MOXA IEF-G9010-2MGSFP-Pro-H Industrial IPS Firewall
- 8 x 10/100/1000BaseT(X) Ports (RJ45 connector)
- 2 x 1000BaseSFP Slots
- Supports Security Dashboard Console (SDC)
- Automatic Pattern Update via SDC (requires IEF pattern update license)
- DIN-rail and Wall mounting
- Manual Pattern Updates (requires IEF pattern update license)
- Metal body design
- -10 to 60°C operating temperature
Description
The Moxa IEF-G9010 Series industrial IPS firewall can segment and hide your network and protect mission-critical assets with industrial-grade IPS and granular access control. Meanwhile, the Security Dashboard Console (SDC) software, when used together with the IEF-G9010 Series, offers another layer of protection through centralized critical asset visibility, network analysis, and auto pattern updating.
Centrally Manage Network Security and Enhance OT Visibility
The IEF-G9010 Series sniffers network traffic and gives users full visibility of current assets and connections, which helps administrators and operators understand the real-time conditions of the OT system. When connected to the Security Dashboard Console, a security management platform, the administrators or operators can effectively manage and monitor all the intrusion prevention systems from a single space. This provides an easier way to monitor the devices and execute policy, firmware, and pattern updates.
Dynamically Prevent Malicious Cyber Threat Activity Affecting Your System
The IEF-G9010 Series is designed to protect mission-critical assets at the OT network edge. It silently analyzes your network traffic in the background and offers granular behavior monitoring and control of cyber activities. These firewall devices provide both “Monitor” and “Protect” modes to facilitate different OT scenarios. Monitoring mode gives administrators full visibility of cyber threat activities. In the case of an emergency, administrators can easily switch to “Protect” mode to block and contain any malicious operations.
Industrial Protocol Whitelist Control for Mission-critical Assets
Using advanced Deep Packet Inspection (DPI) technology, the IEF-G9010 Series is equipped with industrial protocol awareness to offer granular command of control system traffic to critical controllers.
Virtual Patching and Intelligent Threat Protection
Frequent patching significantly reduces a system’s vulnerability to cyber threats. However, patching continues to be a major challenge in OT environments because OT applications cannot afford to interrupt operations by shutting down systems to apply patches. Virtual patching technology can help complement existing patch management processes by shielding known and unknown vulnerabilities. Virtual patching acts as an agentless emergency security tool that OT administrators and operators can use to address vulnerabilities on affected OT equipment quickly. The IEF-G9010 Series provides advanced protection against threats with up-to-date threat information and guards your systems against undisclosed and zero-day threats.
End of Life Product - Replacement Available
Please note that the IEF-G9010 Series has been phased out and replaced by the EDR-G9010 Series.
Experience the convenient way to purchase the MOXA IEF-G9010-2MGSFP-Pro-H Industrial IPS Firewall in the
Middle East (UAE (Dubai), KSA (Al Khobar, Riyadh), and Oman). Our sales experts
will provide the most helpful information about the price and sale conditions
for a wonderful buying experience.
Specification
INTERFACE | |
---|---|
Ethernet | 8 x 10/100/1000BaseT(X) Ports (RJ45 connector), 2 x 1000BaseSFP Slots |
Serial | 1 x RS-232 Console Port (USB Type-C connector) |
Buttons | Reset button |
Digital Input Channels | +13 to +30 V for state 1, -30 to +3 V for state 0, Max. input current: 8 mA |
LED Indicators | PWR1, PWR2, STATE, MGMT, IPS/IDS, HA, FUNC, USB, 10/100 Mbps copper port, 1000 Mbps copper port, 1000 Mbps SFP port |
Alarm Contact Channels | Resistive load: 1 A @ 24 VDC |
DOS AND DDOS PROTECTION | |
Technology | ICMP Flood, IGMP Flood, UDP Flood, UDP Port Scan, TCP SYN Flood, TCP Port SYN Scan, TCP Port FIN Scan, TCP Port NULL Scan, TCP Port Xmas Scan |
SOFTWARE FEATURES | |
Supported Interfaces | Web GUI and Security Dashboard Console |
Management | SSH, Telnet, NTP Client, DHCP Server/Client, DNS |
Authentication | Local Account Accessibility |
FIREWALL | |
Throughput | Max. 360,000 packets per second (max. 1,000 Mbps) |
Filter | - |
IPS Throughput | > 450 Mbps when the packet size is greater than 128 bytes |
Intrusion Prevention System | Enabled by default. IPS pattern update functionality requires an additional license |
Latency | < 500 microseconds |
Deep Packet Inspection | Modbus TCP, Modbus UDP, EtherNet/IP, PROFINET-DCP, CIP, Omron FINS, SLMP, Siemens S7 Comm., Siemens S7 Comm. Plus, Additional protocols will be supported through future firmware updates |
Policy Enforcement Rules | 64 rules |
ICS Protocol Filter Profiles | 32 profiles |
REAL-TIME FIREWALL / VPN EVENT LOG | |
Event Type | Cybersecurity, Policy enforcement, Protocol Filter, Assets detection, System event |
Media | Local storage, Syslog server |
POWER PARAMETERS | |
Connection | Removable terminal block |
Input Voltage | - |
Input Current | 1.265 A @ 12 VDC, 0.605 A @ 24 VDC, 0.308 A @ 48 VDC |
Reverse Polarity Protection | - |
PHYSICAL CHARACTERISTICS | |
Housing | Metal |
Dimensions | 64 x 105 x 135 mm (2.52 x 4.13 x 5.32 in) |
Weight | 1100 g (2.43 lb) |
Installation | DIN-rail mounting, Wall mounting (with optional kit) |
Operating Temperature | -10 to 60°C (14 to 140°F) |
Storage Temperature | -40 to 85°C (-40 to 185°F) |
Ambient Relative Humidity | 5 to 95% (non-condensing) |
Standards and Certifications | Safety: UL 60950-1 Ed.2, UL 62368-1; EMC: EN 55032/35, EN 61000-6-2/-6-4; EMI: CISPR 32, FCC Part 15B Class A; EMS: IEC 61000-4-2 ESD: Contact: 4 kV; Air: 8 kV, IEC 61000-4-3 RS: 80 MHz to 1 GHz: 3 V/m, IEC 61000-4-4 EFT: Power: 1 kV; Signal: 0.5 kV, IEC 61000-4-5 Surge: Power: 0.5 kV; Signal: 1 kV, IEC 61000-4-6 CS: 3 V, IEC 61000-4-8 PFMF; Railway: EN 50121-4; Traffic Control: NEMA TS2; Shock: IEC 60068-2-27; Freefall: IEC 60068-2-32; Vibration: IEC 60068-2-6; Telcordia (Bellcore), GB |
MTBF | 1,070,000 hrs |