Burmeister & Wain Scandinavian Contractor A/SBurmeister & Wain Scandinavian Contractor A/S

Antivirus & Remote Support

for DCS Systems

Your Global Energy Partner

”In safe hands with BWSC Generation Services”

BWSC Generation Services provides a variety of post construction

services and tailored solutions to diesel and biomass power plants:

- Operation & Maintenance Agreement

- Technical Support Agreement

- Upgrade and Rehabilitation of Power Plant Systems

- Technical Services

- Training

- Spare Parts.

BWSC´s extensive experience and in-house expertise within Engi-

neering, Procurement, Construction, Operation, Maintenance and

Servicing of power plants is your guarantee for optimisation of the

plant performance and maximum Return On Investment (ROI).

BWSC’s long term O&M and Service contracts accumulate as per

2013 to approximately 2,065 MW at 2-stroke and 4-stroke diesel

power stations and biomass plants world-wide.

BWSC is a subsidiary company of Mitsui Engineering & Shipbuild-

ing Co. Ltd. (MES), the senior licensee of MAN B&W 2-stroke diesel

engines.

BWSC has demonstrated stong financial performance and has been

rated AAA by Dun & Bradstreet over a period of years. In 2013

BWSC’s annual turnover was 203 million EUR.

In addition, BWSC has established a number of local companies to

undertake the Operation and Maintenance (O&M) of diesel power

plants producing electricity for the national power utilities in the

respective countries.

Specific project companies have also been established in a number

of countries to support ongoing projects with regard to local con-

struction, procurement, and legal requirements.

Burmeister & Wain Scandinavian Contractor A/SGydevang 35, P.O. Box 235, DK-3450 Allerød, Denmark

Phone: +45 48 14 00 22, Fax: +45 48 14 01 50bwsc@bwsc.dk, www.bwsc.com

I N S A F E H A N D S W I T H B W S C G E N E R A T I O N S E R V I C E S

A N T I V I R U S & R E M O T E S U P P O R T F O R D C S S Y S T E M S

BWSC provides installation of McAfee antivirus in DCS environments.

The installation consists of antivirus software and solutions for clients

scanning and blocking out malware for all servers and workstations in

the Distributed Control System.

BWSC uses two different setups and the recommended solution de-

pends on the number of machines that need protection:

1. McAfee Endpoint Protection Suite (ESP) with onsite central

management server, is recommended when 5 or more machines need

protection.

2. McAfee SaaS Endpoint Protection Suite (TSB) with hosted

management console online through McAfee Security Center, is

recommended on plants with less than 5 machines.

Maximum defense against malwareSafeguard your systems and files from viruses, spyware, worms,

Trojans, and other security risks. It detects and cleans malware, and

allows you to easily configure policies to manage quarantined items.

Proactive protection from attacksReal-time scanning ensures all your systems, including remote locati-

ons, are protected from current and emerging threats. VirusScan En-

terprise also guards against buffer-overflow exploits that target vulne-

rabilities in Microsoft applications.

Low impact on performanceBWSC will setup policies according to recommendations from DCS

vendor to secure fast on-demand and on-access scanning with mini-

mum impact on performance.

System requirementsBWSC remote connection to DCS with the Secomea SiteManager is a

requirement to receive antivirus updates.

D E S C R I P T I O N F E A T U R E S

Antivirus for DCS systems

BWSC uses a proven standard solution from Secomea to provide re-

mote access to DCS equipment worldwide for assistance and trouble-

shooting. The solution is based on a “SiteManager” hardware box,

which must be installed in the central control room of the Power Sta-

tion. The customer only needs to provide internet access to the box and

the electricity

supply, since the “Sitemanager” will be configured by BWSC as a “plug

and play” unit before dispatch to the customer.

Working principleOn PCs that need to access the plant, a LinkManager client together

with the access certificate is installed. Using the LinkManager, remote

operators can access and browse in a directory on the specific device

that needs to be remote controlled. When connected, it makes the re-

mote device appear to the operator as if the Windows PC was con-

nected directly to the device. With the LinkManager, any remote device

is just a few mouse clicks away.

Optional customer remote accessIt is possible to install the LinkManager client on other computers, en-

abling the customer to use the same connection to access the Distri-

buted Control System remotely.

Remote access• Both BWSC personnel and the customer can use the setup for

remote access.

• Handles multiple connections simultaneously.

State-of-art security• Maximum security with built-in firewall and strong AES/SSL

encryption.

• Two-factor user authentication with x.509 certificates and

password.

• End-to-end audit log and control.

Easy configuration• Firewall friendly communication simplifies set-up, and eliminates

involvement of local IT departments.

• Co-exists with existing customer network - no requirement for

public or fixed IP address.

• Optional redundant Uplink port for fail-over support. Could be a

USB or Integrated 3G/GPRS modem.

Remote assistance to DCS systemsD E S C R I P T I O N F U N C T I O N A L O V E R V I E W

Central management• Flexible device access management. Just add users by

providing an e-mail address. The user will then receive an

e-mail with certificate and link to install remote access software.

• Renew certificates or revoking access of old-employees is very

easy.

• E-mail alert for device and user status.

Web proxy server service• Can provide a secure connection for antivirus updates to all the

machines on the control network.

• Web traffic (http/https) is supported. Server placed in Europe, this

will be where the Internet rules are applied.

Mail relay server service• Can relay email further to a SMTP server.

Low tech handling of access• Input port to allow the uplink internet connection. I.e. no need to

remove internet patch cable - just turn a switch

• Relay output port that triggers when a remote connection

becomes active, i.e. when someone is remote connected to the

site. Can be used to generate an alarm/event in the DCS or turn

on a warning lamp.

Selected references

101 MW, Dhekelia Power Station, Cyprus

87 MW, Erbil, Iraq

55 MW, Pacora Power Plant, Panama

52 MW, West Sunrise Power Station, Grand Bahamas

30 MW, Fort Victoria Power Station, Mauritius

A N T I V I R U S & R E M O T E S U P P O R T F O R D C S S Y S T E M S