Networks & drives

OPC UA explorer that doesn't wreck a production server

Paige Nowak · Integrator

Need to browse a UA server on a running line. Last time a tech pointed UaExpert at it with the wrong security policy and the server hit 90% CPU. What settings do you use for a read-only browse, and do you still avoid doing this on shift 1?

Aisha Rahman · OT network
Read-only user, SignAndEncrypt, no subscription storm. Disable auto-subscribe on browse. Do it on a replica endpoint if they have one. Shift 1 is a no unless the line is already down. We clone the server cert into the explorer first so it doesn't renegotiate fifty times.

Checking sign-in…