3180
2Pages

Product Datasheet Secure Gateway WHY RADIFLOW? XX Secure access and identity management Radiflow is a recognized leader in XX IP and Serial DPI SCADA firewall (DNP3, ModBus, industrial cybersecurity, offering dedicated solutions designed to meet the unique requirements of XX IPsec VPN over cellular & fiber with X.509 certificates industrial infrastructures: XX Up to 16 x 10/100 and 2 x 100/1000 SFP ports XX RS-232 ports with protocol gateway functionality XX Cellular 2G/3G/4G/LTE modem with two SIM cards for Over 10 years’ experience operator redundancy XX Fit for harsh industrial environments advanced persistent threats and targeted attacks, including attacks on critical and industrial infrastructure UNIQUE METHODOLOGY Specifically designed for remote site environments Radiflow offers a unique passive Radiflow’s iSEG RF-3180 ruggedized gateway was designed to meet the security and environmental challenges of critical infrastructures’ remote sites. detect industrial attack vectors that can cause downtime. Once connected to the network, the iSEG RF-3180 immediately begins to gather information from across the network (devices, behaviors, etc.) and suggest editable firewall rules. The iSEG RF-3180 secures both M2M (Machine to Machine) and H2M Dedicated team of industrial (Human to Machine) traffic by incorporating DPI (Deep-Packet Inspection) capability for analyzing SCADA network traffic. Upon detecting an anomaly the 3180 will automatically understand the colliding worlds generate alerts, block the abnormal activity and isolate any affected sub-networks. END-TO-END PORTFOLIO To facilitate NERC CIP V6 compliance, the iSEG RF-3180 includes an APA (Authentication Proxy Access). It grants authenticated users access to predefined devices and functions, Radiflow offers a holistic portfolio all fully logged. Integration with a physical identity server system also allows other authentication methods, e.g. magnetic card. including secure gateways, Industrial IDS and many more. Radiflow’s whitelist-based, distributed DPI firewall ensures uninterrupted control over the network. Installed at every port for both Serial and Ethernet traffic, meaning that every access point at the remote site is firewalled. Each SCADA protocol packet is validated by the firewall engine not only for its source and destination, but also for its protocol and packet content. The distributed firewall structure enables the creation of a unique firewall at each access point on the network, which is especially important for secur

iSEG RF-3180 Secure Gateway LOCAL OPERATION SECURITY Distributed DPI Firewall Profile-based firewall Security rules planning per service group Modes: Monitoring, Enforcement IEC 101 DPI Firewall; IEC 104 DPI Firewall Modbus RTU DPI Firewall, TCP Firewall DNP3 RTU Firewall, TCP Firewall S7 RTU Firewall, TCP Firewall VPN IPsec Certificates X.509 IPsec Dynamic Key Exchange IPsec encryption AES, 3DES L3 IPsec VPN: policy based, route based L3 mGRE DM-VPN L2 VPN GRE Access control Port access filter per MAC/IP addresses Enable/Disable port IEEE 802.1x port-based authentication Local APA...