User Manual

Network Security Controls
Intended Operational Environments
2
A6V11646120_enUS_c_41
41 | 88
Figure 5: Single Machine Deployment
Stand-alone System without a Local Web Server (IIS)
The following describes a stand-alone configuration, where the Desigo CC server and
the Desigo CC installed client are located on a single computer.
In this scenario, web clients or Windows App clients are not involved.
What is a Stand-alone System?
A single dedicated workstation that runs both the Desigo CC server and the Desigo
CC client application, typically communicating with a field system in a networked
environment. It includes the following features:
● Own administration
● Microsoft SQL Server installed locally
● IPv4
● No IT firewalls in between Desigo CC components (since there are no remote
clients, firewalls do not need to be opened for communication)
Security
● Simple setup (certificate configuration not required).
● Effort for security configuration is low.
● A stand-alone system is secure in regard to attacks from the outside. However,
installation guidelines for closing outside communication by firewall settings, virus
scanner, and backup must be followed to secure the system.
DCC
Server Backbone
Protected Server Hardware
DCC Client /
DCC WSI /
DCC Server
BIRT
MySQL
WinCC OA
Tomcat
IIS
Firewall
DCC
Desigo PX
DCC
Desigo SiPass
DCC
FS20
DCC
System One
DCC
SPC
DCC
Subsystem n
DCC
Subsystem m
Cameras Cameras VMSSystem One
FS20
SiPassDesigo PX