Endpoint Protection for 3.15

[vsolomonidou]

Hi,

I'm looking into updating an existing v.3.15 system with an Endpoint protection software. I would like to use this for many functions, including application white listing and firewall rule definitions. The security guideline for v3.15 lists all virus scanners that WinCC OA was tested with, which is very helpful, but under white listing only McAfee Application Control (Solidcore) is mentioned. Could you please answer the following:

1) If we need to apply white listing techniques, are you suggesting to use Mcfee products for both Endpoint and white listing? We are considering Kaspersky for nodes (KICS) at the moment, so do you know if there are any potential issues if we use the whitelisting functionality embedded within KICS and not Solidcore?
2) What is the correct version of the antivirus scanners & Solidcore application? Is it within the help file which runs the latest patch or within the security guideline document for 3.15 patch 05?

Thanks,

Vaso

[leoknipp]

You have asked the same question via Siemens Industry Support.
Here is the information you have got from my colleague:

--McAfee Endpoint Protection Suite 10.5.3
--Trendmicro 11 SP1
--Symantec Endpoint Protection 14.0.1
--Kaspersky® Endpoint Security 10 SP1 R4
--Kaspersky® Industrial Cyber Security Suite (KICS) 2.0

Best Regards
Leopold Knipp
Senior Support Specialist

[vsolomonidou]

Hi Leopold,

Thanks for the reply.

Initially our client wanted to use Microsoft Defender ATP, but since it's not in the list of approved vendors that WinCC OA was tested with, we decided not to.

Have you got any plans to test WinCC OA with Microsoft Defender ATP in the future?

Thanks,
Vaso

[leoknipp]

As far as I know there are no plans to support Microsoft Defender ATP in future.
Which operating systems and 3rd party software will supported with the next release as this decision is made short time before starting our system test for the new release.

Best Regards
Leopold Knipp
Senior Support Specialist