Introduction

The EDF-G1002-BP Series is an industrial-grade LAN firewall with IPS and DPI functionality to protect mission-critical assets and network zones. These industrial firewalls support software-configurable Gen3 LAN bypass to achieve bump-in-the-wire installation and minimize the installation impact for industrial applications such as ITS, pump-and-treat systems in water stations, distributed control systems in oil and gas, and PLC/SCADA systems in factory automation.

Dynamically Prevent Malicious Cyber Threat Activity With IPS/IDS

The EDF-G1002-BP Series is designed to protect mission-critical assets at the OT network edge with advanced intrusion prevention and detection systems (IPS/IDS). It analyzes network traffic in the background and enables behavior monitoring and awareness of cyber activities. These firewall devices support both a “Monitor” and “Protect” mode to facilitate different OT scenarios. “Monitor” mode gives administrators full visibility of cyberthreat activities on the network. If a threat is detected, administrators can easily switch to “Protect” mode to block and contain any malicious operations.

Industrial Deep Packet Inspection for Mission-critical Assets

The EDF-G1002-BP Series supports advanced Deep Packet Inspection (DPI) technology, providing awareness of industrial protocol data and allowing for granular command of control system traffic to critical controllers.

Virtual Patching and Intelligent Threat Protection

Frequent patching boosts protection against cyberthreats. However, patching continues to be a major challenge in OT environments because OT applications cannot afford to interrupt operations by shutting down systems to apply patches. Virtual patching technology can help complement existing patch management processes by shielding known and unknown vulnerabilities. Virtual patching acts as an agentless emergency security tool that OT administrators and operators can use to quickly address vulnerabilities on affected OT equipment. The EDF-G1002-BP Series provides advanced protection against threats with up-to-date threat information and guards your systems against undisclosed and zero-day threats.

Centralized Network Security and Policy Management

The EDF-G1002-BP Series helps administrators and operators understand the real-time status of OT systems. When connected to Moxa’s MXsecurity centralized security management platform, administrators can manage and monitor all the intrusion prevention systems from a single space. MXsecurity provides an efficient way to monitor security assets, and execute policy, firmware, configuration, and pattern updates.