X

Your Cart

Submit Quotation Request

Company address:

Contact number:

Email address:

EDR-G9010 Series

8 GbE copper + 2 GbE SFP multiport industrial secure router

Features and Benefits

  • 10-port Gigabit all-in-one firewall/NAT/VPN/router/switch
  • Next-generation industrial firewall with Intrusion Prevention/Detection System (IPS/IDS)
  • Visualize OT security with the MXsecurity management software
  • Secure remote access tunnel with VPN
  • Examine industrial protocol data with Deep Packet Inspection (DPI) technology
  • Easy network setup with Network Address Translation (NAT)
  • RSTP/Turbo Ring redundant protocol enhances network redundancy
  • Supports Secure Boot for checking system integrity
  • Marine cybersecurity certified (IACS UR E27 Rev.1 & IEC 61162-460 Ed. 3.0), supporting 460-gateway, forwarder and switch roles
  • IEC 62443-4-2 Security Level 2 certified
  • -40 to 75°C operating temperature range (-T model)
Certifications
Overview
Specifications
Resources
Models
Contact Sales

Introduction

The EDR-G9010 Series is a set of highly integrated industrial multi-port secure routers with firewall/NAT/VPN and managed Layer 2 switch functions. These devices are designed for Ethernet-based security applications in critical remote control or monitoring networks. These secure routers provide an electronic security perimeter to protect critical cyber assets including substations in power applications, pump-and-treat systems in water stations, distributed control systems in oil and gas applications, and PLC/SCADA systems in factory automation. Furthermore, with the addition of IDS/IPS, the EDR-G9010 Series is an industrial next-generation firewall, equipped with threat detection and prevention capabilities to further protect critical infrastructure from cybersecurity attacks.

IEC 62443-4-2 Security Level 2 Certified

The EDR-G9010 Series models are IEC 62443-4-2 Security Level 2 certified (https://certificates.iecee.org/#/deliverables/CERT/1667679/view). The embedded firewall uses policy rules to control network traffic between trusted zones while Network Address Translation (NAT) shields the internal network from unauthorized access by outside hosts. The Virtual Private Networking (VPN) functionality further provides users with secure communication tunnels when accessing the private network from the public Internet. To help protect your OT assets from cyberattacks, the EDR-G9010 Series supports Deep Packet Inspection (DPI) to examine the data portion of network packets for various OTspecific protocols.

MX-ROS Addresses Growing Cybersecurity Threats

Moxa’s MX-ROS is a software platform for industrial security routers and firewalls. The platform supports robust security and user-friendly operation of secure routers through simplified web and CLI interfaces. MX-ROS devices offer a wealth of the latest cross-industry Operational Technology (OT) network management features with each release to safeguard your hardware and software.

Simplify Configurations With the User-friendly Interface and Quick Settings

The EDR-G9010 Series’ Setup Wizard provides an easy way for users to set up WAN, LAN, and Bridge ports for routing functionality in just four steps. In addition, the object-based firewall management feature gives engineers a simple way to configure and maintain firewall filtering for IP addresses and subnets, network services, industrial application services, and user-defined services.

Industrial-grade Design to Ensure Uninterrupted Network Connectivity

The EDR-G9010 Series’ rugged hardware makes these secure routers ideal for harsh industrial environments, featuring wide-temperature models that are built to operate reliably in hazardous conditions and extreme temperatures of -40 up to 75°C. Moreover, the EDR-G9010 Series supports comprehensive Layer 2 and Layer 3 redundancy mechanisms to ensure that your network stays connected at all times.

Virtual Patching and Intelligent Threat Protection

Patching remains a major challenge in OT environments because OT applications cannot afford interrupting operations by shutting down systems to apply patches. Virtual patching technology can help complement existing patch management processes by shielding known and unknown vulnerabilities. In addition, the EDR-G9010 features intelligent IPS functionality for continuous protection against cyberthreats which uses pattern-based detection to identify and block known attacks.

  • Alarm Contact Channels

    Resistive load: 1 A @ 24 VDC

  • Buttons

    Reset button

  • Digital Input Channels

    +13 to +30 V for state 1
    -30 to +3 V for state 0
    Max. input current: 8 mA

  • 10/100/1000BaseT(X) Ports (RJ45 connector)

    8

  • 1000/2500BaseSFP Ports

    2

  • Standards

    IEEE 802.1Q for VLAN Tagging
    IEEE 802.3 for 10BaseT
    IEEE 802.3ab for 1000BaseT(X)
    IEEE 802.3ad for Port Trunk with LACP
    IEEE 802.3u for 100BaseT(X)
    IEEE 802.3x for flow control
    IEEE 802.3z for 1000BaseSX/LX/LHX/ZX
    IEEE 802.1X for authentication

  • DMZ

    User-configurable DMZ ports

  • Broadcast Forwarding

    IP directed broadcast, broadcast forwarding

  • Management

    Back Pressure Flow Control
    DDNS
    DHCP Server/Client
    Web Console (HTTP/HTTPS)
    LLDP
    QoS/CoS/ToS
    SNMPv1/v2c/v3
    Telnet
    TFTP
    HTTPS
    SSH

  • Redundancy Protocols

    RSTP
    STP
    Turbo Ring v2
    Turbo Chain

  • Routing Throughput

    Max. 350K packets per second / 2 Gbps (based on RFC 2544)

  • Routing Table

    Max. 4K routing rules

  • Concurrent Connections

    Max. 400K (based on RFC 3511)

  • Connections Per Second

    Max. 20K (based on RFC 3511)

  • Routing Redundancy

    VRRP

  • Security

    Secure Boot
    IPsec
    L2TP (server)
    RADIUS
    Trust access control
    TACACS+
    SCP
    SFTP
    NTP authentication
    Syslog Authentication

  • Time Management

    NTP Server/Client
    SNTP

  • Unicast Routing

    OSPF
    RIPV1/V2
    Static Route

  • Multicast Routing

    Static Route

  • Filter

    IGMP v1/v2/v3

  • VLAN ID Range

    VID 1 to 4094

  • IGMP Groups

    1000

  • Max. No. of VLANs

    32

  • LED Indicators

    PWR1, PWR2, STATE, MSTR/H.TC, CPLR/T.TC, VRRP/HA, VPN, USB

  • Technology

    ARP-Flood
    FIN Scan
    ICMP Flood
    TCP Sessions Without SYN
    NMAP-ID Scan
    NMAP-Xmas Scan
    Null Scan
    SYN/FIN Scan
    SYN/RST Scan
    SYN-Flood
    Xmas Scan

  • Filter

    DDoS
    Ethernet protocols
    ICMP
    IP address
    MAC address
    Ports

  • Stateful Inspection

    Router firewall
    Transparent (bridge) firewall

  • Deep Packet Inspection

    DNP3
    EtherNet/IP
    IEC 60870-5-104
    IEC 61850 MMS
    MELSEC
    Modbus TCP
    Modbus UDP
    Omron FINS
    OPC UA
    Siemens S7 Comm.
    Siemens S7 Comm. Plus
    Additional protocols will be supported through future firmware updates.

  • Intrusion Prevention System

    Requires an additional license.

  • Throughput

    Firewall:
    Max. 350K packets per second / 2 Gbps (based on RFC 2544)

    IPS:
    Max. 200K packets per second / 2 Gbps (based on RFC 2544)

  • Authentication

    MD5 and SHA (SHA-512)
    RSA (key size: 1024-bit, 2048-bit)
    X.509 v3 certificate

  • Concurrent VPN Tunnels

    Max. 250 IPsec VPN tunnels

  • Encryption

    DES
    3DES
    AES-128
    AES-192
    AES-256
    AES-256-GCM

  • Protocols

    IPsec
    L2TP (server)
    PPTP (client)

  • Throughput

    Conditions: AES-256, SHA-256
    Max. 100K packets per second / 800 Mbps (based on RFC 2544)

  • Features

    1-to-1
    N-to-1
    NAT loopback
    Port forwarding

  • Event Type

    Firewall event
    VPN event

  • Media

    Local storage
    SNMP Trap
    Syslog server

  • Console Port

    RS-232 (TxD, RxD, GND), 3-pin (115200, n, 8, 1)

  • Connector

    USB Type-C

  • Connector

    Removable terminal block

  • Input Voltage

    EDR-G9010-VPN-2MGSFP(-T, -CT, -CT-T) models:
    12/24/48 VDC, redundant dual inputs (DNV-certified for 24 VDC)

    EDR-G9010-VPN-2MGSFP-HV(-T) models:
    120/240 VDC/VAC, redundant dual inputs

  • Operating Voltage

    non-HV(-T) models:
    9.6 to 60 VDC

    -HV(-T) models:
    88 to 300 VDC, 90 to 264 VAC

  • Input Current

    EDR-G9010-VPN-2MGSFP(-T, -CT, -CT-T) models:
    1.51 A @ 12 VDC
    0.70 A @ 24 VDC
    0.35 A @ 48 VDC

    EDR-G9010-VPN-2MGSFP-HV(-T) models:
    0.28 A @ 120 VAC
    0.18 A @ 240 VAC
    0.15 A @ 120 VDC
    0.08 A @ 240 VDC

  • Reverse Polarity Protection

    Supported

  • Housing

    Metal

  • IP Rating

    IP40

  • Dimensions

    EDR-G9010-VPN-2MGSFP(-T, -CT, -CT-T) models:
    58 x 135 x 105 mm (2.28 x 5.31 x 4.13 in)

    EDR-G9010-VPN-2MGSFP-HV(-T) models:
    64 x 135 x 105 mm (2.52 x 5.31 x 4.13 in)

  • Weight

    EDR-G9010-VPN-2MGSFP(-T, -CT, -CT-T) models:
    1030 g (2.27 lb)
    EDR-G9010-VPN-2MGSFP-HV(-T) models:
    1150 g (2.54 lb)

  • Installation

    DIN-rail mounting (DNV-certified)
    Wall mounting (with optional kit)

  • Protection

    -CT models: PCB conformal coating

  • Operating Temperature

    Standard models: -10 to 60°C (14 to 140°F)
    Wide temp. models: -40 to 75°C (-40 to 167°F)
    EDR-G9010-VPN-2MGSFP(-T, -CT-, CT-T) models: DNV-certified for -25 to 70°C (-13 to 158°F)

  • Storage Temperature (package included)

    -40 to 85°C (-40 to 185°F)

  • Ambient Relative Humidity

    5 to 95% (non-condensing)

  • Safety

    IEC 62368-1
    UL 62368-1
    IEC 60950-1
    UL 60950-1

  • EMC

    EN 55032/35

  • EMI

    CISPR 32, FCC Part 15B Class A

  • EMS

    IEC 61000-4-2 ESD: Contact: 8 kV; Air: 15 kV
    IEC 61000-4-3 RS: 80 MHz to 1 GHz: 20 V/m
    IEC 61000-4-4 EFT: Power: 4 kV; Signal: 4 kV
    IEC 61000-4-5 Surge: Power: 2 kV; Signal: 4 kV
    IEC 61000-4-6 CS: 10 V
    IEC 61000-4-8 PFMF

  • Cybersecurity

    IEC 62443-4-2 Security Level 2

  • Railway

    EDR-G9010-VPN-2MGSFP(-T, -CT, -CT-T) models: EN 50121-4

  • Traffic Control

    EDR-G9010-VPN-2MGSFP(-T, -CT, -CT-T) models: NEMA TS2

  • Maritime

    EDR-G9010-VPN-2MGSFP(-T, -CT, -CT-T) models:
    CCS
    CCS Guidelines for Inspection of Ship Network Firewall
    CCS IACS UR E27 Rev.1
    DNV,
    DNV IEC 61162-460 Edition 3.0 460-gateway, 460-forwarder and 460-switch,
    DNV security profile 2,
    IACS UR E27 Rev.1,
    KR
    KR IACS UR E27 Rev.1
    KR IEC 61162-460 Edition 3.0 460-gateway, 460-forwarder and 460-switch
    IEC 60945

  • Power Substation

    IEEE 1613
    IEC 61850-3 Edition 2.0

  • Hazardous Locations

    EDR-G9010-VPN-2MGSFP(-T, -CT, -CT-T) models: ATEX, Class I Division 2

  • Shock

    IEC 60068-2-27

  • Freefall

    IEC 60068-2-32

  • Vibration

    IEC 60068-2-6

  • Time

    EDR-G9010-VPN-2MGSFP(-T, -CT, -CT-T) models:
    1,080,807 hrs
    EDR-G9010-VPN-2MGSFP-HV(-T) models:
    509,714 hrs

  • Standards

    Telcordia (Bellcore), GB

Software, Firmware, and Drivers

FILTER

All Firmware Software Package
Name Type Checksum Version Operating System Release Date
Firmware for EDR-G9010 Series Download
77.5 MB 		Firmware
SHA-512
v3.24
Apr 18, 2026 Apr 18, 2026 Release notes
SNMP MIB file for EDR-G9010 Series Download
207.1 KB 		Software Package
SHA-512
v3.24
Apr 18, 2026 Apr 18, 2026 Release notes
Network Security Package for EDR-G9010 Series Download
8.3 MB 		Software Package
SHA-512
v17.0.15
Apr 15, 2026 Apr 15, 2026 Release notes
Firmware for EDR-G9010 Series Download
79.7 MB 		Firmware
SHA-512
v3.23.1
Feb 04, 2026 Feb 04, 2026 Release notes
Firmware for EDR-G9010 Series Download
79.6 MB 		Firmware
SHA-512
v3.23
Jan 09, 2026 Jan 09, 2026 Release notes

Support Documents

FILTER

All Datasheet Declaration Manual QIG Tech Note
Name Type Version Release Date
FOSS Statement for MX-ROS products Download
1.6 MB 		Declaration v3.24 Apr 28, 2026 Apr 28, 2026
Manual for MX-ROS V3 Download
31.3 MB 		Manual v1.15 Apr 18, 2026 Apr 18, 2026
CLI Manual for MX-ROS V3 Download
6.4 MB 		Manual v1.10 Apr 18, 2026 Apr 18, 2026
Datasheet for EDR-G9010 Series Download
1.6 MB 		Datasheet v2.8 Nov 24, 2025 Nov 24, 2025
Manual for MX-ROS V3 Download
31.0 MB 		Manual v1.12 Jul 31, 2025 Jul 31, 2025
Declaration of Conformity (EU/UK) for EDR-G9010 Series Download
310.0 KB 		Declaration v1.0 Oct 21, 2024 Oct 21, 2024
Tech Note: Building an Industrial DMZ to Protect Internal LAN Networks With Moxa Secure Routers Download
4.8 MB 		Tech Note v1.0 May 15, 2024 May 15, 2024
Declaration of Conformity (EU/UK) for EDR-G9010-HV Series Download
312.4 KB 		Declaration v1.0 Jan 16, 2024 Jan 16, 2024
IEC 62443-4-2 Security Level 2 Certification for EDR-G9010 Series Download
201.6 KB 		Declaration v1.0 Jun 29, 2023 Jun 29, 2023
QIG for EDR-G9010 Series Download
3.1 MB 		QIG v2.0 Sep 16, 2022 Sep 16, 2022

Related Content

FILTER

All Application Note Article Solution Brochure Spotlight Technology Guide Video

Available Models (6)

Show Images
Compare
moxa-edr-g9010-vpn-2mgsfp-image.jpg | MoxaEDR-G9010-VPN-2MGSFP
Compare
moxa-edr-g9010-vpn-2mgsfp-t-image.jpg | MoxaEDR-G9010-VPN-2MGSFP-T
Compare
EDR-G9010-VPN-2MGSFP-HV
Compare
EDR-G9010-VPN-2MGSFP-HV-T
10/100/1000BaseT(X) Ports (RJ45 Connector)8888
10002500BaseSFP Slots2222
Firewall✓✓✓✓
NAT✓✓✓✓
VPN✓✓✓✓
Input Voltage12/24/48 VDC12/24/48 VDC120/240 VDC/VAC120/240 VDC/VAC
Conformal Coating––––
Operating Temp.-10 to 60°C
(DNV-certified)		-40 to 75°C
(DNV-certified for -25 to 70°C)		-10 to 60°C-40 to 75°C
Add to QuoteView BagAdd to QuoteView BagAdd to QuoteView BagAdd to QuoteView Bag
Compare
EDR-G9010-VPN-2MGSFP-CT
Compare
EDR-G9010-VPN-2MGSFP-CT-T
10/100/1000BaseT(X) Ports (RJ45 Connector)88
10002500BaseSFP Slots22
Firewall✓✓
NAT✓✓
VPN✓✓
Input Voltage12/24/48 VDC12/24/48 VDC
Conformal Coating✓✓
Operating Temp.-10 to 60°C-40 to 75°C
Add to QuoteView BagAdd to QuoteView Bag
  • 0