Firewall prevented packet sent from PROFINET device to be received by PROFINET controller in zenon Logic

Firewall prevented packet sent from PROFINET device to be received by PROFINET controller in zenon Logic

When straton (zenon logic) is started the first time, the firewall configuration dialog pops-up. By default you allow connections for private Network but not for public networks.
When using a second network card this connection is classified by default as public.
As some profinet devices use different udp ports for receiving and sending data the firewall may treat responses as requests initited by the remote side and may reject them.
It can be the case that larger packets are not rejected but smaller ones are.

In the attached screenshot from wireshark you see a situation like this:
The PROFINET device sends a "Connect response" but the zenon Logic runtime will never receive the packet because the firewall blocks it. As a result, the zenon Logic runtime will not send the subsequent "Control Request". As a further result the PROFINET device will trigger an Alarm (RTA error, RTA_ERR_CLS_PROTOCOL, Instance closed) and aborts the connection.
To allow incoming UDP packets to pass the firewall open Windows Defender Firewall -> Advanced settings -> Inbound Rules and search for entry straton Runtime (Screenshot attached) and make sure you have selected the entry (several "straton Runtime" entries possible) with the zenon version you currently use (Path in column "Program"). Then doubleclick the entry and choose radio button "Allow the connection" and press OK.
If the entry does not exist create a new one by performing a rightclick on "Inbound Rules" -> "New Rule..." and choose the following:

- Program
- This program path: Enter path of StratonRT.exe
- Allow the connection
- Choose respective domain
- Enter a name for the rule
- Finish

Statistics on rejected UDP datagrams can be retrieved using netstat -s



This is a migrated post! Originally posted on 22.06.2020 by user ChristopherK. Please be aware that information can be outdated.

    Disclaimer

    This document governs the use of our Community Forum. By registering and using the platform, you accept these conditions.

    The COPA-DATA Community Forum serves to encourage the exchange of information and experience about the zenon software between forum users respectively zenon users.

    Please mind that any published information on the Community Forum is the subjective opinion and view based on the experience and the level of knowledge of the author. COPA-DATA does not overtake any responsibility for the content and the accuracy of the shared information.

    Users of the Community Forum are encouraged to share only well-founded experiences and to point out any risks associated with the implementation of proposed solutions to problems. COPA-DATA at its absolute discretion, reserves the right to moderate the forum. In this connection COPA-DATA may remove any information containing false facts, potentially dangerous solutions, bad language or content that may insult, degrade or discriminate others. COPA-DATA may block a non-complying user from forum access if the user violated this provision.

    COPA-DATA reserves the right to change this document from time to time at own discretion.


    Ing. Punzenberger COPA-DATA GmbH
    Karolingerstraße 7b · 5020 Salzburg · Austria
    www.copadata.com