ClearSCADA

compared with
Version 8 by Adam Woodland
on Jun 21, 2018 18:30.

Key
This line was removed.
This word was removed. This word was added.
This line was added.

Changes (1)

View Page History
h3. New WebX (IIS Hosted)

New WebX uses Microsoft Window's standard IIS feature for the hosting and so any configuration options defined within the Windows environment, for example the SChannel configuration, will also be applied to WebX. Schneider Electric recommends you follow your standard corporate hardening guidelines, however should you not have any there are third party websites on the Internet that can provide assistance, for example https://www.hass.de/content/setup-your-iis-ssl-perfect-forward-secrecy-and-tls-12, https://www.hass.de/content/setup-microsoft-windows-or-iis-ssl-perfect-forward-secrecy-and-tls-12, however this script has not been specifically tested to work with ClearSCADA.

The use of self-signed certificates should also be avoided in production environment, any https certificate used should be larger than 1024 bytes and be using a more secure certificate hash than provided by SHA1. As weaknesses with either protocols or ciphers are found, or your clients' operating environment is updated, the configuration of the web server should be reviewed and updated.