INSYS updates security on industrial routers
July 9, 2013 - INSYS extended the functional range of its industrial routers with security features included in firmware update 2.11. The firmware follows the current recommendations of the German Federal Office for Information Security (Bundesamt für Sicherheit in der Informationstechnik, BSI) and the white paper of the German Association of Energy and Water Industries (Bundesverband der Energie- und Wasserwirtschaft, BDEW).
Routers which not only allow for remote access but also establish connections for data transfer pose a potential threat to application and network security. These devices are often installed in remote locations, such as photovoltaic systems which cannot be sufficiently protected against physical access. Of all bad scenarios, theft of the router is the least to worry about. A much greater danger is the possibility of professionals gaining access to company IT networks, disrupting these and stealing or even manipulating data.
Even before the update, INSYS icom’s routers were equipped with a wide range of security features, including VPN functionality (encryption, mutual authentication) and a firewall (white list). If a router is reset to factory settings, previous configurations and log files can no longer be accessed or changed. After a certificate is integrated, it can never be read out again. Moreover, users can define access options to the configuration interface: local configuration can be disabled completely.
With the firmware version 2.11, INSYS icom adds many new security functions established in the IT world to its routers. Key features are the prevention of unauthorised access to the device and the sending of user-specific messages via email, SMS, or SNMP in case of security-critical events. These events include unsuccessful dial-in attempts, plugging in or unplugging cables at the switch, unsolicited traffic, or changes to the configuration. Additionally, INSYS icom routers feature a MAC firewall that blocks data packets from unknown devices.
Physik Instrumente releases A-311 PIglide air bearing stage
A-311 PIglide IS Series planar air bearing stage delivers extremely precise and vibration-free motion.
AAEON upgrades to 6th Generation Intel Core Processors
COM-SKUC6 and COM-SKHB6 COM Express modules, IMBM-Q170A, EMB-H110B, EMB-Q170A/Q170B industrial motherboards, and FWS-7820 network appliance are...
GE announces SBC328 GE VPX single board computer
The SBC328 GE Rugged 3U VPX single board computer (SBC) is based on 6th Generation Intel Core technology (“Skylake”).
Congatec introduces conga-TC170 COM Express computers
conga-TC170 computers are based on sixth generation Intel Core processors (codename Skylake).
Amplicon announces Impact-T 400 rugged tower PC
Impact-T 400 has a lightweight fanless aluminum chassis designed for optimal heat dissipation.
ISA Security Compliance Institute updates cybersecurity certifications
New version of EDSA and SSA certification requirements to become effective 1 February 2016.
Harting adds Profinet to all products
All existing and new products for Ethernet applications from Harting conform with the requirements for the use of PROFINET.
Mining Manufacturing Data - Leveraging Trapped Data for Results
By John Rinaldi
Investing in new control and automation systems is an expensive and disruptive activity, particularly when the majority of the...