iSEG RF-1031 Secure Gateway
2Pages

Product Datasheet Product Datasheet iSEG RF-1031 Secure Gateway HIGHLIGHTS XX Authentication XX IP Proxy for securing remote access SCADA firewall VPN over cellular & fiber with X.509 certificates gateway for Serial and Ethernet devices, fit for harsh environmental conditions XX Resilient XX SCADA network uplink over Ethernet or Cellular protocols gateway DESIGNED FOR SMALL REMOTE SITES THAT REQUIRE A SECURE CONNECTION TO A LIMITED NUMBER OF DEVICES The iSEG RF-1031 offers security solutions for both M2M (Machine to Machine) and H2M (Human to Machine) traffic by incorporating a DPI (Deep-Packet Inspection) firewall, as well as a user-identity firewall. The iSEG RF-1031 includes a distributed DPI firewall or monitoring all network traffic and managing physical and remote access control systems. The whitelist-based firewall is installed at every port for both Serial and Ethernet traffic. Each SCADA protocol packet is validated by the firewall for source, destination, protocol and packet content. The firewall’s two states (Monitoring and Blocking) allow blocking suspicious traffic or just monitoring, in addition to triggering an alarm at the control center. The iSEG RF-1031 supports VPN tunnels for secure inter-site connectivity with IPsec, DMVPN, mGRE tunnels (among others) with key management certificates, supporting layer-3 services. In addition, the iSEG RF-1031 fully supports L3 switches (VLANs, Routing, etc.) for Ethernet and serial ports. The iSEG RF-1031 offers a built-in APA (Authentication Proxy Access), for compliance with the NERC CIP V6 requirement for identifying and granting privileges to users prior to granting network access. Once validated, specific access is granted to predefined devices and functions, and each operation is logged. The iSEG RF-1031 is also integrated with a physical identity server system, for other authentication methods (e.g. magnetic card.)

Product Datasheet: iSEG RF-1031Secure Gateway SECURITY Distributed DPI Firewall Profile-based firewall Security rules planning per service group Firewall modes: Monitoring, Enforcement IEC 104 DPI Firewall Modbus TCP DPI Firewall DNP3 TCP DPI Firewall S7 TCP DPI Firewall VPN IPsec Certificates X.509 IPsec Dynamic Key Exchange IPSec encryption AES, 3DES L3 IPSec VPN policy based L3 IPSec VPN route based L3 mGRE DM-VPN Access control Access Lists L3, L4 NAT User-based/Task-based access control for local devices via local APA (Authentication Proxy Access) OS image encryption INTERFACES 1 or 2...