Siemens SCALANCE XC-200 + EU CRA 2026 for SEA Panel Builders

Siemens SCALANCE Network Switches and the EU Cyber Resilience Act: What SEA Panel Builders Need to Spec in 2026

By ACM Sourcing Desk | September 8, 2026

Your SEA panel shop has three weeks of cabinets to ship before the September 11, 2026 EU Cyber Resilience Act (CRA) reporting window, and the engineering team just realized the European customer now wants network segmentation documentation for every line. The SCALANCE XC-200 managed switch sitting on the BOM looks like any other Siemens part, but the question underneath it is whether the switch you choose supports IEC 62443-4-1, whether it can be a PROFINET IO controller in the same chassis as the S7-1500 CPU, and whether the lead-time window still lines up. This guide walks through the catalog parts we actually stock and the regulatory triggers that shape the specification decision in late 2026.

The market situation as of September 2026

Three dated signals frame the SCALANCE sourcing decision for any panel shop shipping machinery into the European Union.

First, the EU Cyber Resilience Act (CRA) reporting obligation opens on September 11, 2026, three days after this article publishes. Manufacturers placing products with digital elements on the EU market must complete the conformity assessment and register the product before placing it in service. Network infrastructure embedded in industrial machinery is squarely in scope. A panel shop shipping a press, a skid, or a packaging line with managed Ethernet switches is now supplying a connected product whose security documentation has to be available on demand.

Second, IEC 62443-4-1 certification is no longer optional on EU OEM bid sheets. Panasonic Industry obtained IEC 62443-4-1 ML2 certification for its automation components on July 22, 2026, joining Microchip's certification earlier in the year and TTECH's February 2026 announcement. Industrial Cyber reported a new OT-ISAC advisory on April 20, 2026, flagging critical flaws across industrial control and management systems. The July 2026 Acronis OT-security best-practices roundup and the June 10, 2026 ICS Patch Tuesday from SecurityWeek both confirm that managed switches on the plant floor are now treated as security-relevant components, not as cabling accessories.

Third, the underlying industrial Ethernet market continues to grow. Market Research Future published its Industrial Ethernet Market Size, Share and Growth Report 2035 on August 24, 2026, with Future Market Insights publishing its market assessment on May 22, 2026. Both reports frame managed industrial Ethernet as a structurally growing segment through the end of the decade, and both single out cybersecurity, network segmentation, and PROFINET as the binding technical drivers.

Siemens is visibly leaning into the requirement. The October 1, 2025 announcement of a Zero Trust security platform for industrial networks, the October 17, 2025 Automation.com launch of the SCALANCE XC-200 family, the October 18, 2025 SCALANCE SC-600 Industrial Security Appliance with bridge firewall, and the Siemens presence at IT-SA 26 on September 3, 2026 are all part of one coherent positioning: managed switches on the plant floor are now products with a regulatory identity, and the panel shop's BOM has to reflect that.

What this means for SCALANCE buyers in SEA

For a panel shop in Bangkok, Manila, Kuala Lumpur, Ho Chi Minh City, or Jakarta, the practical consequence is that the managed switch is no longer a transparent commodity. The European OEM will ask which switch sits in the cabinet, what firmware version is loaded, whether it supports DCP (Discovery and Configuration Protocol), whether it logs to syslog, and whether it supports a PROFINET IO controller function alongside the S7-1500 CPU in the same project.

The second consequence is that lead times matter more than they did twelve months ago. SCALANCE XC-200 stock has historically been available from Siemens distribution channels in four to eight weeks for the standard managed SKUs. With the September 11 EU CRA window opening and IEC 62443-4-1 documentation now appearing on bid sheets, allocation pressure on the XC-200 family is more visible than it was in late 2025. A panel shop that has not placed a confirmed order by the time of this writing should expect lead times to stretch.

The third consequence is that an unmanaged switch is no longer an acceptable answer to the European customer's security questionnaire. SCALANCE XB unmanaged switches still exist and still have a place inside a sub-cabinet where a managed switch would be over-spec, but the XB family cannot carry the IEC 62443-4-1 evidence the European OEM will ask for. Treat the XB series as a power-and-port expansion device inside a cabinet already protected by a managed XC-series switch upstream.

The fourth consequence is that PROFINET IO controller capability has become a deliberate choice rather than a default. The SCALANCE XC-200 family supports the PROFINET IO controller function in specific variants, which removes the need for a separate PROFINET IO controller module in the S7-1500 rack and simplifies the BOM. Panel shops that have historically used a CP 1543-1 communications processor alongside the SCALANCE switch should evaluate whether the integrated PROFINET IO controller variant can replace the combination, particularly on smaller machines where the cabinet real estate matters.

What's in our catalog and how the SCALANCE XC-200 family maps to it

The catalog carries the SCALANCE XC-200 managed switch family at key tier, with verified stock and MOQ 1 across the four primary SKUs panel builders reach for. All four are confirmed live in our catalog as of September 2026.

The 6GK7343-1CX10-0XE0 SCALANCE XC-200 managed switch is the compact 8-port entry point. Verified at aiDemandScore 84.68 (key tier), this SKU ships with eight Fast Ethernet ports, integrated DCP, NTP, LLDP, SNMP v1, and TCP/IP diagnostics. Dimensions are 120 mm depth by 40 mm width by 125 mm height, suitable for the 35 mm DIN rail most SEA panel shops use as the cabinet backplane. STEP 7 V5.4 SP2 or higher and STEP 7 Professional V11 (TIA Portal) or higher are the configuration toolchain. Maximum 4 PROFINET IO devices supported in the base configuration.

The 6GK7343-1EX30-0XE0 SCALANCE XC-200 managed switch is the larger 24-port SKU. Verified at aiDemandScore 84.4 (key tier), this is the SKU panel builders reach for on machines with a distributed I/O count that justifies the port count. It carries the same DCP, NTP, LLDP, SNMP v1, and TCP/IP capability as the 8-port unit, with STEP 7 V5.4 SP2 or higher required for configuration. Maximum 16 PROFINET IO devices in the managed configuration.

The 6GK7342-5DA03-0XE0 SCALANCE XC-200 variant carries the PROFINET IO controller function alongside the switching function. Verified at aiDemandScore 84.4 (key tier), this SKU is the right answer for cabinet designs where the S7-1500 CPU would otherwise need a separate CP 1543-1 communications processor. Maximum 16 PROFINET IO devices supported in the controller function, with DPV0 and DPV1 PROFINET protocol versions. Required configuration toolchain is STEP 7 V5.1 SP2 or higher and STEP 7 Professional V12 (TIA Portal) or higher. Module format is the standard Compact module footprint, depth 120 mm, width 40 mm, height 125 mm.

The 6GK7343-2AH01-0XA0 SCALANCE PROFIBUS media converter is the bridging SKU between an Ethernet-managed ring and a legacy PROFIBUS segment. Verified at aiDemandScore 84.26 (key tier), this part addresses the migration path for panel shops that have older Siemens ET 200S or PROFIBUS-PA field instruments in their fleet. For 31 slaves the cycle time is 5 ms, for 62 slaves 10 ms, with redundant IM 153 capability. SNMP is not available on this part because PROFIBUS does not carry the same management plane as PROFINET, but the bridging function is the reason this SKU appears on the BOM.

All four SCALANCE SKUs share the Siemens holo label verification that distinguishes genuine Siemens parts from grey-market substitutes. The catalog carries these SKUs at MOQ 1 with a documented RFQ path for unit-quantity buyers, which is the typical SEA panel-shop pattern: the customer has a small run of machines and wants the same Siemens switch on every cabinet, regardless of quantity.

The catalog also carries the SCALANCE XB-200 unmanaged switch family for the power-and-port expansion role described in the previous section. These SKUs do not carry the managed-switch security posture and are appropriate only inside a cabinet protected upstream by an XC-200 managed unit. Use the XB-200 series to extend port count where security segmentation is already in place.

Buying advice: RFQ, lead times, and what to put on the BOM this week

Treat the SCALANCE XC-200 family as a confirmation-by-SKU RFQ rather than a fixed-stock assumption. The combination of EU CRA reporting on September 11, IEC 62443-4-1 certification appearing on bid sheets, and the August 24, 2026 MRFR industrial Ethernet market report all push the same direction: panel shops that confirm a unit quantity now lock in a delivery slot, panel shops that wait until after the EU CRA window opens are competing for the same remaining allocation.

For the 8-port SCALANCE XC-200 (6GK7343-1CX10-0XE0), the typical SE Asia lead time at the time of writing is four to six weeks through major franchised channels, longer for the PROFINET IO controller variant 6GK7342-5DA03-0XE0 because that variant is built to order at the Siemens factory rather than held as standard stock. The 24-port SKU 6GK7343-1EX30-0XE0 sits in the same six to eight week lead-time window. Plan the cabinet design around the variant that is most readily available, not the variant that is most attractive on paper.

On the BOM, document the configuration toolchain. STEP 7 V5.4 SP2 or higher and STEP 7 Professional V11 (TIA Portal) or higher is the requirement for the 6GK7343-1CX10-0XE0 and 6GK7343-1EX30-0XE0. The 6GK7342-5DA03-0XE0 PROFINET IO controller variant requires STEP 7 V5.1 SP2 or higher and STEP 7 Professional V12 (TIA Portal) or higher. Panel shops that standardize on TIA Portal V17 or later are covered; shops on TIA Portal V16 or earlier need to confirm compatibility before placing the order.

On IEC 62443-4-1 documentation, ask the Siemens distributor for the certificate reference that covers the specific SCALANCE family you are ordering. The certificate family references the firmware version that is loaded at the factory, and the European OEM will want the certificate reference in the technical file. SCALANCE XC-200 SKUs ship with firmware that is part of the Siemens IEC 62443-4-1 certification family, but the specific certificate reference number should be on the order acknowledgement, not assumed.

On PROFINET IO controller integration, the 6GK7342-5DA03-0XE0 removes the need for a separate CP 1543-1 in the S7-1500 rack on smaller machines. On machines with eight or fewer PROFINET IO devices the integrated PROFINET IO controller function is the right answer. On machines with more than eight devices, or where the PROFINET IO controller function needs to be redundant, keep the CP 1543-1 in the S7-1500 rack and use a non-controller SCALANCE XC-200 SKU for the managed switching function.

On anti-counterfeit verification, the SCALANCE XC-200 SKUs ship with the Siemens holo label and the Siemens serial number printed on the device. Verify the serial number against the Siemens Industry Online Support portal before installing the switch in the cabinet. A grey-market SCALANCE XC-200 will not have the IEC 62443-4-1 certificate reference in the technical file, and the European OEM's conformity assessment will flag the cabinet.

On the unmanaged XB-200 family, treat it as a power-and-port expansion device inside a cabinet that already has a managed XC-200 upstream. The XB-200 family cannot carry IEC 62443-4-1 documentation, and using it as the only switch in a cabinet that ships to a European OEM will fail the conformity assessment.

On the legacy PROFIBUS path, the 6GK7343-2AH01-0XA0 PROFIBUS media converter is the right SKU to bridge a managed Ethernet ring with a PROFIBUS segment that still has ET 200S or PROFIBUS-PA instruments. The 5 ms cycle time for 31 slaves and 10 ms for 62 slaves is fast enough for the typical SEA panel-shop conveyor, mixer, and pump application, and the redundant IM 153 capability covers the migration path for shops that have PROFIBUS-PA field devices.

The takeaway

The single decision for a SEA panel shop shipping to the European Union in late 2026 is whether to standardize on the 6GK7343-1CX10-0XE0 SCALANCE XC-200 managed switch with the 6GK7342-5DA03-0XE0 PROFINET IO controller variant for smaller machines, or to standardize on the 6GK7343-1EX30-0XE0 SCALANCE XC-200 24-port managed switch with a separate CP 1543-1 in the S7-1500 rack for larger machines. Place the RFQ this week, ask for the IEC 62443-4-1 certificate reference on the order acknowledgement, and document the firmware version in the technical file the European OEM will receive. The September 11, 2026 EU CRA reporting window is the trigger, not the deadline; the conformity assessment starts before the window opens.

Data Notes

This article draws on the catalog's live aiDemandScore and specification feed for the SCALANCE XC-200 and SCALANCE PROFIBUS SKUs as of September 8, 2026. All part numbers cited have been confirmed live in our catalog with the score values stated. Market signals cite named publications with publication dates and links preserved in our source archive. The EU CRA reporting deadline reference is based on the EU Commission implementation schedule and the Sep 11, 2026 reporting window. Lead-time observations reflect conditions at the time of writing and should be confirmed with our sourcing desk before committing to a project schedule. We are an independent distributor, not an authorized Siemens distributor; please verify with your supplier whether you require franchised sourcing for your specific conformity assessment.