|
|
|
Moxa EDF-G1002-BP-T - Industrial next-gen LAN firewall with 2 10/100/1000BaseT(X) ports, 1 Ethernet-based management port by MOXA
|
|
|
|
EDF-G1002-BP-T_SUMMARY.html
- Bump-in-the-wire installation without impacting the network
- Gen3 LAN Bypass for system fault tolerance
- Industrial-grade Intrusion Prevention/Detection System (IPS/IDS)
- Examine industrial protocol data with Deep Packet Inspection (DPI) technology
- Supports secure boot for checking system integrity
- Check firewall policy misconfiguration with just one click
- Supports MXstudio for easy, visualized industrial network management
|
|
|
EDF-G1002-BP-T_DESCRIPTION.html
EDF-G1002-BP-T - is an industrial-grade LAN firewall with IPS and DPI functionality to protect mission-critical assets and network zones. These industrial firewalls support software-configurable Gen3 LAN bypass to achieve bump-in-the-wire installation and minimize the installation impact for industrial applications such as ITS, pump-and-treat systems in water stations, distributed control systems in oil and gas, and PLC/SCADA systems in factory automation. Dynamically Prevent Malicious Cyber Threat Activity With IPS/IDSThe EDF-G1002-BP Series is designed to protect mission-critical assets at the OT network edge with advanced intrusion prevention and detection systems(IPS/IDS). It analyzes network traffic in the background and enables behavior monitoring and awareness of cyber activities. These firewall devices support both a "Monitor" and "Protect" mode to facilitate different OT scenarios. "Monitor" mode gives administrators full visibility of cyberthreat activities on the network. If a threat is detected, administrators can easily switch to "Protect" mode to block and contain any malicious operations. Industrial Deep Packet Inspection for Mission-critical AssetsThe EDF-G1002-BP Series supports advanced Deep Packet Inspection(DPI)technology, providing awareness of industrial protocol data and allowing for granular command of control system traffic to critical controllers. Virtual Patching and Intelligent Threat ProtectionFrequent patching boosts protection against cyberthreats. However, patching continues to be a major challenge in OT environments because OT applications cannot afford to interrupt operations by shutting down systems to apply patches. Virtual patching technology can help complement existing patch management processes by shielding known and unknown vulnerabilities. Virtual patching acts as an agentless emergency security tool that OT administrators and operators can use to quickly address vulnerabilities on affected OT equipment. The EDF-G1002-BP Series provides advanced protection against threats with up-to-date threat information and guards your systems against undisclosed and zero-day threats. Centralized Network Security and Policy ManagementThe EDF-G1002-BP Series helps administrators and operators understand the real-time status of OT systems. When connected to Moxa's MXsecurity centralized security management platform, administrators can manage and monitor all the intrusion prevention systems from a single space. MXsecurity provides an efficient way to monitor security assets, and execute policy, firmware, configuration, and pattern updates.
EDF-G1002-BP-T.html
| Input/Output Interface |
|---|
| Alarm Contact Channels | Resistive load: 1 A @ 24 VDC | | Buttons | Reset button | | Digital Input Channels | +13 to +30 V for state 1 -30 to +3 V for state 0 Max. input current: 8 mA |
| Ethernet Interface |
|---|
| 10/100/1000BaseT(X) Ports (RJ45 connector) | 3 (2 x LAN ports, 1 x MGMT port) | | Standards | IEEE 802.3 for 10BaseT IEEE 802.3u for 100BaseT(X) IEEE 802.3ab for 1000BaseT(X) IEEE 802.3x for flow control |
| LED Interface |
|---|
| LED Indicators | PWR1, PWR2, STATE, BYPASS, USB |
| DoS and DDoS Protection |
|---|
| Technology | ARP-Flood FIN Scan ICMP Flood TCP Sessions Without SYN NMAP-ID Scan NMAP-Xmas Scan Null Scan SYN/FIN Scan SYN/RST Scan SYN-Flood Xmas Scan |
| Firewall |
|---|
| Throughput | Max. 45K packets per second/500 Mbps (based on RFC 2544) | | Filter | DDoS Ethernet protocols ICMP IP address MAC address Ports | | Intrusion Prevention System | Enabled by default. IPS pattern update functionality requires an additional license. | | Deep Packet Inspection | Modbus TCP Modbus UDP DNP3 IEC 60870-5-104 IEC 61850 MMS EtherNet/IP Omron FINS Siemens S7 Comm. Additional protocols will be supported through future firmware updates. |
| Real-time Firewall Event Log |
|---|
| Event Type | Firewall events Protocol DPI and IDS/IPS events | | Media | Syslog server Local storage SNMP Trap |
| Serial Interface |
|---|
| Console Port | RS-232 (TxD, RxD, GND), 3-pin (115200, n, 8, 1) | | Connector | USB Type-C |
| Power Parameters |
|---|
| Connection | Removable terminal block | | Operating Voltage | 9.6 to 60 VDC | | Input Voltage | 12/24/48 VDC Redundant dual inputs | | Input Current | 0.69 A (max) | | Reverse Polarity Protection | Supported |
| Physical Characteristics |
|---|
| Housing | Metal | | Dimensions | 35 x 125 x 100 mm (1, 38 x 4.92 x 3.94 in) | | Weight | 385 g (0.85 lb) | | Installation | DIN-rail mounting Wall mounting |
| Environmental Limits |
|---|
| Operating Temperature | -40 to 75C (-40 to 167F) | | Storage Temperature (package included) | -40 to 85C (-40 to 185F) | | Ambient Relative Humidity | 5 to 95% (non-condensing) |
| Standards and Certifications |
|---|
| Safety | IEC 62368-1 UL 62368-1 | | EMC | EN 55032/35 | | EMI | CISPR 32, FCC Part 15B Class A | | EMS | IEC 61000-4-2 ESD: Contact: 6 kV; Air: 8 kV IEC 61000-4-3 RS: 80 MHz to 1 GHz: 20 V/m IEC 61000-4-4 EFT: Power: 2 kV; Signal: 2 kV IEC 61000-4-5 Surge: Power: 2 kV; Signal: 2 kV IEC 61000-4-6 CS: 10 V IEC 61000-4-8 PFMF | | Railway | EN 50121-4 | | Traffic Control | NEMA TS2 | | Shock | IEC 60068-2-27 | | Freefall | IEC 60068-2-32 | | Vibration | IEC 60068-2-6 |
| MTBF |
|---|
| Time | 2, 929, 641 hrs | | Standards | Telcordia (Bellcore), GB |
|
|
|
|