- May 19, 2017
- MB Connect Line
With mbNETFIX presents MB Connect Line a new firewall that has been developed for use in industrial plants. It provides protection against external attacks and fulfills the special requirements of industrial communication such as segmentation, coupling of different networks as well as the control of communication on the packet level. Two operating modes are available. In bridge mode, mbNETFIX can be integrated into existing networks, which are located in the same network segment and protects the data exchange between WAN and LAN via packet filters.
The firewall is integrated transparently and does not have its own IP address. In gateway mode, WAN and LAN each receive a defined IP address and thus segments the networks. Functions such as NAT and forwarding allow traffic to be routed to downstream networks. The packet filter is also available and regulates the data exchange between WAN and LAN. A special feature is the integrated learning mode. The firewall allows unrestricted communication and records all connections. The user subsequently decides, based on the acquired packet table, which connections are authorized among the IP devices and which are undesirable and are therefore blocked.
The concept is based on "Security by Design" right from the start. In order to keep the attack vectors as small as possible, a web interface for configuration was deliberately omitted. Instead, the firewall is configured locally via the USB port. A SSH interface is also available for IT experts. The automation firewall fulfills the special requirements of industrial communication at the factory level.