Firewall appliance can be monitored by Modbus register reads. This includes firewall temperature monitoring, CPU loads, data throughput and others. Other devices can now monitor and control the firewall including PLC and SCADA.

Modbus and CIP protocol specifc packet inspection. Enforce reads, writes and specifc register actions.

When either the SCADA system or protected PLC notices a spike or change in activity they can shut the outside firewall port down for a timed interval or indefnitely by simply writing a Modbus register.

Supported by writes to a Modbus register. Up to 65,535 unique scripts can be written and activated. Possibilities can include shutting down the firewall, ports, setting alarms the possibilities are endless.

Warranty device enforce strict read-only Modbus register reads. Protects from accidental or malicious changes.

All networks in operation today require a firewall. Most networks are a series of security zones that are separated by use and need. Many of these networks rely on the perimeter zone as the main source of security. This is really not a good practice and especially when it comes to industrial control networks. These are the systems that provide for the critical services that run our modern society. Most of the systems are interconnected with corporate IT networks for simplicity and economy of scale. The problem is the IT systems have different needs and the staff may not be as concerned with the industrial networks. The SecurIT firewall provides a means for you to secure your assets and maintain and monitor the status of the firewall. You don’t need to rely on the IT systems to monitor and notify if there is a potential problem. Let your SCADA system notify of these issues.

While IT network security is a mature industry, there are few firewall appliances that are designed specically to support industrial control network needs. The SecurIT firewall is designed from the ground up to support these needs. The ability to monitor the firewall through Modbus addressing allows a SCADA system to read these values and display or alarm. What is truly unique is the ability to control the firewall through these same Modbus addresses. With the ability to write up to 65,535 scripts and activate these scripts through writing to a Modbus register the ability for an operator to protect there asset is nearly endless. The SCADA system can perform a shutdown of the outside port if the throughput suddenly changes and set an alarm to alert the operator. The SCADA system can re-enable the port after a pre-set or even escalating interval (see the live DEMO on our website). If an intruder was trying to gain access into the ICN shutting the port down would require them to start all over. You could even shut the firewall down which would great an “air gap” between the ICN and the corporate network. The firewall is very valuable in single PLC applications such as a remote station read through a radio or cellular network. In this case the PLC can monitor the state of the firewall and perform the same action to temporarily shutdown the port.

Any industrial control network operator would immediately benefit from the SecurIT firewall. From electric utilities to water and wastewater giving operators the ability to monitor their own assets without relying on another group or department. With the SecurIT firewall you can control what other departments can do with the information gained from your network. The SecurIT firewall is also a valuable tool as a “warranty” device. As a panel builder or system designer you may want to give access to your product but want to strictly enforce no write operations. With the deep packet inspection the firewall will block any writes. Once the warranty period is over the firewall can be removed, or can be left as an additional safety device that the customer always appreciates.