Hirschmann EAGLE Tofino OPC Enforcer OPC firewall module

Hirschmann EAGLE Tofino has introduced the OPC Enforcer, an OPC firewall module, to their distributed network protection range. Like the other modules in the range, the module is configured to pass or drop datagrams according to customisable rules. It is configured using the Tofino Central Management Platform.

Protection of traffic using OPC Classic protocol is almost impossible with traditional firewall rule sets. The OPC Enforcer takes a different approach, dynamically opening only the TCP ports required for each connection, and only between the specific OPC Server and Client forming the connection. It applies to OPC DA, HDA or A&E servers.

Other features include a ‘sanity check’ capability to eliminate rogue traffic, for multiple clients and servers, and the unique ‘learn’ mode where user rules can be tested on real data before implementation.

The EAGLE Tofino solution comprises three elements; a central management platform that runs on a PC, distributed EAGLE Tofino appliances, and loadable security modules (LSM) such as OPC Enforcer. These modules allow customisation of each appliance to manage costs, paying only for the correct solution at each point in a network.

The most common application for the OPC Enforcer is to secure transfers to and from data historians, as well as protecting communications between equipment from different vendors that share no other common protocols.

The Hirschmann EAGLE Tofino is a fundamental part of a defence-in-depth cyber security strategy and is designed to be part of a centrally managed zone-based defence system, protecting against malware, equipment failures and user errors.