Rockwell Automation released its Allen-Bradley Stratix 5950 security appliance, which incorporates new security technologies to help protect plant-floor systems. The security appliance is designed for applications where IT firewalls are not sufficiently protecting against threats to industrial network traffic, which limits their ability to minimize security risks on the plant floor.
The security appliance uses Adaptive Security Appliance (ASA) firewall and FirePOWER technology to create a security boundary between cell/area zones or to help protect a single machine, line or skid. This supports compliance with IEC 62443. The device also uses deep-packet-inspection (DPI) technology. Developed in collaboration with Cisco, the DPI technology enables inspection of the Common Industrial Protocol (CIP) and other industrial protocols.
An optional subscription license is available with the Stratix 5950 security appliance. Similar to a PC-based, anti-virus service, subscribers will receive ongoing threat and application-signature updates to help protect against the latest known security threats.
The new appliance includes four 1-gigabit Ethernet ports, and is available with copper-and-fiber or copper-only, small form-factor pluggable (SFP) slot options. The industrially hardened device is IP30-rated and can withstand electrical shocks, surges and noise. It can operate in temperatures ranging from minus 40 to 60 degrees Celsius (minus 40 to 140 degrees Fahrenheit).
The Stratix 5950 security appliance is the first Rockwell Automation product offering with DPI technology, which was announced in April 2016 as part of the strategic alliance between Rockwell Automation and Cisco.
Keywords: IT Security Technology, Plant Floor, Industrial Network Traffic, Security Risks, Adaptive Security Appliance (ASA), FirePOWER, ARC Advisory Group.