MetaDefender Industrial Firewall & IPS™

Additional Info

CompanyOPSWAT
Websitehttp://www.opswat.com
Company size (employees)500 to 999
Headquarters RegionNorth America
Type of solutionHardware

Overview

In numerous industrial OT environments, the flat network structure coupled with widespread use of basic username/password credentials poses a significant security challenge. These environments often lack adequate internal security measures, leaving critical OT assets vulnerable to unauthorized access and misuse.

MetaDefender Industrial Firewall & IPS serves as a pivotal defense mechanism, prioritizing the protection of vital OT hardware. By implementing meticulously detailed device access policies and delineating device access zones, our solution establishes a robust security perimeter within OT networks.

Functioning as an industrial security appliance and intelligent Intrusion Prevention System (IPS), MetaDefender Industrial Firewall & IPS is strategically positioned in front of industrial endpoints. It safeguards mission-critical devices such as PLCs, VFDs, and DCSs, as well as other network-connected assets. Operating seamlessly as a transparent OSI Layer-2 bridge, our solution dynamically learns and enforces the normal operational patterns within your plant environment while actively neutralizing threats in real time.

In essence, MetaDefender Industrial Firewall & IPS fortifies OT networks against potential breaches and malicious activities, ensuring the uninterrupted and secure operation of critical industrial assets.

Key Capabilities / Features

Easy to deploy and scale: Installs quickly and seamlessly at the cabinet level, targeting the most critical and vulnerable assets first


Intuitive to operate: Starts working right away with no reconfiguration of existing network segmentation and subnet address scheme


Native support for industrial protocols: Including TCP, UDP, Modbus TCP, Ethernet/IP, S7, DNP3, BACnet, SLMP, FINS, EGD. Native Support for GE Protocols such as iFIX and Cimplicity systems (GEADL, GESDI, GESRTP)


Eliminates Critical Threats: Including unknown nodes or clients, rogue scanning or communication, unscheduled reconfiguration or update, very high message rates (DoS), and fake devices (IP spoofing)


How we are different

Comprehensive OT Protocol Support and Tailored GE Compatibility: Our solution offers native support for a diverse range of OT protocols, ensuring seamless integration across industrial environments. Additionally, with proprietary support for GE protocols, it addresses specific industrial needs and enhances compatibility with GE devices.


Advanced Threat Detection and Continuous Operation Assurance: Featuring deep OT packet inspection capabilities, our product sets a new standard in security by effectively identifying and neutralizing potential threats. Moreover, with a built-in network bypass mechanism and operating as a Layer 2 transparent bridge, it ensures uninterrupted operation in the face of failure or power loss, enhancing the reliability and resilience of OT networks.


Streamlined Deployment and Enhanced Operational Efficiency: Setting itself apart from competitors, our solution eliminates the need for additional adaptations or plugins due to its comprehensive OT protocol support. This streamlines deployment processes and enhances operational efficiency, providing a seamless and reliable security solution for industrial environments.