MOXA IEF-G9010-2MGSFP-Pro Industrial IPS Firewall
- Compact industrial IPS firewall for network segmentation
- Industrial-grade Intrusion Prevention/Detection System (IPS/IDS)
- Object-based policy enforcement rules for protocol filtering and traffic control
- Easy network setup with Network Address Translation (NAT)
- Full OT network visibility when used with Security Dashboard Console (SDC)
- Brand: MOXA
- Product Code: IEF-G9010-2MGSFP-Pro
Description
The Moxa IEF-G9010 Series industrial IPS firewall can
segment and hide your network and protect mission-critical assets with
industrial-grade IPS and granular access control. Meanwhile, the Security
Dashboard Console (SDC) software, when used together with the IEF-G9010 Series,
offers another layer of protection through centralized critical asset
visibility, network analysis, and auto pattern updating.
Centrally Manage Network Security and Enhance OT Visibility
The IEF-G9010 Series sniffers network traffic and gives
users full visibility of current assets and connections, which helps
administrators and operators understand the real-time conditions of the OT
system. When connected to the Security Dashboard Console, a security management
platform, the administrators or operators can effectively manage and monitor
all the intrusion prevention systems from a single space. This provides an
easier way to monitor the devices and execute policy, firmware, and pattern
updates.
Dynamically Prevent Malicious Cyber Threat Activity
Affecting Your System
The IEF-G9010 Series is designed to protect mission-critical
assets at the OT network edge. It silently analyzes your network traffic in the
background and offers granular behavior monitoring and control of cyber
activities. These firewall devices provide both “Monitor” and “Protect” modes
to facilitate different OT scenarios. Monitoring mode gives administrators full
visibility of cyber threat activities. In the case of an emergency,
administrators can easily switch to “Protect” mode to block and contain any
malicious operations.
Industrial Protocol Whitelist Control for Mission-critical
Assets
Using advanced Deep Packet Inspection (DPI) technology, the
IEF-G9010 Series is equipped with industrial protocol awareness to offer
granular command of control system traffic to critical controllers.
Virtual Patching and Intelligent Threat Protection
Frequent patching significantly reduces a system’s vulnerability to cyber threats. However, patching continues to be a major challenge in OT environments because OT applications cannot afford to interrupt operations by shutting down systems to apply patches. Virtual patching technology can help complement existing patch management processes by shielding known and unknown vulnerabilities. Virtual patching acts as an agentless emergency security tool that OT administrators and operators can use to address vulnerabilities on affected OT equipment quickly. The IEF-G9010 Series provides advanced protection against threats with up-to-date threat information and guards your systems against undisclosed and zero-day threats.
You can also find the IEF-G9010-2MGSFP-Pro-H, IEF-G9010-2MGSFP-Pro-H-T, and IEF-G9010-2MGSFP-Pro-T models in the Network Security Appliance.
Explore our extensive range of
industrial automation products such as MOXA IEF-G9010-2MGSFP-Pro Industrial IPS Firewall in the Middle East (UAE (Dubai),
KSA (Al Khobar, Riyadh), and Oman).
Submit your inquiry to enjoy the on-time delivery service. Our sales
experts will contact you to fulfill all your industrial automation needs.
Specification
INTERFACE | |
---|---|
Ethernet | 8 x 10/100/1000BaseT(X) Ports (RJ45 connector), 2 x 1000BaseSFP Slots |
Buttons | Reset button |
LED Indicators | PWR1, PWR2, STATE, MGMT, IPS/IDS, HA, FUNC, USB, 10/100 Mbps copper port, 1000 Mbps copper port, 1000 Mbps SFP port |
DOS AND DDOS PROTECTION | |
Technology | ICMP Flood, IGMP Flood, UDP Flood, UDP Port Scan, TCP SYN Flood, TCP Port SYN Scan, TCP Port FIN Scan, TCP Port NULL Scan, TCP Port Xmas Scan |
FIREWALL | |
IPS Throughput | > 450 Mbps when the packet size is greater than 128 bytes |
Latency | < 500 microseconds |
Concurrent Connection (TCP) | 60,000 |
Deep Packet Inspection | Modbus TCP, Modbus UDP, EtherNet/IP, Profinet-DCP, CIP, Omron FINS, Mitsubishi SLMP, Siemens S7 Comm., Siemens S7 Comm. Plus, With more available through a firmware update |
Policy Enforcement Rules | 64 rules |
ICS Protocol Filter Profiles | 32 profiles |
REAL-TIME FIREWALL / VPN EVENT LOG | |
Event Type | Cybersecurity, Policy enforcement, Protocol Filter, Assets detection, System event |
Media | Local storage, Syslog server |
POWER PARAMETERS | |
Connection | Removable terminal block |
Input Current | 1.265 A @ 12 VDC, 0.605 A @ 24 VDC, 0.308 A @ 48 VDC |
PHYSICAL CHARACTERISTICS | |
Housing | Metal |
Dimensions | 64 x 105 x 135 mm (2.52 x 4.13 x 5.32 in) |
Weight | 1100 g (2.43 lb) |
Installation | DIN-rail mounting, Wall mounting (with optional kit) |
Operating Temperature | -10 to 60°C (14 to 140°F) |
Storage Temperature | -40 to 85°C (-40 to 185°F) |
Ambient Relative Humidity | 5 to 95% (non-condensing) |
Standards and Certifications | Safety, EMC, EMI, EMS, Shock, Freefall, Vibration, EN 50121-4, NEMA TS2 |
MTBF | 1,070,000 hrs |