. Security certified in accordance with leading standards methodologies specified by NIST, ISA/IEC, BSI and ISECOM.

11 Remote Management - SiteManager and 3339 Secure High-Availability Remote Access to Industrial Devices Unique Specifications PLC HMI PC Cam GateManager Enabled GateManager enabled for easy, centralized configuration, backup, monitoring and access for remote service and maintenance of Secomea SiteManager and industrial devices. The GateManager is available both as a hosted service and as a stand-alone software package. LinkManager Enabled The LinkManager is a one-step installation Windows application that runs on the support engineer PC. Working with GateManager it provides secure on-demand access to remote Serial, IP or USB devices through the SiteManagers. Once connected, it makes the remote device appear to the field engineer as if the Windows PC was connected directly to the device. So with LinkManager, any remote device is just a few mouse clicks away. LinkManager Mobile Enabled The LinkManager Mobile is designed for accessing your devices via a tablet, mobile phone or PC without needing installation of software. LinkManager Mobile allows access to devices using Web browser, VNC/ RDP Remote Desktop clients and selected ios and Android Remote HMI apps. Static Device/Server Relays connections The SiteManager allows Static relays to a GateManager enabling a central server or SCADA system to monitor devices real-time, or to allow devices to push status updates back to the central server. Configurable Routing/Forwarding rules The SiteManager can be configured to port forward or route connections between its Uplink and Device network ports. It can even be used as secure Internet router via an integrated Web proxy. Optional EasyTunnel VPN support The SiteManager supports the unique Secomea EasyTunnel VPN concept. Enabling the included EasyTunnel Client in the SiteManager, will allow enrollment in a VPN network controlled by a TrustGate concentrator. EasyTunnel works like ordinary IPSec VPN, but without the need for juggling certificates or keys. Simply enter the serial number of the SiteManager, and it is instantly enrolled in the VPN network. State-of-the-Art Security The SiteManager solutions are using state-of-the-art security standards. This includes a built-in stateful Inspection Firewall, authentications using x.509 digital certificate and encryption using the strong AES standard with up to 256-bit. The entire solution is Security certified according to the most current standards of the industry. Firewall Friendly The end-user network security is priority number 1. With the SiteManager and the security standard that this includes, it is important that end-user do not need to compromise their own corporate security standards. Therefore all communication is encrypted, even when using port 80 from the inside and out. Local Access Management and logging The SiteManager allows local administered access management via its Web GUI or digital ports, in addition to the central user access management. On top of this, all user connections made to the SiteManager and its connected devices are logged centrally on the GateManager. Drivers for any type device The SiteManager has built-in preconfigured drivers agents for remote accessing any type of device such as PLCs, HMis, IPCs, Robots, Servos, etc. In addition to this, it is possible to customize an agent for other requirements regardless of it being Serial, Ethernet, WiFi or USB attached. WiFi operation in Client mode Applying the Secomea USB WiFi adapter to the SiteManager will automatically enable WiFi Client mode, and the SiteManager will be able to access the Internet via a local access point. 3G/GPRS Wake-on-SMS When connected via broadband the SiteManager can be configured to enter sleep mode, to prevent consuming data traffic charges when idle. Simply send an SMS to the SiteManager and it will be instantly available. Fail-over / Fail-back (Wired / Wireless) When enabling both the wired and Wireless Uplink (broadband or optional WiFi), the SiteManager can perform fail-over and thereby ensure maximum uptime. By prioritizing the wired uplink, the SiteManager will automatically fail-back to the wired connection, thus reducing consumption of broadband data charges. Flexible Alert notification system Any SiteManager can be used as gateway for alerts generated by local devices via Ethernet, Serial or digital input triggers, or by the GateManager monitoring status of the SiteManager and local devices. Alerts are administered by the central GateManager from where they can be sent as SMS or . In addition all generated alert are centrally logged. True SMS Gateway - via Serial and Ethernet The serial port of SiteManager 1139 and 3339 operates as a true SMS modem via the AT command set, and supports both outgoing SMSes generated e.g. by a PLC, as well as incoming SMS queing that a PLC can scan for. Additionally the Ethernet port supports the SMS syntax typically used in Siemens and CoDeSys code blocks for sending SMS messages from a PLC.

12 Remote Management - SiteManager 1139 and 3339 Technical Specifications Electrical Characteristics 536 Mhz ARM Cortex A5 CPU Input V/DC, via screw terminals. Network Interfaces: 2 x 10/100 Mbit Ethernet (UPLINK, DEV1,) RJ45 connection 2 x USB 2.0 full speed (Host) 1 x RS232 DB9 Serial port with full flow control Power consumption: max 5W excl. any optional USB device.s (Calculate with a total of 8W incl. USB devices) 2 x digital input ports 1 x output relay (max 0,5A), 1 x digital output open drain (max 0,2A) Integrated HSPA+ broadband modem supporting the frequencies: WCDMA 850/1900/2100 MHz EDGE/GPRS 850/900/1800/1900 MHz 3G/GPRS standard polarity female SMA connector. Regulations CE (EN , EN , EN , EN ) FCC 47 cfr part 15 UL Listed (file #E358541, ITE 4ZP8) RCM approval (Available June 2015) Physical Charateristics Operating temperature: C, 5 to 95% RH Networking Capabilities Choice of Uplink (WAN) Internet access: - Ethernet, - WiFi USB Option (IEEE b/g/n) - 3G/GPRS Choice of Uplink IP-assignment mode: DHCP client, PPPoE client, manual/static Telnet to Serial routing (rfc2217). Siemens MPI/PPI is supported via an adapter DHCP server on Device LAN by Ethernet USB port for remote accessing USB enabled devices (directly or via USB hub) EasyTunnel support for enabling VPN via Secomea TrustGate Support for remote access by any UDP/ TCP based protocol Monitoring and Logging Features System log with System Watchdog Automatic event logging on GateManager Alert notifications generated by SiteManager or GateManager and sent as or SMS locally or centralized from the GateManager Bi-directional SMS Gateway support via Serial AT commands and UDP/TCP script commands Configuration and Management Appliance Launcher for easy initial contact and connection to GateManager Configuration and maintenance of SiteManager via browser (HTTPS/SSL - local or remote from GateManager ) Includes a Setup Assistant Wizard for guided configuration via the Web GUI Easy configuration with pre-defined configuration using a USB stick Configuration backup management (via GateManager ) including scheduled backup and fast hardware replacement (cold backup) Configuration export and import (XML) Pre-defined Device Agents for easy setup of access to all PCs, web devices and all common PLCs and HMIs. LED Signaling and I/Os 4 LEDs for signalling Power, Status, 3G/ GPRS status and LinkManager connection. Digital Input port for site operator control of remote access Digital or Relay output for signalling active LinkManager connections, and GateManager connection status. Configurable digital input port for custom /SMS alert triggering Output port for custom toggling from the SiteManager GUI Dimensions, unpacked: 107(H) x 32(W) x 97(D) mm, 500 g DIN mount bracket. Aluminium Chassis 2-years Warranty Secomea A/S Denmark info@secomea.com Partnumbers Description SiteManager 1139 including 5 Device Agents SiteManager 3339 including 25 Device Agents Secomea WiFi USB adapter for operation as WiFi Client Secomea WiFi USB adapter with SMA adapter for operation as WiFi Client GateManager settings preconfigured MPI/PPI adapter (Ethernet) Doc rev

13 Remote Management - SiteManager G and G Secure High-Availability Remote Access to Industrial Devices 4G OPTIONAL SiteManager is an off-the-shelf component in the Secomea Industrial Communications Solution program that in combination with Secomea s GateManager and LinkManager ensures unified, uninterrupted and secure access to remote devices. SiteManager is security certified according to the highest industry standards of the industry, performed by the independent security organisation ProtectEM GmbH in Germany in close cooperation with the Deggendorf Institute of Technology. The SiteManager G and G are robust DIN mountable appliances that installs in the machine control panel, and provides remote access for on-demand servicing and programming of equipment, concurrently with static connections for monitoring and logging. The SiteManager G and G provide remote access to all types of industrial equipment via Ethernet,- Serial- or USB, using the equipment s native protocols (e.g. Modbus, PROFINET, EtherCAT; EtherNet/IP etc.) The SiteManager G and G establish access to the Internet through the firewall of the existing wired network infrastructure, or wirelessly by the integrated 4G(LTE)/3G/GPRS modem. Additionally the SiteManager features static VPN powered by the unique Secomea EasyTunnel concept. The SiteManager itself and its monitored devices are all centrally managed and accessible from the GateManager server. Built-in serial, USB and Ethernet access agents for most PLC, HMI and Servo vendors in the market, as well as agent templates for video, voice, PC and Scada systems (including support for Siemens PPI and MPI) Firewall friendly communication,- uses standard web protocols, and only insideout. No requirement for public or fixed IP address. SiteManager is by default DHCP enabled. No need to re-configure the PLC with gateway address etc. Can operate as carrier of alarms, alerts etc. between devices and central logging servers over the Internet. Built-in firewall, AES and x.509 certificates for maximum security All configuration, firmware and feature upgrades are done remotely through an intuitive web GUI User-configurable alerts for status monitoring and configurable I/O ports for custom alarms. Built-in SMS modem support on the Serial port and SMS Gateway support on the Ethernet port (typically used by Siemens and CoDeSys ready products) Integrated 4G broadband modem for alternative wireless Internet access or failover. Optional Internet access via the optional WiFi module installed in the USB port Includes the unique Secomea EasyTunnel Client feature for allowing easy enrollment in a VPN network. Security certified in accordance with leading standards methodologies specified by NIST, ISA/IEC, BSI and ISECOM.

14 Remote Management - SiteManager G and G Secure High-Availability Remote Access to Industrial Devices Unique Specifications 4G PLC HMI PC Cam GateManager Enabled GateManager enabled for easy, centralized configuration, backup, monitoring and access for remote service and maintenance of Secomea SiteManager and industrial devices. The GateManager is available both as a hosted service and as a stand-alone software package. LinkManager Enabled The LinkManager is a one-step installation Windows application that runs on the support engineer PC. Working with GateManager it provides secure on-demand access to remote Serial, IP or USB devices through the SiteManagers. Once connected, it makes the remote device appear to the field engineer as if the Windows PC was connected directly to the device. So with LinkManager, any remote device is just a few mouse clicks away. LinkManager Mobile Enabled The LinkManager Mobile is designed for accessing your devices via a tablet, mobile phone or PC without needing installation of software. LinkManager Mobile allows access to devices using Web browser, VNC/ RDP Remote Desktop clients and selected ios and Android Remote HMI apps. Static Device/Server Relays connections The SiteManager allows Static relays to a GateManager enabling a central server or SCADA system to monitor devices real-time, or to allow devices to push status updates back to the central server. Configurable Routing/Forwarding rules The SiteManager can be configured to port forward or route connections between its Uplink and Device network ports. It can even be used as secure Internet router via an integrated Web proxy. Optional EasyTunnel VPN support The SiteManager supports the unique Secomea EasyTunnel VPN concept. Enabling the included EasyTunnel Client in the SiteManager, will allow enrollment in a VPN network controlled by a TrustGate concentrator. EasyTunnel works like ordinary IPSec VPN, but without the need for juggling certificates or keys. Simply enter the serial number of the SiteManager, and it is instantly enrolled in the VPN network. State-of-the-Art Security The SiteManager solutions are using state-of-the-art security standards. This includes a built-in stateful Inspection Firewall, authentications using x.509 digital certificate and encryption using the strong AES standard with up to 256-bit. The entire solution is Security certified according to the most current standards of the industry. Firewall Friendly The end-user network security is priority number 1. With the SiteManager and the security standard that this includes, it is important that end-user do not need to compromise their own corporate security standards. Therefore all communication is encrypted, even when using port 80 from the inside and out. Local Access Management and logging The SiteManager allows local administered access management via its Web GUI or digital ports, in addition to the central user access management. On top of this, all user connections made to the SiteManager and its connected devices are logged centrally on the GateManager. Drivers for any type device The SiteManager has built-in preconfigured drivers agents for remote accessing any type of device such as PLCs, HMis, IPCs, Robots, Servos, etc. In addition to this, it is possible to customize an agent for other requirements regardless of it being Serial, Ethernet, WiFi or USB attached. WiFi operation in Client mode Applying the Secomea USB WiFi adapter to the SiteManager will automatically enable WiFi Client mode, and the SiteManager will be able to access the Internet via a local access point. Wake-on-SMS When connected via broadband the SiteManager can be configured to enter sleep mode, to prevent consuming data traffic charges when idle. Simply send an SMS to the SiteManager and it will be instantly available. Fail-over / Fail-back (Wired / Wireless) When enabling both the wired and Wireless Uplink (broadband or optional WiFi), the SiteManager can perform fail-over and thereby ensure maximum uptime. By prioritizing the wired uplink, the SiteManager will automatically fail-back to the wired connection, thus reducing consumption of broadband data charges. Flexible Alert notification system Any SiteManager can be used as gateway for alerts generated by local devices via Ethernet, Serial or digital input triggers, or by the GateManager monitoring status of the SiteManager and local devices. Alerts are administered by the central GateManager from where they can be sent as SMS or . In addition all generated alert are centrally logged. True SMS Gateway - via Serial and Ethernet The serial port of SiteManager G and G operates as a true SMS modem via the AT command set, and supports both outgoing SMSes generated e.g. by a PLC, as well as incoming SMS queing that a PLC can scan for. Additionally the Ethernet port supports the SMS syntax typically used in Siemens and CoDeSys code blocks for sending SMS messages from a PLC.

15 Remote Management - SiteManager G and G 4G Technical Specifications Electrical Characteristics 536 Mhz ARM Cortex A5 CPU Input V/DC, via screw terminals. Network Interfaces: 2 x 10/100 Mbit Ethernet (UPLINK, DEV1,) RJ45 connection 2 x USB 2.0 full speed (Host) 1 x RS232 DB9 Serial port with full flow control Power consumption: max 5W excl. any optional USB device.s (Calculate with a total of 8W incl. USB devices) 2 x digital input ports 1 x output relay (max 0,5A), 1 x digital output open drain (max 0,2A) Integrated broadband modem: - LTE Downlink: 50mbps (10MHz bandwidth) - LTE uplink: 25mbps (10MHz bandwidth) 4G/3G/GPRS standard polarity female SMA connector. 4G EU (EMEA) modem specs LTE Bands: B1 (2100), B3 (1800). B7 (2600), B8 (900), B20 (800DD), B38 (TDD 2600), B40 (TDD 2300) UMTS/HSDPA/HSPA+: B1 (2100), B8 (900) GPRS/EDGE: B10 (900), B13 (1800) Certifications: CE, GCF (in planning) 4G US (USA) modem specs LTE Bands: B2 (1900), B4 (1700/AWS), B5 (850), B17 (700) UMTS/HSDPA/HSPA+: B2 (1900), B5 (850) Certifications: FCC, PTCRB, IC, AT&T, Rogers (on going) 4G CN (China) modem specs LTE Bands: B1 (FDD 2100), B3 (FDD 1800), B7 (FDD 2600). B38 (TDD 2600), B39 (TDD 1900), B40 (TDD 2300), B41 (TDD 2500) UMTS/HSDPA/HSPA+: B1 (2100), B8 (900) TD-SCDMA: B34 ( ), B39 ( ) GPRS/EDGE: B10 (900), B13 (1800) Certifications: CCC, TA, CTA, NCC Regulations CE (EN , EN , EN , EN ) FCC 47 cfr part 15 UL Listed (file #E358541, ITE 4ZP8) Physical Charateristics Operating temperature: C, 5 to 95% RH Dimensions, unpacked: 107(H) x 32(W) x 97(D) mm, 500 g DIN mount bracket. Aluminium Chassis 2-years Warranty Networking Capabilities Choice of Uplink (WAN) Internet access: - Ethernet, - WiFi USB Option (IEEE b/g/n) - 3G/GPRS Choice of Uplink IP-assignment mode: DHCP client, PPPoE client, manual/static Telnet to Serial routing (rfc2217). Siemens MPI/ PPI is supported via an adapter DHCP server on Device LAN by Ethernet USB port for remote accessing USB enabled devices (directly or via USB hub) EasyTunnel support for enabling VPN via Secomea TrustGate Support for remote access by any UDP/TCP based protocol Monitoring and Logging Features System log with System Watchdog Automatic event logging on GateManager Partnumbers Alert notifications generated by SiteManager or GateManager and sent as or SMS locally or centralized from the GateManager Bi-directional SMS Gateway support via Serial AT commands and UDP/TCP script commands Configuration and Management Appliance Launcher for easy initial contact and connection to GateManager Configuration and maintenance of SiteManager via browser (HTTPS/SSL - local or remote from GateManager ) Includes a Setup Assistant Wizard for guided configuration via the Web GUI Easy configuration with pre-defined configuration using a USB stick Configuration backup management (via Gate- Manager ) including scheduled backup and fast hardware replacement (cold backup) Configuration export and import (XML) Pre-defined Device Agents for easy setup of access to all PCs, web devices and all common PLCs and HMIs. LED Signaling and I/Os 4 LEDs for signalling Power, Status, 3G/GPRS status and LinkManager connection. Digital Input port for site operator control of remote access Digital or Relay output for signalling active LinkManager connections, and GateManager connection status. Configurable digital input port for custom /SMS alert triggering Output port for custom toggling from the SiteManager GUI Model / Description SiteManager G EU, including 5 Device Agents SiteManager G US, including 5 Device Agents SiteManager G CN, including 5 Device Agents SiteManager G EU, including 25 Device Agents SiteManager G US, including 25 Device Agents SiteManager G CN, including 25 Device Agents Secomea A/S Denmark info@secomea.com Secomea WiFi USB adapter with SMA adapter for operation as WiFi Client Doc rev

16 Remote Management - SiteManager 1149 and 3349 Secure High-Availability Remote Access to Industrial Devices OPTIONAL SiteManager is an off-the-shelf component in the Secomea Industrial Communications Solution program that in combination with Secomea s GateManager and LinkManager ensures unified, uninterrupted and secure access to remote devices. SiteManager is security certified according to the highest industry standards of the industry, performed by the independent security organisation ProtectEM GmbH in Germany in close cooperation with the Deggendorf Institute of Technology. The SiteManager 1149 and 3349 are robust DIN mountable appliances that installs in the machine control panel, and provides remote access for on-demand servicing and programming of equipment, concurrently with static connections for monitoring and logging. The SiteManager 1149 and 3349 provide remote access to all types of industrial equipment via Ethernet,- Serial- or USB, using the equipment s native protocols (e.g. Modbus, PROFINET, EtherCAT; EtherNet/IP etc.). The SiteManager 1149 and 3349 establish access to the Internet through the firewall of the existing wired network infrastructure, or wirelessly by the integrated WiFi option. Additionally the SiteManager features static VPN powered by the unique Secomea EasyTunnel concept. The SiteManager itself and its monitored devices are all centrally managed and accessible from the GateManager server Built-in serial, USB and Ethernet access agents for most PLC, HMI and Servo vendors in the market, as well as agent templates for video, voice, PC and Scada systems (including support for Siemens PPI and MPI) Firewall friendly communication,- uses standard web protocols, and only inside-out No requirement for public or fixed IP address. SiteManager is by default DHCP enabled. No need to re-configure the PLC with gateway address etc. Can operate as carrier of alarms, alerts etc. between devices and central logging servers over the Internet Built-in firewall, AES and x.509 certificates for maximum security All configuration, firmware and feature upgrades are done remotely through an intuitive web GUI User-configurable alerts for status monitoring and configurable I/O ports for custom alarms. Integrated WiFi for connecting to the Internet via a local Access Point. Can operate as WiFi access point via Secomea USB WiFi adapter option Optional Internet access via a standard 4G/3G/GPRS modem installed in the USB port Includes the unique Secomea EasyTunnel Client feature for allowing easy enrollment in a VPN network Security certified in accordance with leading standards methodologies specified by NIST, ISA/IEC, BSI and ISECOM