All these functions are fully supported by all SMP Gateway models. A Protocol Translator performs data acquisition from one device and then redistributes the information to one control center using a different protocol (one to one interface). A Data Concentrator performs data acquisition from many devices – using one or many different protocols – and then redistributes the information to one control center (one to many interface). A Gateway acquires the data from many devices (like a Data Concentrator), but redistributes the information to many control centers using various protocols (many to many interface). For each type of application, a variety of communication links may be used – RS-232, RS-422, RS-485 in multi-drop configuration, or Ethernet.

What are the biggest differences between the SMP 4, SMP 4-20, SMP 8-40, SMP 16/CP and the SMP 16/SG?

The SMP Gateway is available in different models, to meet your requirements:

The SMP 16/CP is a cost-effective communications processor for IED integration and protocol conversion
The SMP 16/SG is an advanced, highly scalable substation gateway, the backbone of any automation project
The SMP 4 is a low-cost solution for small substations and distribution automation projects
The SMP 4-20 and SMP 8-40 are intelligent communications gateways installed in over 1,500 systems worldwide for protocol translation, IED integration and substation automation projects

All SMP Gateways share the same software architecture and Windows tools for configuration and management. The main difference between the SMP Gateway models is the number of communications ports and the expansion capabilities.

Can the SMP Gateway support multiple master protocols?
How many devices can be handled by an SMP Gateway?
How many data points can be handled by an SMP Gateway?

The performance of the SMP Gateway depends on many factors such as:

The number of devices
The number of data points provided by each device
The type of protocol used
The polling frequency
The characteristics of the communications link – direct connect or multidrop, baud rate
The SMP Gateway processing power and available memory

The following table summarizes the limits that have been set for each SMP Gateway model and configuration.

	SMP 4	SMP 4-20 SMP 8-40	SMP 16/CP	SMP 16/SG
Maximum device connections	1 / 8 / 16	64	16 / 128	128
Maximum control center connections	1 / 1 / 4	64	2 / 64	64
Maximum data points	5,000	10,000	10,000	10,000

Multiple values indicate the different system configurations that are available.

Why should I choose an SMP Gateway?

Cooper introduced the first substation gateway in 1993. Since then, Cooper has constantly evolved the technology and software architecture to provide utilities with a complete solution for integrating IEDs and modernizing their automation systems.

The SMP Gateway is an advanced substation-grade gateway with the following advantages:

Complete hot-standby redundancy support
NERC CIP-002-1 and CIP-009-1 (formerly 1300) compliancy
IEEE C37.90 and IEC-60255 protective relay standards compliancy
Support for both operational and non operational data
Wide range of protocol support including IEC 61850
Universal RS-232/422/485 serial ports
Rich set of Windows based tools
Complete independence from IED manufacturers
More than 1500 systems installed in many of the largest utilities in North America

Is the SMP Gateway Windows based or Linux based?

All the SMP Gateway models share a common embedded software base. Cooper Power Systems chose the Windows CE operating system for the following reasons:

Windows CE is part of the large Microsoft Windows family of operating systems. It is completely supported by Microsoft.
Windows CE provides very good real-time performance, while being very stable and supporting a large variety of I/O device drivers.
The licensing cost is significantly less than comparable industrial-grade operating systems, allowing us to pass on the savings to our customers.
According to many forecasts, Windows CE will become a very strong player in the real-time embedded operating system marketplace and is likely to become dominant in the near future.

Why did you not choose the Linux operating system?

Without entering into emotional and ideological debate over open-source software, we found many good reasons for choosing Windows CE over Linux:

Windows CE is commercially available and fully supported by one of the strongest software companies in the world. Since Linux is not a privately owned operating system, the support responsibility is shared by the community.
Windows CE has smaller memory footprint, making it better suited for an embedded device.
The Windows CE kernel is proprietary software and it is completely different from the consumer versions of Windows. It is not as vulnerable to attacks as an open source system, for which the source code is commonly available.
Linux is based on Unix, which was not designed as an embedded real-time system, but as a multi-user, multi-process system.

How many gateways has Cooper Power Systems sold so far?

Cooper installed its first gateway in a 735 kV substation in 1993. Since then more than 1500 substations of all types ranging from small 12 kV distribution stations to very large 735 kV transmission stations have been equipped with SMP Gateways. The SMP Gateway is now meeting the requirements of some of the largest utilities, in many countries around the world.

Hardware

What are the power supply options?

All SMP Gateway models support the voltages commonly used in substations. The following power supply options are available.

24 VDC
48 VDC
Universal 120/240 VAC or 85/340 VDC

Please contact Cooper Power Systems for your special requirements.

What kind of serial communications interfaces does the SMP Gateway support?

The SMP Gateway is available in different models with different characteristics:

The SMP 4 has one universal RS-232/422/485 port and three RS-232 ports. Optionally, an internal V.34 modem can replace one of the RS-232 ports.
The SMP 16/CP and SMP 16/SG have 16 universal RS-232/422/485 ports. The SMP 16/SG can be upgraded with 16 or 32 additional universal serial ports, for a total of 48 ports.
The SMP 4-20 is available with 4 RS-232 or 4 universal RS-232/422/485 serial ports. It can be upgraded with 8 or 16, RS-232 or RS-422/485 serial ports.
The SMP 8-40 is available with 8 RS-232 or 8 universal RS-232/422/485 serial ports. It can be upgraded with 8, 16, 24 or 32, RS-232 or RS-422/485 serial ports.

Are the RS-232, RS-422 and RS-485 port options software selectable or factory-added hardware modules?

All universal ports are software controllable. Except for the SMP 4, all universal ports support the three state mode required for gateway redundancy.

Does the SMP Gateway support fiber optic connections?

All SMP Gateway models, except the SMP 4, support optional 100 BASE FX Ethernet, with ST connectors and 1300 nanometer multimode fiber for distances of up to 2000 meters.

How many devices can I connect to a single SMP Gateway serial link?

The RS-485 specification (ISO 8482) limits the input impedance of an RS-485 circuit to 12K Ohms, thus theoretically limiting the number of devices that can share a single port to 32. However, the number of devices installed on a single communication line should also be based on the following considerations:

The required response time. Global response time depends on many factors such as the device protocol, bps rate, the number of data point to retrieve, and the IED response time.
The total length of the communication cable versus the bps rate. As a rule of thumb, we consider that a maximum cable capacitance of 250 pF is acceptable when using a baud rate of 115,200 bps. For instance, a low capacitance cable such as Belden 1421 has a nominal conductor to conductor capacitance of 13 pF per feet (43 pF per meter), thus allowing a maximum cable length of 19 feet (5.8 meters).
The tolerance to link failure. If a cable or port fails, all devices sharing the communication line will be lost.
The maximum number of devices supported by the SMP Gateway model and configuration. For best performance, devices should be distributed between all available serial ports.

Does the SMP Gateway support analog and digital I/O?

The SMP Gateway easily interfaces with a wide range of industrial PLC (Schneider Modicon or Allen Bradley) or I/O (ION, SCADA Pak, Monaghan Engineering Protime SER and many others).

Protocols

What protocols does the SMP Gateway support?

The SMP Gateway supports most standard and proprietary protocols used in the power industry. For a complete list of supported protocols, see Supported Protocols.

New protocols are added on a regular basis. Our custom software and consulting group can also develop a protocol component to meet your requirements.

Can all the features and functionalities offered by the SMP Gateway, be used with any brand of relay?

The SMP Gateway protocol licensing is based on communication protocols, not devices. Since the SMP Gateway supports most standard and proprietary protocols used in the power industry, it can connect to a large number of devices. There are hundreds – or maybe even thousands – of different devices that support standard protocols such as DNP3, MODBUS, or IEC 60870-5-101/103/104.

The technical support group can provide you with predefined templates and point lists for most devices that have been already connected to the SMP Gateway. Alternatively, end-users can easily create their own templates for their own devices that use the supported protocols.

Please contact Cooper Power Systems' technical support team to know if your device has already been tested or to check interoperability issues. If any doubts subsist, we will be pleased to assist you in validating the compatibility of your device.

What is the difference between a master and a slave?
How do I know if I need a slave or a master protocol?

In a typical automation system, it is the control center that initiates data acquisition and device control. The control center is thus considered to be the master system. Since the substation device responds to data acquisition and control requests, it is considered to be the slave system.

The SMP Gateway contains both master and slave protocol components. The master protocol components perform as control centers and retrieve information from devices. Slave protocol components perform as devices and send information to control centers in reply to polling requests.

Master protocols are thus used to get information from the IED while the slave protocols are used to accept connections from the control center.

Does the SMP Gateway support Schweitzer relays?

The SMP Gateway supports all SEL relays. However, all SEL relay models have different point lists and features. If a SEL relay is not currently supported, Cooper Power Systems can provide the necessary protocol driver on very short notice, with no additional charges.

Should SEL relays be polled using SEL Fast Meter protocol or DNP3?

The SMP Gateway supports both protocols and each has its advantages and disadvantages. The primary advantage of DNP3 is that it is a standard protocol, and that millisecond time tags are available for events. However, a DNP port cannot be used as a standard relay maintenance port and a second connection is required for that purpose. The main advantage of Fast Meter is that it is possible to interleave maintenance (ASCII) and Fast Meter activities on the same port. However, on most SEL relays it is impossible to obtain detailed event time-tag information using the Fast Meter protocol.

Does the SMP Gateway support Siemens relays?

Most Siemens relays are compatible with the IEC-60870-5-103 protocol. This protocol is fully supported by the SMP Gateway. Moreover, the SMP Gateway also supports the VDEW extensions specifically designed by Siemens for breaker control.

Does the SMP Gateway support GE relays?

Most GE relays use either MODBUS, DNP3 or 61850 protocols, which are all fully supported by the SMP Gateway.

Does the SMP Gateway support Areva relays?

Areva offers a large variety of protection relays. The newer MICOM family of relays is available with the MODBUS RTU, IEC-60870-5-103 or DNP3 protocols, all supported by the SMP Gateway. Most other Areva relays use the native Courier protocol over a K-Bus network. To interface these relays a Kitz 202/204 communication protocol converter must be used. However, this device does not support the retrieval of disturbance records.

Cooper Power Systems plans to support the native Courier protocol in the near future. Please contact our sales department for more information.

Does the SMP Gateway support PG&E/Cooper relays?

The SMP Gateway fully supports the Cooper 2179 master protocol. Some Cooper relays also support DNP3, which is also supported by the SMP Gateway.

Does the SMP Gateway support legacy RTUs?

The very first application of the SMP Gateway, in 1993, was to modernize four different types of legacy RTUs that used four different protocols. Since then, many more RTU protocols have been added to the list. Please contact our sales department for more information on using the SMP Gateway to extend the life of your existing RTU assets.

What types of SCADA or Control Centers are supported by the SMP Gateway?

The SMP Gateway licensing is based on protocols, not control center or device types. The SMP Gateway has been connected successfully to a large variety of SCADA systems including – but not limited to – Siemens WinCC, PowerCC and Sinaut, Areva Esca, Landis and Gyr, GE Cimplicity, GE iFix, Wonderware, Intouch and many others including SCADA control centers that use legacy RTU protocols.

Is there any support for synchronous protocols?

No synchronous protocols are currently supported. However, all SMP Gateway models except the SMP 4 have the hardware capability to support synchronous protocols.

Can I add new protocols to existing SMP Gateways?

Except for the SMP 4, the SMP Gateway licensing model is based on the protocols that you require. When ordering an SMP Gateway, you are provided with a license key that enables the protocols that you have purchased. You can purchase additional protocol licenses at any time. Once the arrangements have been made with our purchasing department, you will be provided with a software code that will unlock the protocols on your SMP Gateway.

The SMP 4 licensing model is different and is based on the number of device and control center connections required. As with the other models, the license can be extended at any time.

How scalable is the SMP Gateway? Can I upgrade or add functionalities and protocols remotely?

All the SMP Gateway tools are network bases and are designed to be used either locally or remotely. Protocol licenses and software versions can be upgraded remotely to add new capabilities to an existing SMP Gateway.

Does the SMP Gateway support the IEC 61850 protocol?

Cooper Power Systems is one of the first companies to offer a full IEC 61850 implementation. The 61850 Config tool extracts the configuration from a 61850 device and automatically creates an SMP Gateway master configuration. The tool also lets you set up a 61850 slave configuration.

The SMP Gateway provides a step-by-step migration path to 61850. Using the SMP Gateway, you can easily integrate any device in a 61850 environment, or connect 61850 devices to legacy control centers.

Note: The UCA 2.0, IEC 61850 and ICCP protocols are available for all SMP Gateway models, except the SMP 4. Use of these protocols requires Cooper Power Systems engineering support.

Does the SMP Gateway support the ICCP protocol?

The SMP Gateway implements the ICCP protocol (also called TASE.2) using the following protocol stack:

IEC-60760-6 TASE.2
MMS according to ISO 9506
ACSE according to ISO 8650
Presentation layer according to ISO 8823
Session layer according to ISO 8327
TCP/IP according to IETF RFC 1006

Cooper Power Systems' ICCP implementation supports the following communication profile:

Block 1 – Basic Services
Block 2 – Extended DS Condition Monitoring (External events are not supported)
Block 4 – Information message
Block 5 – Device Control. Only “Device Operate” and “Get/Set Tag” objects are supported

Note: The UCA 2.0, IEC 61850 and ICCP protocols are available for all SMP Gateway models, except the SMP 4. Use of these protocols requires Cooper Power Systems engineering support.

Is it possible to exchange information between SMP Gateway?

SMP Gateways can easily be set up to exchange information. A master protocol such as DNP3 can be set up in the first SMP Gateway to poll a slave protocol in the second SMP Gateway. Any subset of the data points can be exchanged in this manner.

A new SMP Gateway Interconnection Protocol will be available by Q4 2005. This protocol will provide additional capabilities, such as the exchange of event files, while simplifying configuration.

Is it possible to handle “peer-to-peer” communications using the SMP Gateway?

Unfortunately, the term "peer-to-peer communications" does not always mean the same thing in all contexts. Peer-to-peer communications can mean the exchange of information between IEDs, between SMP Gateways, or between control centers. When response times are not critical (tens or hundreds of milliseconds), the SMP Gateway can support any of these three functionalities in a number of ways. However, in the protection world, peer-to-peer communications can also mean the very fast exchange of information for protection reasons (typically in the order of a few milliseconds). The SMP Gateway cannot achieve such a response time. For these applications, direct inter-IED communications such as the SEL bit mirroring technology or the IEC 61850 proposed GOOSE protocol must be used.

Are you capable of managing synchrophasors?

Synchrophasors (also called PMUs for Phasor Measurement Units) are relatively new devices used for wide area monitoring, control and protection. Many vendors now offer PMU functionality. At the beginning, many different protocols were used, but now most vendors have standardized on IEEE C37.118.

Cooper Power Systems has sucessfully completed two projects which includes both master and slave IEEE C37.118, proving that the SMP platform can also be used as a PDC (Phasor Data Concentrator).

Can the SMP Gateway act as an OPC server or Client?

An SMP OPC Server is planned for Q1 2006. With this server you will be able to directly connect the SMP Gateway to OPC clients such as HMI applications from Wonderware, InTouch, Rockwell RS-View, Siemens WinCCC, GE Cimplicity, or others.

Currently, you can also set up a protocol OPC server, such as Cooper Power Systems' DNP3 OPC Server, to connect the SMP Gateway to OPC client applications.

Can a SMP Gateway be used to retrieve non-operational data such as fault records, disturbance data and event files?

The SMP Gateway supports the acquisition of both operational data – real-time information used by control centers – as well as non-operational data such as event files. However, the only protocol that defines a standard method for exchanging data files is IEC 60870-5-103. Other device protocols must be supported on a case by case basis. Currently, the SMP Gateway can retrieve event files from SEL and GE-UR devices. New devices are being added on a regular basis. Please contact Cooper Power Systems technical support to know if your devices are currently supported.

Time synchronization

What type of time synchronization is available with the SMP Gateway?

The SMP Gateway is available in different models with different capabilities.

The SMP 4 internal clock can be synchronized by slave protocols such as DNP3 or IEC-61870-5-101/104. Best possible resolution is in the order of 50 milliseconds.
The SMP 16/CP and SMP 16/SG can be synchronized by a slave protocol, or by an external modulated or demodulated IRIG-B signal, providing a one millisecond resolution. All serial ports can redistribute the demodulated IRIG-B signal to connected devices. An external port provides high drive demodulated IRIG-B.
The SMP 16/SG can also perform as a full featured substation clock. Synchronization sources may be NTP, IEEE 1588, GPS using a built-in receiver, or IRIG-B. Time can be redistributed by NTP, IEEE 1588 or IRIG-B outputs. The SMP 16/SG add-on serial card can also redistribute a demodulated IRIG-B output.
The SMP 4-20 and SMP 8-40 can be synchronized by a slave protocol, or by an external modulated or demodulated IRIG-B signal, providing a one millisecond resolution. The expansion serial ports can redistribute the demodulated IRIG-B signal to connected devices.

Do you support device millisecond time-tagging?

The SMP Gateway preserves the time tags that originate on the devices, if and when the device protocol supplies such information. If the device or the protocol used by the device does not support time tagging, the SMP Gateway will supply time tags based on its internal clock.

The best time quality is obtained when the device is synchronized by an external clock, typically using a distributed IRIG-B signal. All SMP Gateway models, except the SMP 4, can distribute the IRIG-B signal to connected devices.

Tools

How does the SMP Gateway ease the configuration process?

The SMP Gateway is provided with a complete set of Windows based configuration and maintenance tools.

You will use the SMP Config tool to enter all the data points and set up the polling cycle for the device. Once you have created a device setup, you can then save it as a template to be used to configure other similar devices. The use of template eases the task of configuring devices and reduces the risks of configuration errors. Cooper Power Systems' technical support group can provide you with predefined templates for many common devices.

Is the SMP Gateway configured using a Windows point & click interface?
What kind of software tools are included with the SMP Gateway hardware?

The SMP Gateway is provided with a complete set of Windows based configuration and maintenance tools. These tools provide much more functionality than the typical web-based or command-line tools provided with most devices. The SMP Gateway Tools include the following programs:

SMP Manager manages all the SMP Gateways in an organization. It displays the state of each SMP Gateway and manages all the configuration files. SMP Manager is also used as a dashboard to get access to the other SMP tools.
SMP Config displays and edits the SMP Gateway configuration. It provides a structured view of all the master and slave protocols configured in the gateway, the communications links, the automation functions and the event file retrieval. It performs extensive data validation to minimize configuration errors.
61850 Config is used to configure UCA 2.0 and IEC 61850 protocols.
SMP Log is used to browse and manage the log files maintained by the SMP Gateway.
SMP Stats is used to browse and manage a rich set of communication and performance statistics dynamically maintained by the SMP Gateway.
SMP Trace is used to display all the real-time data exchanges in the SMP Gateway, for all communication ports, protocol components and internal real-time database. SMP Trace provides the functionality of a real-time communication and protocol analyzer.
SMP Connect is used to establish a passthru connection with any IED connected to the SMP Gateway for remote configuration and maintenance using the IED vendor’s tools.
The SMP Gateway's internal web server is provided as a convenient configuration and maintenance tool. It provides immediate access to the real-time value of all data points, as well as the internal statistics and log files.

Can the configuration be performed remotely?

All the SMP Gateway Tools are Windows based and can be used to manage SMP Gateways connected to a local network, through a corporate WAN, or using a dialup RAS network connection.

Is there a way to import a configuration from another centralized system?

The SMP Config tool can import points lists saved as CSV comma separated files. You can easily export the configuration settings from an external system, modify the contents to be compatible with Cooper Power Systems' CSV format – manually or with macros – and import the result in SMP Config. If required, our support department can assist you with this task, or can develop a simple utility program to perform the task automatically.

What are the remote diagnostics capabilities of the SMP Gateway?

The SMP Gateway stores a large number of system statistics that are remotely viewable using the SMP Stats tool. These statistics, along with the SMP Trace real-time traces, allow for quick diagnostics of any field problem.

For more elaborate diagnostics, the optional SMP Gateway diagnostic kits provide all cables and accessories necessary to reproduce production line diagnostics and verify that all components of the SMP Gateway hardware is functioning correctly. Note that SMP Gateway diagnostics require manual intervention and cannot be performed remotely.

Redundancy

Can the SMP Gateway operate redundantly?
Do you support redundant LANs?
Do you support redundant SCADA?
Do you support redundant connection to IEDs/RTUs?

The SMP Gateway is the only substation gateway that provides a completely integrated approach to system redundancy:

Failover clustering ensures that a standby SMP Gateway will automatically replace an active SMP Gateway in case of hardware, software or network failure.
Hot standby keeps the active and standby SMP Gateways synchronized in order to reduce failover delay.
Redundant master and slave connections protect against the loss of a communications link with a device or control center.
Dual Ethernet ports provide full LAN redundancy.
Redundant device support for dual protection schemes using the "best-of" automation function.

Note: The SMP 4 cannot be clustered and provides a single Ethernet interface.

Can the SMP Gateway operate in Hot-Stanby mode?

Two SMP Gateway can be clustered to provide hot standby redundancy. IEDs are connected to both SMP Gateway through serial or Ethernet links. Both SMP Gateway are kept synchronized by continuous data exchanges using dual communication links.

How does redundancy work?

Redundancy is a complex function that involves many different aspects, both hardware and software. In a redundant configuration, two identical SMP Gateways are grouped to form a redundant cluster. IEDs are connected to both SMP Gateway through serial or Ethernet links.

One SMP Gateway is active, the other SMP Gateway is standby
Serial ports on the active SMP Gateway are active, while those on the standby SMP Gateway are left floating
Control centers connect through a single IP address representing the active SMP Gateway
Both SMP Gateway continuously exchange information through dedicated redundant communication links. If the standby SMP Gateway detects that the active SMP Gateway has failed, it automatically takes over.
After a failover, the new active SMP Gateway polls all connected devices to initialize its internal database.
To provide faster failover, the SMP Gateways can be set up to provide "hot" redundancy. In this case, both SMP Gateways continuously exchange data in order to keep their internal databases synchronized.

With SMP Gateway hot standby, failover is typically performed in a few seconds, even with very large configurations.

Please contact our support group for more information on the protocols supported in hot standby mode.

How long does it takes for a redundant pair of SMP Gateway to perform the switch over?

Failover time depends on the number of connected devices and data points. After failover, the new active SMP Gateway must perform an integrity scan of all connected devices to update its internal database. With hot standby, it typically takes less than two seconds for the complete switchover to occur.

Passthrough connections

Does the SMP Gateway offer transparent connection capability?
Is it possible to use the native IED vendor software to establish remote maintenance access of the substation IEDs?

The SMP Gateway supports passthru – or transparent mode – connections that allow remote users to establish a connection between a device connected to the SMP Gateway and a program running on a remote PC. The SMP Connect tool forwards all data exchanged between the vendor application running on the PC and the device connected to the SMP Gateway, using any combination of WAN’s, LAN’s and modem connections. The SMP Gateway passthru function provides the following features:

Access to an unlimited number of remote devices.
Automatically suspend real-time data acquisition and share a single communication port between maintenance and acquisition functions, when supported by IED.
Remote communication tracing capabilities.
Automatic timeout to resume data acquisition after a specified unused period.

Automation functions and Soft PLC

What kind of automation software does the SMP Gateway support?

All SMP Gateway models, except the SMP 4, support an optional IEC-61131 Soft PLC engine. This feature allows the development of complex real-time automation scripts. The SMP Gateway also offers a rich set of substation automation functions. These functions perform specific actions such as the managing control operation, selecting the data point with the best quality, logical operations on binary inputs, latching of binary input changes, and so on.

What are the Soft PLC functionalities?

Using the CoDeSys IEC-61131 Soft PLC workbench you can easily create automation scripts for the SMP Gateway's Soft PLC engine using any of the standard automation languages – IL, ST, FBD, CFC, LD, and SFC. Soft PLC scripts can read and write data points in the SMP Gateway's internal real-time database in order to implement sophisticated control functions. You can also create new logical data points to store the results of real-time calculations, and send these results to any connected device or control center.

What is the difference between the Automation functions and the Soft PLC?

The SMP Gateway Automation Functions provide an easy way to directly implement a number of functions specific to the energy field. For instance, functions such as inhibiting a group of points, forcing points, or controlling a group of points, can be set up directly with the SMP Config tool, without any programming.

On the other hand, the Soft PLC scripts are more flexible – you can program any required function– but they require programming skills and are not as convenient when a large number of data points must be managed.

Security

Is the SMP Gateway NERC 1300 ready?

NERC 1300, now called CIP-002-1 to CIP-009-1, is a draft standard that should receive final approval by October 2005. The actual NERC implementation plan specifies that utilities will be required to have auditable compliance to all requirements by the second quarter of 2009. First compliance steps will need to be undertaken no later than the second quarter of 2006. Cooper Power Systems is committed to have a fully NERC compliant solution by October 2005 when the standard will be approved. Cooper Power Systems' solution is based on the use of the following technologies:

Built-in firewall – all TCP/IP ports are blocked, except those required for control center communications and SMP Gateway status monitoring
Built-in VPN – all communications between the SMP Gateway and the SMP Gateway Tools, including the passthru communications mode, use an encrypted VPN tunnel
Modem connection management – modem access can be enabled or disabled by the control center Passthrough management – access to devices can be enabled or disabled by the control center
Authentication – users can be authenticated locally, by the SMP Gateway, or eventually by a corporate authentication server such as Microsoft Active Directory, providing central account management and 2 factor authentication
Account management – strong passwords, individual user accounts, user groups, and detailed group permissions protect critical system functions from unauthorized access
Access management – all access attempts are logged, and accounts are locked out in the event of multiple failed attempts
Auditing – SMP logs can be retrieved remotely for auditing
Integrity checking – all SMP system components are signed and continuously monitored to ensure system integrity

Is the Web Server secure? How do you manage security?

The SMP Gateway's internal web server is provided as a convenient configuration and maintenance tool. It provides immediate access to the real-time value of all data points, as well as the internal statistics and log files. The following measures ensure that it can be used in a completely secure fashion:

The web server provides read-only access to the SMP Gateway data. No control operations can be performed, no configuration settings can be changed.
Access is limited to authorized users, after entering a valid password.
In the next software release, it will be possible to access the web server through a VPN tunnel.

Trademarks | Questions? Comments. Click here