| | |

SecurityBridge Firewall From Pilz Now Also Protects Automation Networks That Include Devices From Third-Party Suppliers – Open for Manipulation-Proof Communication

PB-45-Pilz-SecurityBridge-400.jpg

May 25, 2021

With its new firmware, the SecurityBridge firewall now offers comprehensive protection for industrial automation networks. Not only does it protect the configurable safe small controllers PNOZmulti and the automation system PSS 4000, it also now enables control over data communication between any other subscribers outside of the Pilz range. The SecurityBridge was developed in line with the secure development process in accordance with the standard IEC 62443-4-1 and also respects the principle of “Zones and Conduits”.

“Packet recording” has been added to the extensive diagnostic functions. This can be used to record data communication between subscribers from the secured controller network and the unsecured network. Recording can be restricted to specific communication relationships to enable you to analyse data more efficiently. That saves you valuable time during diagnostics.

Protect virtual access to your machine as well

Physical access to machinery is clearly defined in the Machinery Safety Directive. For example, a safeguard on a gate ensures that a person cannot move within the danger zone until the machine is in a safe state. The SecurityBridge firewall makes sure that on-site operation is not disturbed by access via the network and that only authorised persons have access to the plant via the network. As a firewall it monitors communication with the controller and controls the data flow. You can also use SecurityBridge to store user rights; these define which staff members may access which data.

For example, if a safety gate is open, SecurityBridge prevents access to the plant via the network. So SecurityBridge combines the benefits of a firewall with extensive knowledge of the product to be protected. As a result, your plant’s IT system is thoroughly protected.

This is how to use SecurityBridge

SecurityBridge can be connected upstream of the PNOZmulti base unit or PLC controller PSSuniversal PLC. It acts as a VPN server, through which it is possible to establish a virtual private network (VPN) to one or more client PCs (configuration PC). The connection between PC and device is therefore protected. Only users with the relevant permission can make changes to a project’s configuration. This prevents unauthorised access to the secured network. In this way, data transmission between the Client PC and SecurityBridge is safe from eavesdropping and manipulation.

SecurityBridge also controls the process data traffic and monitors the integrity of the safety system. Changes in the check sum indicate that there are changes in the PNOZmulti and PSS 4000 projects.

 

Benefits at a glance:

  •    –   Protects against data manipulation through authentication and permission management
  •    –   Increases the availability of the plant because only the necessary data (authorised configuration and process data) is transferred
  •    –   Forwards process data with a low latency
  •    –   Detects unauthorised changes to the project by monitoring the check sum (CRC)
  •    –   Prevents unauthorised access because downstream devices are in a secured network
  •    –   Configuration changes to a project can only be performed by users who have the relevant permission

 

Technical features:

  •    –   Web-based user interface for easy configuration, diagnostics and maintenance
  •    –   Connection to the central authentication system via RADIUS
  •    –   Continuous updates, independently of the control system
  •    –   Integral digital inputs and outputs to activate the VPN tunnel, for example
  •    –   VPN server for building a VPN tunnel for safe transfer of data
  •    –   USB interface for saving and restoring the configuration on a USB memory.
  •    –   LED display for error messages and diagnostics

Important_Links_Bar.jpg

https://www.pilz.com/en-US/eshop/00103002137125/SecurityBridge#news

 

Related Articles

Network Infrastructure Featured Product Spotlight

PBUS 14 Panduit logo 400

This webinar presented by Beth Lessard and Keith Cordero will be highlighting three Panduit solutions that will optimize network equipment and cabling to ensure that your spaces are efficiently and properly managed to support ever-evolving business needs of today and beyond. Products that will be featured include PanZone TrueEdge Wall Mount Enclsoure, Cable Managers, and Adjustable Depth 4-Post Rack.

REGISTER HERE


Editor’s Pick: Featured Product News

Siemens: SIMOVAC Non-Arc-Resistant and SIMOVAC-AR Arc-Resistant Motor Controllers

The Siemens SIMOVAC medium-voltage non-arc-resistant and SIMOVAC-AR arc-resistant controllers have a modular design incorporating up to two 12SVC400 (400 A) controllers, housed in a freestanding sheet steel enclosure. Each controller is UL 347 class E2, equipped with three current-limiting fuses, a non-load-break isolating switch, and a fixed-mounted vacuum contactor (plug-in type optional for 12SVC400). The enclosure is designed for front access, allowing the equipment to be located with the rear of the equipment close to a non-combustible wall.

Read More


Sponsored Content
Electrify Your Enterprise

Power is vital to production, and well-designed control cabinets are key. Allied Electronics & Automation offers a comprehensive collection of control cabinet solutions including PLCs, HMIs, contactors, miniature circuit breakers, terminal block connectors, DIN-rail power supplies, pushbutton switches, motor starters, overloads, power relays, industrial Ethernet switches and AC drives engineered to keep your operations running safely, reliably and efficiently.

Learn more HERE.


Products for Panel Builders

  • Celduc: New SMQR Quad Series Solid State Relay

    Celduc: New SMQR Quad Series Solid State Relay

    Celduc’s Solid State Relays are designed for industrial applications where fast and long electrical life in switching is required. Celduc has recently launched a new range of Quad AC Output Solid State Relay. With this new SMQR Series you will get four independently controlled AC output Solid State Relays in an industry standard package. With the models… Read More…

  • Brady: M211 Portable Bluetooth Label Printer

    Brady: M211 Portable Bluetooth Label Printer

    Design. Preview. Print. All from your phone. The M211 portable Bluetooth label printer is a tough, compact labeler that belongs on any jobsite. Seamlessly design, preview and print labels right from Brady’s Express Labels Mobile app for iOS and Android. Create custom labels from your phone’s familiar keyboard via ultra strong BLE Bluetooth technology. Maximize… Read More…