Moxa EDF-G1002-BP Securemodule IPS/IDS/DPI Inline 2-port Ethernet Gigabit -10 to +60°C CE FCC NEMA TS2 EN 50121-4 DNV Atex Zone 2
- EAN no.: 5703431549944
- LM no.: 7886335277
Must login for adding to cart
Description
Type no: 54994
Promotion code: 80080211725
UNSPSC (v. 19.0501): 43222600
HS Code: 85176200
How do we protect vulnerable machines in the OT world, e.g. XP, Windows 7 or PLCs?
The best thing would of course be to completely cut it off from the outside world, no Team viewer access, no USB keys and the like.
But this is only possible in a few cases, so we must instead try to protect ourselves as best we can.
1. Ensure that the vulnerable machine cannot be infected.
2. That, if infected, it cannot infect the rest of the network.
How can the EDF-G1002-BP protect?
This model has several functions that protect vulnerable machines and the surrounding devices in the network. The EDF-G1002-BP is a firewall, but it is transparent, which means that you can insert it into a running installation without having to change anything.
1. The protection has two basic functions, warn or block. In some cases, it is inappropriate to simply interrupt a production, in this case a warning is better than nothing.
2. We can advantageously limit access to only a few protocols, this prevents an infection. It is even possible to go all the way down to the protocol level, so that the vulnerable machine can only read and not write. In this way, an infected machine cannot cause accidents in production.
3. In addition to what is described above, you can also subscribe to security packages. Then, in a similar way to the virus scanner on your computer, it will be able to detect malicious hardware, either to or from the vulnerable machine. And again, either warn or block.
4. These security packages can either be downloaded and installed manually or you can manage everything automatically from a local server.
The best thing would of course be to completely cut it off from the outside world, no Team viewer access, no USB keys and the like.
But this is only possible in a few cases, so we must instead try to protect ourselves as best we can.
1. Ensure that the vulnerable machine cannot be infected.
2. That, if infected, it cannot infect the rest of the network.
How can the EDF-G1002-BP protect?
This model has several functions that protect vulnerable machines and the surrounding devices in the network. The EDF-G1002-BP is a firewall, but it is transparent, which means that you can insert it into a running installation without having to change anything.
1. The protection has two basic functions, warn or block. In some cases, it is inappropriate to simply interrupt a production, in this case a warning is better than nothing.
2. We can advantageously limit access to only a few protocols, this prevents an infection. It is even possible to go all the way down to the protocol level, so that the vulnerable machine can only read and not write. In this way, an infected machine cannot cause accidents in production.
3. In addition to what is described above, you can also subscribe to security packages. Then, in a similar way to the virus scanner on your computer, it will be able to detect malicious hardware, either to or from the vulnerable machine. And again, either warn or block.
4. These security packages can either be downloaded and installed manually or you can manage everything automatically from a local server.