EC: Allen-Bradley Stratix 5950 Security Appliance

Network Integration — Ethernet hardware: The Allen-Bradley Stratix 5950 security appliance uses Adaptive Security Appliance firewall and FirePOWER technology to identify, log or block potentially malicious traffic and enhance plant-floor security. This is a Control Engineering 2017 Engineers’ Choice Awards Finalist.


Most IT firewalls today cannot monitor threats on industrial protocols, which limits the ability to minimize security risks on the plant floor. The Allen-Bradley Stratix 5950 security appliance from Rockwell Automation uses new security technologies to help protect plant-floor systems.

The device uses Adaptive Security Appliance (ASA) firewall and FirePOWER technology to create a security boundary between cell/area zones or help protect a single machine, line or skid. This supports compliance with IEC 62443. The device also uses deep-packet-inspection (DPI) technology, which enables inspection of the Common Industrial Protocol (CIP) and other industrial protocols for the first time.

Combining ASA firewall, FirePOWER and DPI technology gives IT professionals the granular visibility and control they need to protect industrial networks. Users can now configure and enforce policies that help restrict potentially malicious firmware updates and program downloads. This helps ensure the integrity of plant-floor operations.

The Stratix 5950 security appliance also has a monitor-only mode in which the device is purely used for intrusion detection. Operations personnel can use this capability to monitor and log traffic flow. Any undesirable activity that is detected can help guide policy-making decisions, such as blocking websites with malicious content.

An optional subscription license is available with the Stratix 5950 security appliance. Similar to a PC-based anti-virus service, subscribers will receive ongoing threat and application-signature updates to help protect against the latest known security threats.

The Stratix 5950 security appliance includes four 1-gigabit Ethernet ports, and is available with copper-only or copper-and-fiber SFP slot options. The industrially hardened device is IP30 rated and can withstand electrical shocks, surges and noise. It can operate in temperatures ranging from -40 to 60 C.

Rockwell Automation, 

No comments
The Engineers' Choice Awards highlight some of the best new control, instrumentation and automation products as chosen by...
The System Integrator Giants program lists the top 100 system integrators among companies listed in CFE Media's Global System Integrator Database.
The Engineering Leaders Under 40 program identifies and gives recognition to young engineers who...
This eGuide illustrates solutions, applications and benefits of machine vision systems.
Learn how to increase device reliability in harsh environments and decrease unplanned system downtime.
This eGuide contains a series of articles and videos that considers theoretical and practical; immediate needs and a look into the future.
Make Big Data and Industrial Internet of Things work for you, 2017 Engineers' Choice Finalists, Avoid control design pitfalls, Managing IIoT processes
Engineering Leaders Under 40; System integration improving packaging operation; Process sensing; PID velocity; Cybersecurity and functional safety
Mobile HMI; PID tuning tips; Mechatronics; Intelligent project management; Cybersecurity in Russia; Engineering education; Road to IANA
This article collection contains several articles on the Industrial Internet of Things (IIoT) and how it is transforming manufacturing.

Find and connect with the most suitable service provider for your unique application. Start searching the Global System Integrator Database Now!

SCADA at the junction, Managing risk through maintenance, Moving at the speed of data
Flexible offshore fire protection; Big Data's impact on operations; Bridging the skills gap; Identifying security risks
The digital oilfield: Utilizing Big Data can yield big savings; Virtualization a real solution; Tracking SIS performance
click me