Kaspersky Industrial CyberSecurity for Networks

Settings of tags

March 22, 2024

ID 195978

The settings of tags utilized for process control are displayed in the tags table and in the details area when a tag is selected.

Depending on the columns selected for display, the tags table may show the following settings:

  • Device group – name of the group containing the device associated with the tag (contains the name of the group and the names of all its parent groups in the device group tree). In the details area, this setting is referred to as Group.
  • Device – name of the device associated with the tag.
  • Protocol – name of the protocol used to transmit the tag.
  • Tag name – defined name of the tag.
  • Protocol data type – tag data type indicating a specific name for the protocol operation (if such names are supported in the protocol, for example, for IEC 60870-5-104 and IEC 60870-5-101 protocols), or denoted by a standard data type name (for example, int32).
  • Unit of measure – unit of measurement for the process parameter represented by the tag.
  • Basic data type – data type for the value that is the primary value in the tag field structure (indicated by the standard data type name).
  • Read/Write – direction of transmission when a tag value was received (R when reading from the device, W when writing to a device, and RW for both directions).
  • Favorites – indicator of whether the tag was added to the favorites list.
  • Description – additional information about the tag.
  • Tag address – physical address of the tag in the device memory. In the details area, this setting is referred to as Index.
  • Tag ID – sequential number of the tag. A tag ID is assigned automatically. In the details area, this setting is referred to as ID.
  • Received – date and time when the tag value was last received by the application.
  • Timestamp – date and time when the tag value (received from traffic) was last modified or updated.
  • Timestamp status – current status for the date and time when the tag value was last modified or updated.
  • Data status – current status of the received tag value.
  • Originator – name of the source from which the tag value was received or the command was sent.
  • Value – tag value that is modified on the fly during operations.
  • Scalable tag – indicator of the tag scaling within the range of minimums and maximums for input and output values.
  • Input (minimum) – minimum boundary of the input value.
  • Input (maximum) – maximum boundary of the input value.
  • Output (minimum) – minimum boundary of the output value.
  • Output (maximum) – maximum boundary of the output value.
  • Structural values – list of names and values of all tag fields. List items are separated by a comma and space (for example: field1: <value1>, field2: <value2>). The names of nested fields are generated from the names of all parent fields and the name of the actual field, separated by colons (for example: parent1:parent2:field: <value>). String values must be enclosed in quotation marks.
  • Cause of transmission – reason for modification or transmission of the tag value (received from traffic).
  • Origin – information about the source of tag creation. When a tag is automatically created using the Intrusion Detection technology, the Origin parameter is set to System. If the tag is created or modified by a user, the Origin parameter is set to User.

The details area for the selected tag may also display other settings determined by the device and protocol (for example: Block number and Memory area).

The types of frames comprising application service data units (ASDU) are supported for Deep Packet Inspection on devices that interact over protocols of the IEC 60870-5-104 and IEC 60870-5-101 standards. For information on the supported ASDU types identification in these protocols, please refer to the Appendices.

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.