Protects plants from Cyber-attacks.

Eaton has launched its next generation Tofino industrial security solution. The 9202-ETS MTL security system provides the highest level of network security for process automation applications. The MTL Tofino security system is exceptionally easy to install compared with alternative systems and includes the latest configurator software to protect industrial networks from cyber-security vulnerabilities. This maximises plant uptime and process availability while protecting it from external network attack.

“When Industrial Control and Supervisory Control and Data Acquisition (SCADA) systems were not connected they were considered immune to attacks, but the trend towards open standards such as Ethernet TCP/IP and web technologies has seen these systems affected by a growing number of threats,” said Roger Highton, product line manager, Eaton. “Traditional firewalls are not designed for control systems or industrial threats, thereby putting essential utilities at risk, and each year, the damage to critical infrastructure from network incidents and cyber-attacks runs into billions of dollars. The MTL 9202-ETS gives process managers in the power, utilities, oil and gas and water and wastewater industries a cost-effective security protection that is highly effective and quick to install.”

It supports all popular industrial protocols with the Firewall Loadable Security Module (LSM) which compares network traffic against a set of rules. The new release includes the EtherNet/IP Enforcer LSM for deep packet inspection of EtherNet/IP (CIP) communications. Tofino can also be configured remotely with the Netconnect LSM, providing further flexibility to the user. Further LSM’s can also be specified such as the Modbus enforcer and OPC enforcer LSMs providing deep packet inspection for these key industrial protocols and the Event Logger LSM logs security events and sends alarms. The LSMs are available pre-installed or can be purchased separately.

The 9202-ETS MTL security appliance delivers defence in depth for a wide range of DCS, PLC, SCADA, networking, and automation systems. As it does not have its own IP address, it sits as an invisible device on the network and is designed to stop threats without disrupting the critical process application.

The Tofino system includes a number of templates for use with a wide range of automation protocols to further ease installation. In addition, it provides a number of rules and a test mode, so users can check the proposed configuration will not interfere with the operation of the plant before putting the security appliance into operation. Tofino Configurator checks for missing or invalid rules and suggests solutions, thereby aiding set-up.

The 9202-ETS MTL security appliance has a rugged hardware design suitable for use in harsh and hazardous environments. It has a robust metal housing for DIN rail mounting,
-40°C to +70°C operating temperature ratings together with Class 1 Division 2 and ATEX Zone 2 hazardous area approvals. This ensures it will give years of reliable service, providing secure networks with security zones as per NERC, ANSI/ISA, and IEC standards.