| | |

SecurityBridge Firewall From Pilz Now Also Protects Automation Networks That Include Devices From Third-Party Suppliers – Open for Manipulation-Proof Communication


May 25, 2021

With its new firmware, the SecurityBridge firewall now offers comprehensive protection for industrial automation networks. Not only does it protect the configurable safe small controllers PNOZmulti and the automation system PSS 4000, it also now enables control over data communication between any other subscribers outside of the Pilz range. The SecurityBridge was developed in line with the secure development process in accordance with the standard IEC 62443-4-1 and also respects the principle of “Zones and Conduits”.

“Packet recording” has been added to the extensive diagnostic functions. This can be used to record data communication between subscribers from the secured controller network and the unsecured network. Recording can be restricted to specific communication relationships to enable you to analyse data more efficiently. That saves you valuable time during diagnostics.

Protect virtual access to your machine as well

Physical access to machinery is clearly defined in the Machinery Safety Directive. For example, a safeguard on a gate ensures that a person cannot move within the danger zone until the machine is in a safe state. The SecurityBridge firewall makes sure that on-site operation is not disturbed by access via the network and that only authorised persons have access to the plant via the network. As a firewall it monitors communication with the controller and controls the data flow. You can also use SecurityBridge to store user rights; these define which staff members may access which data.

For example, if a safety gate is open, SecurityBridge prevents access to the plant via the network. So SecurityBridge combines the benefits of a firewall with extensive knowledge of the product to be protected. As a result, your plant’s IT system is thoroughly protected.

This is how to use SecurityBridge

SecurityBridge can be connected upstream of the PNOZmulti base unit or PLC controller PSSuniversal PLC. It acts as a VPN server, through which it is possible to establish a virtual private network (VPN) to one or more client PCs (configuration PC). The connection between PC and device is therefore protected. Only users with the relevant permission can make changes to a project’s configuration. This prevents unauthorised access to the secured network. In this way, data transmission between the Client PC and SecurityBridge is safe from eavesdropping and manipulation.

SecurityBridge also controls the process data traffic and monitors the integrity of the safety system. Changes in the check sum indicate that there are changes in the PNOZmulti and PSS 4000 projects.


Benefits at a glance:

  •    –   Protects against data manipulation through authentication and permission management
  •    –   Increases the availability of the plant because only the necessary data (authorised configuration and process data) is transferred
  •    –   Forwards process data with a low latency
  •    –   Detects unauthorised changes to the project by monitoring the check sum (CRC)
  •    –   Prevents unauthorised access because downstream devices are in a secured network
  •    –   Configuration changes to a project can only be performed by users who have the relevant permission


Technical features:

  •    –   Web-based user interface for easy configuration, diagnostics and maintenance
  •    –   Connection to the central authentication system via RADIUS
  •    –   Continuous updates, independently of the control system
  •    –   Integral digital inputs and outputs to activate the VPN tunnel, for example
  •    –   VPN server for building a VPN tunnel for safe transfer of data
  •    –   USB interface for saving and restoring the configuration on a USB memory.
  •    –   LED display for error messages and diagnostics




Related Articles

Network Infrastructure Featured Product Spotlight

PBUS 14 Panduit logo 400

This webinar presented by Beth Lessard and Keith Cordero will be highlighting three Panduit solutions that will optimize network equipment and cabling to ensure that your spaces are efficiently and properly managed to support ever-evolving business needs of today and beyond. Products that will be featured include PanZone TrueEdge Wall Mount Enclsoure, Cable Managers, and Adjustable Depth 4-Post Rack.


Editor’s Pick: Featured Product News

Siemens: SIMOVAC Non-Arc-Resistant and SIMOVAC-AR Arc-Resistant Motor Controllers

The Siemens SIMOVAC medium-voltage non-arc-resistant and SIMOVAC-AR arc-resistant controllers have a modular design incorporating up to two 12SVC400 (400 A) controllers, housed in a freestanding sheet steel enclosure. Each controller is UL 347 class E2, equipped with three current-limiting fuses, a non-load-break isolating switch, and a fixed-mounted vacuum contactor (plug-in type optional for 12SVC400). The enclosure is designed for front access, allowing the equipment to be located with the rear of the equipment close to a non-combustible wall.

Read More

Sponsored Content
Electrify Your Enterprise

Power is vital to production, and well-designed control cabinets are key. Allied Electronics & Automation offers a comprehensive collection of control cabinet solutions including PLCs, HMIs, contactors, miniature circuit breakers, terminal block connectors, DIN-rail power supplies, pushbutton switches, motor starters, overloads, power relays, industrial Ethernet switches and AC drives engineered to keep your operations running safely, reliably and efficiently.

Learn more HERE.

Products for Panel Builders

  • LUTZE: Expanding LCIS Relay Product Portfolio

    LUTZE: Expanding LCIS Relay Product Portfolio

    LUTZE has expanded its electromechanical LCIS relay portfolio with 12 units offering additional changeover contacts. New additions to the product portfolio are the LCIS 2 and LCIS 3 relay series. LCIS 2 series has units with 1 or 2 changeover contacts, and the LCIS 3 series has units with 4 changeover contacts. All new relay… Read More…

  • MENNEKES: SPEC Grade Sloped-Top Disconnects Are Now Available in 200A and 400A

    MENNEKES: SPEC Grade Sloped-Top Disconnects Are Now Available in 200A and 400A

    MENNEKES has recently expanded its SPEC Grade Series of stainless steel motor disconnects to include 200A and 400A models. These units are the first on the market to combine these amperages in a sloped-top stainless steel enclosure. Compared to traditional knife-blade alternatives, these SPEC Grade units feature a UL 98 Listed rotary switch, providing a… Read More…