Most IT firewalls today cannot protect against threats to industrial network traffic, which limits their ability to minimise security risks on the plant floor. The Allen-Bradley Stratix 5950 security appliance from Rockwell Automation incorporates new security technologies to help protect plant-floor systems.
The device uses Adaptive Security Appliance (ASA) firewall and FirePOWER technology to create a security boundary between cell/ area zones or to help protect a single machine, line or skid. This supports compliance with IEC 62443.
The device also uses deep packet inspection (DPI) technology. Developed in collaboration with Cisco, the DPI technology enables inspection of the Common Industrial Protocol (CIP) and other industrial protocols.
“Combining ASA firewall, FirePOWER and DPI technology gives IT professionals the granular visibility and control they need to protect industrial networks,” said Divya Venkataraman, Global Product Manager, Rockwell Automation. “With the Stratix 5950 appliance, users can now configure and enforce policies that help prevent potentially malicious firmware updates and program downloads. This helps enhance the integrity of plant-floor operations.”
An optional subscription license is available with the Stratix 5950 security appliance. Similar to a PC-based, anti-virus service, subscribers will receive ongoing threat and application-signature updates to help protect against the latest known security threats.
The new appliance includes four 1 Gigabit Ethernet (GbE) ports, and is available with copper and fibre or copper only, small form-factor pluggable (SFP) slot options. The industrially hardened device is IP30-rated and can withstand electrical shocks, surges and noise. It can operate in temperatures ranging from -40 to 60ºC (-40 to 140ºF).
The Stratix 5950 security appliance is the first Rockwell Automation product offering with DPI technology, which was announced in April 2016 as part of the strategic alliance between Rockwell Automation and Cisco.
