mGuard

Industrial mGuard routers of production Phoenix Contact protect PCS networks by means of the firewall. The optional VPN function gives the chance to create safe connection with remote objects or machines through public service networks.

The industrial firewalls executed in different formats enter a product line of mGuard: for fastening on a DIN rail, rack-mountings, in the form of a payment and mobile option. MGuard firewalls can work in the transparent mode, and, therefore, are invisible to systems both inside, and outside, executing at the same time full traffic observation. The integrity scanner for industrial networks CIFS Integrity Monitoring supplements mGuard line. Among main advantages of mGuard it is possible to select: saturation of the offered security functions; ease of integration; support of mechanisms of reservation and ease of use.

The solutions mGuard are applied during creation of the protected solutions under needs of an APCS. Within the project the functionality of "User Firewall" of the industrial mGuard firewall which allows to undergo authorization of the external user in the fayervol by means of password entry can be complemented with bestokenny authentication of Swivel. At the expense of the carried-out docking – thanks to embedding of Swivel in authentication process – the possibility of intervention in the data transfer protocol within APCS networks is excluded. Including by carrying out the MITM attacks ("the person in the middle" – Man in the middle). The communication channel compromise in an APCS is extremely dangerous by risk of removal or distortion of information that it in turn can lead to serious failures in work of industrial complex.

Depending on requirements of Phoenix Contact offers different hardware and the software for security of network:

• The high level of security with the Stateful-Inspection firewall and function of deep check of packets
• Simple and safe remote service thanks to the VPN connection and the IPsec protocol
• High performance thanks to capacity up to 2 Gbps
• Different forms of execution: as the compact module for installation on the bearing rail, in the PCI format or as the portable device with a power supply through USB
• Devices are scaled according to requirements of production thanks to expansion of licenses and functionality