About This Item
Overview
Details
IntroductionThe EDF-G1002-BP Series is an industrial-grade LAN firewall with IPS and DPI functionality to protect mission-critical assets and network zones. These industrial firewalls support software-configurable Gen3 LAN bypass to achieve bump-in-the-wire installation and minimize the installation impact for industrial applications such as ITS, pump-and-treat systems in water stations, distributed control systems in oil and gas, and PLC/SCADA systems in factory automation.
Dynamically Prevent Malicious Cyber Threat Activity With IPS/IDS
The EDF-G1002-BP Series is designed to protect mission-critical assets at the OT network edge with advanced intrusion prevention and detection systems (IPS/IDS). It analyzes network traffic in the background and enables behavior monitoring and awareness of cyber activities. These firewall devices support both a ìMonitorî and ìProtectî mode to facilitate different OT scenarios. ìMonitorî mode gives administrators full visibility of cyberthreat activities on the network. If a threat is detected, administrators can easily switch to ìProtectî mode to block and contain any malicious operations.
Industrial Deep Packet Inspection for Mission-critical Assets
The EDF-G1002-BP Series supports advanced Deep Packet Inspection (DPI) technology, providing awareness of industrial protocol data and allowing for granular command of control system traffic to critical controllers.
Virtual Patching and Intelligent Threat Protection
Frequent patching boosts protection against cyberthreats. However, patching continues to be a major challenge in OT environments because OT applications cannot afford to interrupt operations by shutting down systems to apply patches. Virtual patching technology can help complement existing patch management processes by shielding known and unknown vulnerabilities. Virtual patching acts as an agentless emergency security tool that OT administrators and operators can use to quickly address vulnerabilities on affected OT equipment. The EDF-G1002-BP Series provides advanced protection against threats with up-to-date threat information and guards your systems against undisclosed and zero-day threats.
Centralized Network Security and Policy Management
The EDF-G1002-BP Series helps administrators and operators understand the real-time status of OT systems. When connected to Moxaís MXsecurity centralized security management platform, administrators can manage and monitor all the intrusion prevention systems from a single space. MXsecurity provides an efficient way to monitor security assets, and execute policy, firmware, configuration, and pattern updates.
Documentation
Features
- Bump-in-the-wire installation without impacting the network
- Gen3 LAN Bypass for system fault tolerance
- Industrial-grade Intrusion Prevention/Detection System (IPS/IDS)
- Examine industrial protocol data with Deep Packet Inspection (DPI) technology
- Supports Secure Boot for checking system integrity
- Check firewall policy misconfiguration with just one click
- Supports MXstudio for easy, visualized industrial network management
