IT in Manufacturing


Tofino Enforcer

September 2009 IT in Manufacturing

New Modbus-IDA certified security solution addresses US government security concerns.

Byres Security and MTL Instruments have introduced the Tofino Modbus TCP Enforcer loadable security module (LSM), which performs detailed analysis and filtering of all Modbus TCP messages, and is certified by Modbus-IDA. It allows owners of control and scada systems to regulate Modbus network traffic to a level of detail that was previously not possible, thereby increasing network security, reliability and performance of critical systems.

‘Deep packet’ or ‘content’ inspection for web e-mail or traffic has been offered in IT firewalls for several years, but nothing has been available for the process control and scada environment. Modbus traffic could either be allowed or blocked by a standard firewall, but fine-grained control was impossible. And since the smooth flow of Modbus TCP traffic is critical to the average industrial facility, engineers usually opted to let everything pass and take their chances with security. Industry experts have been urgently calling for better control of scada protocols.

Recently, a major US government agency warned: “Vulnerability has been identified within the firmware upgrade processes used in control systems deployed in critical infrastructure and key resources (CIKR). Development of a mitigation plan is required to protect the nation’s CIKR through vulnerability mitigation steps that include blocking network firmware upgrades with appropriate firewall rules.”

Two major energy companies and a transportation company have tried the Tofino ModbusTCP Enforcer LSM and are excited by how it allows them to follow government guidelines and enhance both system security and stability. Modbus functions can now be restricted in numerous ways:

* Blocking all firmware upgrades while allowing normal HMI traffic.

* Tailoring appropriate Modbus access permissions to PLCs for different stations.

* Restricting Modbus access permissions to specific memory locations in a controller.

* Enforcing read-only access to safety instrumented systems.

The complete Tofino industrial security solution consists of three core components:

* Tofino Security Appliance – an industrially hardened and certified appliance that is installed in front of individual and/or zones of HMI, DCS, PLC or RTU control devices that require protection.

* Tofino LSM – a variety of software plug-ins providing security services such as firewall, secure asset management and VPN encryption. Each LSM is downloaded into the security appliances to allow them to offer customisable security functions, depending on the requirements of the control system.

* Tofino Central Management Platform – a centralised management system and database for monitoring, supervision and configuration of each security appliance. One CMP can manage one or more LSMs.

For more information contact Gary Friend, Extech Safety Systems, +27 (0)11 791 6000, [email protected], www.extech.co.za



Credit(s)



Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

Development of motor control units for automotive industry
Siemens South Africa IT in Manufacturing
SEDEMAC has adopted the Siemens Xcelerator portfolio of industry software, which is used in the development of its motor control units and engine control units. The motor control units are used in EVs, hybrids, ebikes and power tools, while the engine control units are used for off-road and on-road engines.

Read more...
Cybersecurity and cyber resilience – the integrated components of a robust cyber risk management strategy
IT in Manufacturing
Organisations continuously face numerous cyberthreats in today’s digital landscape, and while many prioritise cybersecurity to safeguard digital assets, their strategies for cyber resilience often become neglected.

Read more...
Sustainable last-mile delivery electric trucks
Siemens South Africa IT in Manufacturing
Workhorse Group, an American technology company focused on pioneering the transition to zero-emission commercial vehicles, has adopted the Siemens Xcelerator portfolio of industrial software as it builds electric trucks for sustainable last-mile delivery.

Read more...
South Africa’s role in the AGI revolution
IT in Manufacturing
AI has found its way into general conversation after the emergence of large language models like ChatGPT. However, the discussion is increasingly turning to the search for Artificial General Intelligence (AGI), which could entirely change the game.

Read more...
Predictive asset performance management with ABB Ability Genix
ABB South Africa IT in Manufacturing
The ABB Ability Genix APM suite is a comprehensive asset management platform powered by AI, IIoT and model-based predictive data analytics. This enables a paradigm shift towards a more proactive and predictive asset management approach.

Read more...
Intelligent automation primed for $47 billion revenue by 2030
IT in Manufacturing
According to GlobalData, the intelligent automation market is set to grow from $18 billion in 2023 to $47 billion in 2030, driven by advancements in AI, particularly the rapid adoption of generative AI.

Read more...
Chocolate manufacturing with Siemens Xcelerator
Siemens South Africa IT in Manufacturing
Freybadi, one of the largest chocolate manufacturers in Indonesia and a trusted supplier of chocolate in the Asia-Pacific, Middle East and African regions, has adopted the Siemens Xcelerator portfolio of industry software to optimise its manufacturing and production processes.

Read more...
A CFO’s guide to unlocking the potential of gen AI
IT in Manufacturing
CFOs of leading global organisations understand that their role extends beyond mere financial oversight; they are pivotal in steering organisation-wide transformation, particularly in the realm of technological advancement.

Read more...
Higher level cybersecurity certification for Schneider Electric
Schneider Electric South Africa IT in Manufacturing
Schneider Electric’s EcoStruxure IT NMC3 platform has obtained a new and higher level of cybersecurity certification, making it the first data centre infrastructure management network card to achieve SL2) designation from IEC.

Read more...
Industrial automation edge AI
Vepac Electronics IT in Manufacturing
Teguar, a leading provider of industrial computer solutions, has announced an innovative partnership with Hailo, an AI chip maker renowned for its high-performance edge AI accelerators. This marks a significant step forward in Teguar’s mission to provide powerful and reliable computing solutions for a wide range of industries.

Read more...