Reply to post:

Siemens recommends administrators lock down the server from any sort of external network access.

Errr ... doh! :-) This is a damn infra-structure power plant not an IoT light bulb in Jonny's bedroom, I would hope that's *always* the case.