Automation firewall Siemens

Обзор



SecureGUARD FWAF200

SecureGUARD FWAF1000

The availability and security of production plants is of great importance in the process industry. Process control systems such as SIMATIC PCS 7 must therefore have comprehensive protection against unauthorized access from the Office network or from the Internet.

The products in the SecureGUARD Automation Firewall Appliance series protect the access points to the networks in the production environment (Process Control Network) and restrict data traffic to the requirements of process automation. Whatever the plant configuration and plant size, they can be used as:

  • Access point firewalls for small plants and secure remote access
  • Three-homed firewall for small to medium-sized plants with minimal perimeter network
  • Front and back firewall for maximum protection in larger plants with extensive perimeter network

An optimized control basis is created via the Industrial Wizard of the integrated SecureGUARD Appliance Management for this purpose on the basis of Microsoft''s firewall solution (Forefront Threat Management Gateway 2010).

Note:

Use of the SecureGUARD Automation Firewall Appliance series is independent of the version of the SIMATIC PCS 7 process control system on which the process control installation is based.

Дизайн



The SecureGUARD Automation Firewall Appliance series comprises two product variants which are identical from the software point of view:

Type

SecureGUARD FWAF200

SecureGUARD FWAF1000

   

Position

Entry-level version for small plants, including TMG 2010 license

QuadCore version with remote management functionality for medium-sized and large plants, including TMG 2010 license

Form factor

19”, 1 HM

19”, 1 HM

CPU

Intel Dual Core 64-bit

Intel QuadCore XEON

RAM

2 GB

4 GB

Drives

1 x SATA 24x7

2 x SATA2 RAID1

Ethernet interfaces

4 x 10/100/1000 NIC

4 x 10/100/1000 NIC

Options

IPMI option

Redundant power supply

Device features

Industrial Wizard

Industrial Wizard and Remote Management Interface



Функции



Industrial Wizard

SecureGUARD Appliance Management, Process Control Network Settings

Depending on the configuration variant, you enter all the required information regarding system and network components with the help of the SecureGUARD Appliance Management Industrial Wizard. The access directives for securing communication – both within the plant and to the outside world – are generated automatically.

Configuration versions

Online mode

Configuration created directly on site. The Industrial Wizard scans the standardized network objects and generates the corresponding firewall rules in the background.

Offline mode

Centralized creation of the configuration and saving to a data medium, e.g. a USB stick. Once the device is wired, the firewall is configured automatically on location using the USB stick.

Functional characteristics

  • Network Inspection System for automatic defense against known attacks
  • Network and application layer firewall
  • Simple configuration through wizard-supported scanning of system and network components
  • Support of all security designs:
    • Access Point Firewall
    • Three-Homed Firewall
    • Front and Back Firewall
  • Optimum integration in the plant
  • SecureGUARD Rescue System with disaster recovery strategies for minimizing downtime in the event of a fault
  • Access control between networks
  • Offline configuration for commissioning by means of external data media

Дальнейшая информация



Order and delivery address

SecureGUARD GmbH
Industriezeile 35
4020 Linz
Austria

Tel.: +43 (732) 60 14 40

E-mail: office@secureguard.at

You can find more information about the SecureGUARD Automation Firewall Appliance series on the Internet at:

http://www.secureguard.at

Information on the configuration of the Automation Firewall and expert assistance in planning, implementation and operation of customized security solutions are available on request from:

E-mail: Industrialsecurity.i@siemens.com