5 layers inside industrial network segmentation

 Taken from Lanner.. 

Det-Tronics Eagle Quantum Premier on Solar Turbines Centaur 50 Gas Turbine Package

Even though this unit has no SIL rating.. It has been running 24/7 since 2014.. No failures.. Excellent quality product.. 

Experimenting with OPC Tunneller and Firewall Settings -- OPC Expert + Graybox OPC DA Simulator

 Objective #1 = To understand behavior of OPC Tunneller with respect to packet transfer and how they behave with Windows Firewall (or any firewall for that matter) turned ON.

Objective #2 = To appreciate how easy to do OPC DA tunnelling with OPC Expert software.

Objective #3 = To refresh myself with Wireshark network packet sniffing software.

1. The setup for today is via 2 VMs -- both equally the same. Clone of Windows 7. 

2. Pls note that i chose network settings as Host-only Adapter in my Virtualbox bcoz i want all my VMs to be able to talk to each other. Image below taken from Nakivo.

3. Next i fired up 2 VMs -- VM03 and VM04 -- VM03 is loaded with OPC DA Server simulator. My favorite is Graybox OPC.

4. Based on guideline from OPC Expert website -- i was able to tunnel OPC data smoothly within 10 minutes -- i could not believe how simple it is -- compared to previous Tunnelling software i have used (Matrikon OPC Tunneller and Cogent Datahub) 

5. Next step -- let's analyze what ports are being used by OPC Expert to obtain data from VM03. I launched Wireshark and start sniffing... so i found that if i want to use OPC Expert to tunnel OPC data -- i would need two (2) TCP ports to be opened.

a) TCP 57888 -- this is for source tunnel

b) TCP 49194 -- this is for destination tunnel

Mission accomplished !!

Where to download Citect SCADA 2015 SP1

 At GDC -- we have Citect SCADA 2015 running on Windows 7.

Due to cybersecurity requirement, the O/S ought to be upgraded to Windows 10.

After reading through compatibility matrix - i learnt that Citect SCADA 2015 must be upgraded to SP1 in order for it to be supported in Windows 10.

I then managed to register myself in AVEVA software portal -- then able to download SP1 installer.

Not only that -- i found there are patches (bug fixes) as well.

Good job AVEVA -- for making it transparent to user.