The following prerequisites must be met to successfully transfer data via the OPC DA protocol:
The required DCOM rights are assigned to OPCEnum both on the SCADA system and in Kaspersky Security Gateway.
Unified authentication is set for the computer with Kaspersky Security Gateway installed and the SCADA system: domain authentication is used, or the same user name / password are used for all computers of the work group.
To configure data transfer via the OPC DA protocol using the Kaspersky Security Gateway Console:
Open the Kaspersky Security Gateway Console
In the Kaspersky Security Gateway node select OPC DA.
In the Data transmission settings section in the results pane, click the Change link.
The Settings window opens.
Disable or enable the Enable data transmission option.
If this functionality is enabled, Kaspersky Security Gateway sends the protection status of the industrial network nodes to the SCADA system. This option is disabled by default.
Click OK.
In the Tracked data section in the results pane, click the Change link.
The Selecting tracked data window opens. The list displays tracked data added automatically after connecting to a data source, such as Kaspersky Security Center and/or Kaspersky Industrial CyberSecurity for Networks.
Select or clear check boxes next to the names of computers to enable or disable the tracking of their availability and protection status. The computer is available a protection application and the Network Agent are running on it.
If tracking is enabled, data will be transmitted to the SCADA system.
If tracking is disabled, data will not be transmitted to the SCADA system.
If there is no connectivity between the computer or Kaspersky Security Gateway and the Kaspersky Security Center Administration Server, the value of 3 (unavailable) is sent.
If required, edit or add a service tag in the Service tag column. You can use the service tag to filter data received in the SCADA system. A tag may contain numbers or letters.
Click OK.
You can configure data transfer over the OPC DA protocol using the ProtocolOPCSettings.xml configuration file in the C:\ProgramData\Kaspersky Lab\Security Gateway\Settings folder.