OPC Security Gateway
OPC Expert adds communication protection to any third party OPC servers. Unlike most OPC servers, which only support minimal connection security, OPC Expert enables users to restrict access to read, write, and browse operations. Since all communication uses OPC Foundation’s security specifications, any OPC application can benefit from OPC Expert’s enhanced security.
Find out how to configure OPC Expert access control list (ACL)
Includes support for:
- OPC UA clients and servers
- OPC DA clients and servers
- OPC XML DA servers
- MQTT publishes/subscribers/brokers
- REST API clients
- Tunneling
Security restrictions based on:
- Endpoints
- Certificates
- Username/password
- Windows user accounts
Operation restrictions:
- Read
- Write
- Browse
Security objects:
- Items
- Folders
- Servers
- Computers
Find out how to configure OPC Expert access control list (ACL)
Data sources
OPC Expert connects to a variety of data sources, such as
- OPC classic servers (including DA, HDA, and A&E)
- OPC XML DA servers
- OPC UA servers (supporting DA, HA, and A&C)
- MQTT brokers (using MQTT security)
Users can allow access to one server while denying another. Of course, OPC Expert enables users to connect to multiple OPC servers simultaneously whether they are local or remote data sources.
Find out how to configure OPC Expert access control list (ACL)
Endpoint security
Enable client applications to connect via various endpoints based on the security level your organization requires. For example, security can use a high encryption level or none. Also, incoming applications can use authentication methods based on user names, certificates, or even no authentication at all.
Find out how to configure OPC Expert access control list (ACL)
Certificates
When using certificates for security (which works well for machine-to-machine communication, administrators can choose default behavior. For example, while testing, administrators may trust all new certificates. In contrast when deploying their solutions, administrators will likely reject any new certificates by default and manually decide to allow trusted individuals.
Find out how to configure OPC Expert access control list (ACL)
Users and Groups
OPC Expert enables administrators to specify which users and groups have permission to read, write, and browse. Administrators may allow or deny each operation for each entity. Furthermore, for the purpose of testing, administrators can trust all users by default and switch to a more secure (deny) mode when ready to deploy throughout the plant.
In addition, administrators can specify how OPC Expert identifies each incoming connection by way of a certificate (X.509), a Windows users account, an OPC User Account, or a combination of any of these. This enables OPC Expert to easily support cases where only machines are connecting as well as cases where humans must provide personal credentials.
Find out how to configure OPC Expert access control list (ACL)
