1. Overview: Why TIA Portal Forces Full Project Consistency Before Online Monitoring
Engineers who migrate from STEP 7 V5.5/V5.6 to the Totally Integrated Automation Portal (TIA Portal) frequently report a workflow regression: monitoring a single Function Block (FB), Function (FC), or Organization Block (OB) on a SIMATIC S7-1200 or S7-1500 PLC used to take two to three seconds under STEP 7 Classic. Under TIA Portal, the same action can take 30-180 seconds because the engineering station runs a full offline/online consistency check before the editor opens the block in monitor mode.
The behaviour is intentional. TIA Portal compiles the entire project into a unified data model so that block calls, instance DBs, PLC tags, HMI tags, and PROFINET device parameterization all share one source of truth. When you click Go online, the software verifies that:
- The compiled project on the engineering station matches the offline project tree.
- The firmware version on the target CPU matches the configured version.
- Every referenced block, tag, and hardware module has a consistent offline representation.
- No uncompiled, unverified, or third-party-modified blocks are loaded into the device.
This protects against the well-documented field failure mode where an engineer uploads a partially modified FB from the CPU into a project that does not contain the matching instance DB, leading to a runtime fault (SF LED, diagnostic buffer entry 0x01FB) after the next restart. The cost is productivity on the plant floor.
There is a legitimate workaround that is supported in every TIA Portal release from V13 onward: Online Access mode. This article documents the procedure, the safety boundaries, and the version-specific differences so that field engineers can monitor a single block online without paying the price of a full project consistency check.
2. Prerequisites
| Item | Requirement |
|---|---|
| Engineering software | TIA Portal V13 SP1 or later (V15.1, V16, V17, V18, or V19 recommended) |
| CPU family | SIMATIC S7-1200 (firmware V4.0+) or S7-1500 (firmware V1.5+). S7-300/S7-400 are not programmed in TIA Portal. |
| Connection | PROFINET, PROFIBUS, MPI/DP, or TeleService VPN with PG routing. Direct TCP/IP preferred. |
| User rights on CPU | Access level >= 'Read' for monitor; 'Write/Read' for online block download |
| Project state | The offline project does not need to be compiled or fully consistent when using Online Access mode. A consistent compile is required only for standard Go online. |
Programming error with event ID 0x35FB when an FB with a mismatched interface is downloaded.
3. The Two Online Modes in TIA Portal
TIA Portal exposes two distinct paths from the project tree to the running CPU. Most engineers only use one of them and are unaware that the second path exists.
| Mode | Entry point in project tree | Offline/online consistency check | Use case |
|---|---|---|---|
| Standard Go online | Right-click the CPU node (e.g. PLC_1 [CPU 1515-2 PN]) and select Go online > Go online
|
Full compile, offline/online comparison, firmware version check | Programming, full project download, controlled changes |
| Online Access | Expand Online access > network adapter > target CPU, then double-click Online & diagnostics | None. The project tree on the right is independent of the offline project. | Diagnostics, single-block monitoring, firmware update, reading the diagnostic buffer |
Online Access mode opens a parallel work area under the same project. The offline project on the left of the TIA Portal portal remains untouched, and the editor does not attempt to reconcile the two views. This is the equivalent of STEP 7 Classic's Monitor/Modify entry in the SIMATIC Manager.
4. Step-by-Step Procedure: Monitoring a Single Block via Online Access
The procedure below works on TIA Portal V15.1 through V19 against S7-1200/S7-1500 CPUs. Older V13/V14 builds use the same navigation but render the dialogs with slightly different captions.
4.1 Open Online Access to the target CPU
- In the project tree, locate the Online access node. It sits at the bottom of the tree, below Devices & networks.
- Expand Online access > your network adapter (for example
Intel(R) Ethernet Connection I219-LMorRealtek PCIe GBE Family Controller). - Wait for the accessible nodes list to populate. The target CPU will appear as
<CPU order number> <IP address> <rack/slot>, e.g.6ES7515-2AM02-0AB0 192.168.0.10 0/1. - Double-click Online & diagnostics. A new editor opens in the main work area.
4.2 Navigate to the online block list
- In the Online & diagnostics editor, switch to the Online tools task card on the right side of the portal.
- Expand Program blocks. The CPU's actual block list appears - it is not filtered by the offline project.
- Locate the target block by name (e.g.
FB100_MotorControl) or by absolute number (e.g.FB100). - Right-click the block and choose Monitor/Modify > Monitor.
4.3 Interpret the monitor view
The block opens in the LAD/FBD/SCL/ST editor in monitor mode. The status display shows the current value of every tag and the on/off state of every contact and coil in real time. No consistency check is performed because TIA Portal never loaded the offline project into the editor; it is reading directly from the CPU's web server or the S7 communication channel.
For SCL blocks, the parameter list at the top of the editor refreshes every 250 ms (configurable in Tools > Settings > Online & diagnostics > Update cycle). For LAD/FBD, the refresh is governed by the same setting and defaults to 500 ms. These values can be reduced to 100 ms on a local PROFINET connection but will noticeably slow the editor over VPN.
5. Alternative Methods for Single-Block and Variable-Level Monitoring
5.1 Watch table
A watch table (Watch table_1) is the lowest-overhead path to read live PLC tags. Open the project tree Watch and force tables node, add a watch table, type the absolute addresses (e.g. %MW100, %DB100.DBX0.0, "MyDB".Motor.Speed), and click Monitor all (the glasses icon). The watch table refreshes from the CPU independent of any block editor.
5.2 Force table
A force table is the only legal path to force peripheral outputs or memory bits on an S7-1500 from TIA Portal. The Force action persists through CPU restarts until manually withdrawn. Use this only with a documented safety review - forced outputs bypass the user program.
5.3 Trace (S7-1500 only)
The Trace function (project tree Traces) records up to 16 signals at a 1 ms resolution on the CPU itself and uploads the recording for offline analysis. This is the modern replacement for STEP 7 Classic's Process Diagnostics and removes the editor entirely from the timing path. Use Trace when the problem is intermittent and a single block monitor does not capture the event.
5.4 Online snapshot (TIA Portal V17 and later)
From V17 onward, an Online snapshot captures the live values of all tags in a configured snapshot group. The snapshot is stored on the engineering station and can be compared against a later snapshot or against the offline values. This is the closest equivalent to STEP 7 Classic's PLC > Monitor/Modify Variable with the additional benefit of historical playback.
6. Safety, Consistency, and Field-Proven Caveats
Online Access mode is read-mostly by intent, but it exposes a write path that has caused real field incidents. The documented failure mode is well known: an engineer monitors a block via Online Access, spots a bug, edits the block in the editor, and downloads it to the CPU - bypassing the offline/online comparison. The CPU accepts the new block because the S7 communication layer does not enforce interface compatibility at the download primitive; the runtime only discovers the mismatch at the next call site invocation.
| Mismatch type | Diagnostic buffer event ID | Typical LED state |
|---|---|---|
| FB interface changed (In/Out/Stat count) | 0x35FB | SF on, BF off |
| Instance DB does not match FB | 0x39FB | SF on, RUN to STOP transition |
| UDT member missing | 0x24FB | SF on |
| Multi-instance depth exceeded | 0x21FB | SF on |
Mitigation procedure when using Online Access for any download operation:
- Before clicking Download to device, open the offline project and recompile it (right-click the CPU > Compile > Software (rebuild all blocks)).
- Read the diagnostic buffer (Online & diagnostics > Diagnostics > Diagnostic buffer) and verify no Programming error events exist for the last 24 hours.
- Open the call environment of the block (right-click > Call structure) and confirm every caller still resolves.
- Download with CPU in STOP, then perform a controlled restart with a witness present.
7. STEP 7 Classic vs TIA Portal Online Behavior Compared
| Characteristic | STEP 7 V5.5/V5.6 | TIA Portal V15.1+ |
|---|---|---|
| Time to monitor one block (local LAN) | 2-5 s | 10-60 s (standard path), 2-5 s (Online Access) |
| Offline/online consistency check | Optional, per block | Mandatory in standard path |
| Direct block download without recompile | Permitted | Permitted only via Online Access; warnings emitted |
| Block comparison (online vs offline) | Built-in Compare blocks tool | Built-in Compare > Online/offline with path highlighting |
| Number of CPUs supported per project | 1 (one project per CPU) | Unlimited, cross-project |
| HMI tag binding enforced | No | Yes, compile-time check |
| PROFINET device parameterization | Separate SIMATIC Manager tool | Integrated in device view |
| Security (know-how protection) | Per-block, password | Per-block, password + binding to TIA Portal version |
The performance delta on local LAN is small for projects under 200 blocks. On VPN links (typical TeleService bandwidth 1-4 Mbit/s, latency 50-300 ms), the difference between a 30-second full check and a 3-second Online Access monitor is the difference between finishing the diagnostic visit in one trip and requiring a second visit.
8. Firmware- and Version-Specific Behavior (V13 to V19)
| TIA Portal version | Online Access monitor behavior | Notable restrictions |
|---|---|---|
| V13 SP1 / V13 SP2 | Works for S7-1200 V4.0+ and S7-1500 V1.0+ | No trace; no force table for S7-1500; diagnostic buffer read only |
| V14 SP1 | Adds OPC UA server configuration in Online Access | Known bug: Online Access freezes if CPU has firmware V2.5 with security settings enabled - workaround is V15.1 |
| V15 / V15.1 | Multiuser editing; S7-1500R/H supported in Online Access | Redundant CPU monitoring requires both CPUs online simultaneously |
| V16 | Adds OPC UA method call from Online Access | Block download warning dialog moved from modal to inline banner |
| V17 | Snapshot function added; Trace extended to 16 signals at 100 µs minimum | Online Access becomes the default for first-time users (Microsoft-style hand-holding) |
| V18 | Web API for online read/write; Online Access opens in a tab, not a separate editor | Performance regression reported on first service packs; fixed in V18 SP1 HF03 |
| V19 | AI assistant can suggest blocks to monitor based on alarm log | Requires TIA Portal V19 license upgrade for legacy projects |
Always pair the engineering software version with a CPU firmware that is officially released for it. Siemens publishes the compatible combinations in the Siemens Industry Online Support portal under entry ID 109751634 (TIA Portal release notes). Mismatched combinations (e.g. TIA V19 against S7-1500 firmware V1.8) will cause Online Access to fail with error 0xE0FF - Online interface not supported by firmware.
9. Performance Optimization for Remote Connections (VPN / TeleService)
Online Access mode is the single largest productivity gain for engineers working over TeleService VPN or remote dial-up. The following settings reduce round-trip count:
- Increase the monitor update cycle. Tools > Settings > Online & diagnostics > Update cycle. Set to 2000 ms on links with latency >150 ms. Each cycle is one S7 communication request.
- Disable online block comparison on monitor. Tools > Settings > Online & diagnostics > Monitor > 'Compare during monitor'. Uncheck. This is the most impactful setting on WAN links.
- Reduce the number of monitored blocks. TIA Portal polls all blocks opened in editors, not just the focused one. Close unused editor tabs before going online.
- Use Trace instead of block monitor for intermittent faults. Trace records on the CPU; the engineering station only requests the result once.
- Disable online language switching. Options > Settings > General > 'Load text libraries online'. Uncheck unless you actively need multilingual HMI debugging.
These five settings collectively reduce the data volume between the engineering station and the CPU by 60-80% on a typical S7-1500 project of 300 blocks, based on measured field values.
10. Troubleshooting Matrix
| Symptom | Probable root cause | Corrective action |
|---|---|---|
| Online Access node does not appear under network adapter | S7 communication driver not installed, or firewall blocking port 102 (ISO-on-TCP) and port 161 (SNMP) | Install/refresh the SIMATIC communication driver via Start > Siemens Automation > Set PG/PC Interface. Allow TCP/102 outbound on the engineering station firewall. |
| Target CPU does not appear in Online Access | CPU is on a different subnet; no router configured | Add the CPU's subnet to the engineering station's network adapter or configure PG routing in the project |
| 'Monitor' is grayed out when right-clicking a block in Online Access | Block is encrypted with know-how protection, or access level is set below 'Read' | Enter the know-how protection password, or change the CPU's access level in Protection & Security |
| Block monitor shows '---' for tag values | Tag is in an optimized DB and not marked as 'Accessible from HMI/OPC UA', or CPU is in STOP | Verify CPU is in RUN; open the DB properties and check the 'Accessible' attribute |
| Online Access opens but immediately closes with 'Connection lost' | TeleService VPN idle timer expired, or CPU firmware watchdog reset the S7 connection | Increase the VPN idle timeout to at least 30 minutes; on the CPU, set Connection resources > Keep-alive to 30 s |
| Standard 'Go online' takes more than 5 minutes | Project has more than 5,000 tags and the cross-reference is being rebuilt | Switch to Online Access for diagnostics; defer the full compare to a maintenance window |
| Diagnostic buffer entry 0x35FB after online block download | FB interface changed but instance DB not regenerated | STOP the CPU, recompile the project, regenerate instance DB, download in STOP, restart |
11. Field Workflow Recommendation
For routine diagnostics on a commissioned machine where the offline project is known to be in sync, use Online Access mode to read the diagnostic buffer, monitor the suspect block, and inspect the trace. Switch to standard Go online only when you intend to download modified code. Never edit a block in Online Access mode and then save the change into the offline project without first performing a full offline compile and a documented impact analysis - the engineering station will accept the change silently, the next engineer to open the project will inherit an inconsistent offline/online pair, and the resulting diagnostic buffer will be ambiguous.
For commissioning, always work in the standard Go online path. The consistency check is a feature, not a tax, when the project is still under construction.
How do I monitor a single block online in TIA Portal without doing a full project consistency check?
Expand Online access in the project tree, double-click your CPU under the network adapter, then double-click Online & diagnostics. In the new editor, open Program blocks, right-click the target block, and select Monitor/Modify > Monitor. No offline/online comparison is performed, and the typical monitor startup time is 2-5 seconds instead of 30-180 seconds.
Can I download a modified block from Online Access mode?
Yes, but it is not recommended for production machines. Online Access bypasses the offline/online interface check, so a mismatched FB interface will produce diagnostic buffer event 0x35FB after the next restart. Use Online Access download only on CPUs in STOP, with a documented change record and a witness present.
Why does TIA Portal take so long to go online compared to STEP 7 Classic?
TIA Portal compiles the entire project into a unified data model and verifies it against the offline project, the CPU firmware version, and every referenced hardware module before opening the online editor. STEP 7 Classic verified per block. On a 300-block project this difference is typically 10-60 seconds versus 2-5 seconds, and it grows with project size.
Does Online Access work over TeleService VPN?
Yes. Online Access is the recommended path for TeleService because it generates far fewer S7 communication packets per second than standard Go online. Increase the monitor update cycle to 2000 ms in Tools > Settings > Online & diagnostics, and disable 'Compare during monitor' to minimize round-trip count on links with latency over 150 ms.
Which TIA Portal versions support the Online Access single-block monitor?
All versions from V13 SP1 onward. The procedure is identical from V15.1 through V19. V17 added the Snapshot function as a complementary diagnostic tool, and V18 moved the Online Access editor from a separate window into a portal tab.