The Tofino Xenon industrial security appliance HIRSCHMANN provides comprehensive network protection.
The Tofino Xenon industrial security appliance provides comprehensive network protection. It is a versatile, extremely ruggedized device that ensures maximum data protection for production systems.
- Safe and cost-effective protection of automation networks
- Plug-n-Protect™ installation requires no pre-configuration, no network changes, and no disruption to the control system
- Rugged hardware design for years of reliable service
The robust design of the Tofino Xenon enables it to withstand the harshest environmental conditions and it can be used wherever maximum data security is called for. This makes it the ideal industrial security appliance for mechanical and plant engineering and industrial automation. Other areas for its versatile use include the transportation sector, with applications ranging from road and rail transport right through to shipping. Indeed, the Tofino Xenon has been certified by Germanischer Lloyd for this very purpose. Since this security appliance is also approved for substations (IEC 61850-3) and for explosive environments (ATEX and ISA 12.12.01 HazLoc), it can also be used in the oil and gas sector as well as in power transmission and distribution systems and renewable energy applications such as wind farms.
The free Tofino Configurator software makes it easy for the control technician to define rules that specify exactly which devices are allowed to communicate, what protocols they may use, and what actions those protocols perform. Any network traffic that does not fit the rules is automatically blocked by the Tofino Xenon and reported as a security alert.
The standard Tofino Xenon includes a stateful firewall with layer 2, 3 and 4 filtering. Adding Enforcer LSMs provides stateful DPI to manage traffic based on high level message content, such as the commands/services being used or the registers/objects being accessed. There are multiple Enforcers available – each one providing inspection for a different protocol. The LSMs can be pre-loaded onto the Tofino Xenon at the factory, or purchased and installed at a later date as your needs change.
Other features of this security appliance include extensive management facilities and diagnostic tools, a robust metal housing for DIN rail mounting, and a redundant power supply for both DC and AC.
The Tofino Xenon allows for operating temperature ranges from 0°C to +60°C or from -40°C to +70°C. In addition, there are variants for twisted-pair cables or multimode fibers, as well as with a variety of certifications and approvals including ATEX, IEC 61850-3 and EN 50121-4.br:
Additional information
The free Tofino Configurator software makes it easy for the control technician to define rules that specify exactly which devices are allowed to communicate, what protocols they may use, and what actions those protocols perform. Any network traffic that does not fit the rules is automatically blocked by the Tofino Xenon and reported as a security alert.
The standard Tofino Xenon includes a stateful firewall with layer 2, 3 and 4 filtering. Adding Enforcer LSMs provides stateful DPI to manage traffic based on high level message content, such as the commands/services being used or the registers/objects being accessed. There are multiple Enforcers available – each one providing inspection for a different protocol. The LSMs can be pre-loaded onto the Tofino Xenon at the factory, or purchased and installed at a later date as your needs change.
Other features of this security appliance include extensive management facilities and diagnostic tools, a robust metal housing for DIN rail mounting, and a redundant power supply for both DC and AC.
The Tofino Xenon allows for operating temperature ranges from 0°C to +60°C or from -40°C to +70°C. In addition, there are variants for twisted-pair cables or multimode fibers, as well as with a variety of certifications and approvals including ATEX, IEC 61850-3 and EN 50121-4.br:
Benefits at a Glance
Thanks to its conformance with numerous approvals, the Tofino Xenon offers maximum flexibility in its protection of industrial plants, oil rigs, substations and transportation systems.
- All-around protection of automation networks with an optimal price-performance ratio
- Stateful firewall with layer 2, 3 and 4 filtering for all Ethernet-based protocols
- Additional application layer filtering for SCADA and ICS protocols using flexible LSMs
- Prevention of Denial of Service (DoS) attacks with rate limit controls
- Simple configuration over the network or with ACA21-USB using the Tofino Configurator software
- Test mode for verifying firewall rules without risk to your operation
- LSMs pre-installed at factory or purchased separately
- Simultaneous event logging to remote syslog servers and local nonvolatile memory
- Audit capabilities for tracking configuration changes
- Safe installation in live networks without shutdown
- Tested for use with all major control system products
- Optional extended operating temperature range from -40°C to +70°C (standard is 0°C to +60°C)
- Variants for twisted-pair cables (RJ45) and multimode fibers (SC)
- Robust metal housing for DIN rail mounting
- Meets principal standards and approvals:
– Energy sector: IEC 61850-3, IEEE 1613
– Hazardous areas: ATEX, ISA-12.12.01 Class 1 Div. 2
– Transport sector: EN 50121-4
– Shipping: Germanischer Lloyd - Perfectly tailored for use with all Ethernet products from Hirschmann™, GarrettCom™ and Belden®