Industrial networks today are no longer air-gapped and immune from cybersecurity threats. Although deploying a firewall and segmenting networks is a good first step, how are Operational Technology (OT) engineers, who primarily work with industrial protocols and may lack sufficient IT security expertise, supposed to prevent cybersecurity threats from infecting and spreading across networks? After all, the cybersecurity landscape is constantly changing and goes far beyond blocking the spread of worms or unauthorized PLC commands.
Moxa’s industrial cybersecurity solution is specifically designed to secure industrial networks from both an OT and IT perspective to better address the surging market demand for a comprehensive cybersecurity solution for industrial networks. The solution includes critical IT cybersecurity technologies such as an Intrusion Prevention System (IPS), a key component for defense-in-depth strategies, which has been specifically tailored to protect OT networks from cyberthreats without disrupting industrial operations. Read on to learn more.
How Moxa's Industrial IPS Works
Moxa’s industrial IPS (Intrusion Prevention System) features our OT-centric Deep Packet Inspection technology, enhances IT network security visibility, and ultimately helps mitigate risks and protect industrial networks from security threats. Deep Packet Inspection can identify multiple industrial protocols and allow or block specific functions, such as read or write access. Based on the identified protocol, the industrial IPS can then prevent any unauthorized protocols or functions. This way, you can be more confident that the traffic on your industrial networks is trusted and non-malicious. In addition, Moxa’s industrial IPS provides virtual patching of vulnerabilities for operating systems, application software, and industrial equipment such as PLCs. By effectively integrating OT and IT technologies, Moxa’s industrial IPS safeguards your critical assets from the latest cybersecurity threats.
How Whitelisting Control Works
In order to ensure that network activity on your industrial networks is authorized, Moxa’s industrial cybersecurity solution allows you to define granular access controls at different levels. You can define a whitelist of devices and IP ports that are allowed to access all or part of your entire network. In addition, you can also define the authorized protocol format to prevent unauthorized commands from passing through the industrial IPS or firewalls. Furthermore, OT engineers can even define which control commands can pass through the network to reduce human error associated with sending a wrong control command. With whitelisting control, you can significantly reduce the likelihood of a DoS attack by OT Trojans.
Industrial Cybersecurity Solution
2-port Gigabit Industrial Intrusion Prevention System (IPS)
device with hardware bypass
- Features and Benefits
- Ultra-compact industrial security box with IPS/IDS
- Granular policy enforcement with whitelisting control
- LAN Bypass design to prevent a single point of failure and traffic overloading
- Bump-in-the-wire installation without impacting the network
Security Dashboard Console
Industrial network security management software designed for OT networks
- Features and Benefits
- Central management and monitoring of all your IEC-G102-BP Series devices
- Full visibility on the real-time status of your network security and OT systems
- Bulk configuration to reduce deployment time and maintenance costs