Post on 28-May-2020
Burmeister & Wain Scandinavian Contractor A/SBurmeister & Wain Scandinavian Contractor A/S
Antivirus & Remote Support
for DCS Systems
Your Global Energy Partner
”In safe hands with BWSC Generation Services”
BWSC Generation Services provides a variety of post construction
services and tailored solutions to diesel and biomass power plants:
- Operation & Maintenance Agreement
- Technical Support Agreement
- Upgrade and Rehabilitation of Power Plant Systems
- Technical Services
- Training
- Spare Parts.
BWSC´s extensive experience and in-house expertise within Engi-
neering, Procurement, Construction, Operation, Maintenance and
Servicing of power plants is your guarantee for optimisation of the
plant performance and maximum Return On Investment (ROI).
BWSC’s long term O&M and Service contracts accumulate as per
2013 to approximately 2,065 MW at 2-stroke and 4-stroke diesel
power stations and biomass plants world-wide.
BWSC is a subsidiary company of Mitsui Engineering & Shipbuild-
ing Co. Ltd. (MES), the senior licensee of MAN B&W 2-stroke diesel
engines.
BWSC has demonstrated stong financial performance and has been
rated AAA by Dun & Bradstreet over a period of years. In 2013
BWSC’s annual turnover was 203 million EUR.
In addition, BWSC has established a number of local companies to
undertake the Operation and Maintenance (O&M) of diesel power
plants producing electricity for the national power utilities in the
respective countries.
Specific project companies have also been established in a number
of countries to support ongoing projects with regard to local con-
struction, procurement, and legal requirements.
Burmeister & Wain Scandinavian Contractor A/SGydevang 35, P.O. Box 235, DK-3450 Allerød, Denmark
Phone: +45 48 14 00 22, Fax: +45 48 14 01 50bwsc@bwsc.dk, www.bwsc.com
I N S A F E H A N D S W I T H B W S C G E N E R A T I O N S E R V I C E S
A N T I V I R U S & R E M O T E S U P P O R T F O R D C S S Y S T E M S
BWSC provides installation of McAfee antivirus in DCS environments.
The installation consists of antivirus software and solutions for clients
scanning and blocking out malware for all servers and workstations in
the Distributed Control System.
BWSC uses two different setups and the recommended solution de-
pends on the number of machines that need protection:
1. McAfee Endpoint Protection Suite (ESP) with onsite central
management server, is recommended when 5 or more machines need
protection.
2. McAfee SaaS Endpoint Protection Suite (TSB) with hosted
management console online through McAfee Security Center, is
recommended on plants with less than 5 machines.
Maximum defense against malwareSafeguard your systems and files from viruses, spyware, worms,
Trojans, and other security risks. It detects and cleans malware, and
allows you to easily configure policies to manage quarantined items.
Proactive protection from attacksReal-time scanning ensures all your systems, including remote locati-
ons, are protected from current and emerging threats. VirusScan En-
terprise also guards against buffer-overflow exploits that target vulne-
rabilities in Microsoft applications.
Low impact on performanceBWSC will setup policies according to recommendations from DCS
vendor to secure fast on-demand and on-access scanning with mini-
mum impact on performance.
System requirementsBWSC remote connection to DCS with the Secomea SiteManager is a
requirement to receive antivirus updates.
D E S C R I P T I O N F E A T U R E S
Antivirus for DCS systems
BWSC uses a proven standard solution from Secomea to provide re-
mote access to DCS equipment worldwide for assistance and trouble-
shooting. The solution is based on a “SiteManager” hardware box,
which must be installed in the central control room of the Power Sta-
tion. The customer only needs to provide internet access to the box and
the electricity
supply, since the “Sitemanager” will be configured by BWSC as a “plug
and play” unit before dispatch to the customer.
Working principleOn PCs that need to access the plant, a LinkManager client together
with the access certificate is installed. Using the LinkManager, remote
operators can access and browse in a directory on the specific device
that needs to be remote controlled. When connected, it makes the re-
mote device appear to the operator as if the Windows PC was con-
nected directly to the device. With the LinkManager, any remote device
is just a few mouse clicks away.
Optional customer remote accessIt is possible to install the LinkManager client on other computers, en-
abling the customer to use the same connection to access the Distri-
buted Control System remotely.
Remote access• Both BWSC personnel and the customer can use the setup for
remote access.
• Handles multiple connections simultaneously.
State-of-art security• Maximum security with built-in firewall and strong AES/SSL
encryption.
• Two-factor user authentication with x.509 certificates and
password.
• End-to-end audit log and control.
Easy configuration• Firewall friendly communication simplifies set-up, and eliminates
involvement of local IT departments.
• Co-exists with existing customer network - no requirement for
public or fixed IP address.
• Optional redundant Uplink port for fail-over support. Could be a
USB or Integrated 3G/GPRS modem.
Remote assistance to DCS systemsD E S C R I P T I O N F U N C T I O N A L O V E R V I E W
Central management• Flexible device access management. Just add users by
providing an e-mail address. The user will then receive an
e-mail with certificate and link to install remote access software.
• Renew certificates or revoking access of old-employees is very
easy.
• E-mail alert for device and user status.
Web proxy server service• Can provide a secure connection for antivirus updates to all the
machines on the control network.
• Web traffic (http/https) is supported. Server placed in Europe, this
will be where the Internet rules are applied.
Mail relay server service• Can relay email further to a SMTP server.
Low tech handling of access• Input port to allow the uplink internet connection. I.e. no need to
remove internet patch cable - just turn a switch
• Relay output port that triggers when a remote connection
becomes active, i.e. when someone is remote connected to the
site. Can be used to generate an alarm/event in the DCS or turn
on a warning lamp.
Selected references
101 MW, Dhekelia Power Station, Cyprus
87 MW, Erbil, Iraq
55 MW, Pacora Power Plant, Panama
52 MW, West Sunrise Power Station, Grand Bahamas
30 MW, Fort Victoria Power Station, Mauritius
A N T I V I R U S & R E M O T E S U P P O R T F O R D C S S Y S T E M S