Product Overview

Industrial Firewall (GTEC-FW) is a product specifically designed for security isolation and protection between different security levels or network security domains in industrial networks. The product is mainly based on deep analysis of industrial network protocols, using machine learning technology to identify industrial assets and application protocols. Combining technologies such as whitelist, blacklist, security domain partitioning, IP/MAC address binding, etc., to resist various known and unknown malicious attacks in industrial networks, providing security guarantees for the stable operation of various production and business systems in industrial networks.

Features

Deep industrial protocol analysis:support for OPC UA、OPC DA、SNMP、Ethernet/IP、Modbus/TCP、Profin、IEC104、DNP3、MMS、S7、GOOSE、SV Deeply analyze over 10 commonly used industrial protocols and support custom extension of private protocols.

Intelligent construction of trustworthy strategies:Through traffic self-learning, establish a trusted industrial control network security policy baseline, simplify the policy configuration process, reduce the difficulty of manual deployment, and improve on-site configuration and deployment efficiency.

Strong network adaptability:Supports transparent mode, routing mode, working mode, and testing mode. Quick switching between modes to adapt to complex industrial network environments and facilitate deployment.

Accurate instruction parsing and control:Supports deep packet parsing and precise control of various industrial control network protocols such as mainstream industrial protocols Modbus TCP, OPC, Profinet, DNP3, etc.

Multiple protection mechanisms:Equipped with traditional network DoS/DDoS malicious attack protection capabilities, and based on industrial control threat feature recognition technology and blacklist feature library matching mechanism, multiple protections are constructed to resist various attacks against industrial control systems.

High reliability:Adding paired bypass ports in hardware design can ensure business continuity even in the event of device power failure or downtime. The entire series of products come standard with dual power supplies to ensure stable power supply for the equipment. Adopting fanless design to ensure long-term reliable operation of hardware. The product can flexibly customize hardware interfaces and expand processing performance as needed.

Built in professional antivirus engine:Professional shell removal engine and decompression engine, combined with feature code scanning, heuristic scanning, and behavior judgment technology to quickly detect various known and unknown virus threats. Support scanning scripts in various formats such as JS, VBS, SH, Python, PHP, BAT, etc., to quickly and accurately detect Shellcode threats. The macro virus engine can remove malicious macro code from Office files and correctly repair documents.

典型部署

• Deploy in series between the on-site monitoring network and the production management network

• Serial deployment within the core control system outlet of the industrial control network