New Modbus-IDA certified security solution addresses US government security concerns.
Byres Security and MTL Instruments have introduced the Tofino Modbus TCP Enforcer loadable security module (LSM), which performs detailed analysis and filtering of all Modbus TCP messages, and is certified by Modbus-IDA. It allows owners of control and scada systems to regulate Modbus network traffic to a level of detail that was previously not possible, thereby increasing network security, reliability and performance of critical systems.
‘Deep packet’ or ‘content’ inspection for web e-mail or traffic has been offered in IT firewalls for several years, but nothing has been available for the process control and scada environment. Modbus traffic could either be allowed or blocked by a standard firewall, but fine-grained control was impossible. And since the smooth flow of Modbus TCP traffic is critical to the average industrial facility, engineers usually opted to let everything pass and take their chances with security. Industry experts have been urgently calling for better control of scada protocols.
Recently, a major US government agency warned: “Vulnerability has been identified within the firmware upgrade processes used in control systems deployed in critical infrastructure and key resources (CIKR). Development of a mitigation plan is required to protect the nation’s CIKR through vulnerability mitigation steps that include blocking network firmware upgrades with appropriate firewall rules.”
Two major energy companies and a transportation company have tried the Tofino ModbusTCP Enforcer LSM and are excited by how it allows them to follow government guidelines and enhance both system security and stability. Modbus functions can now be restricted in numerous ways:
* Blocking all firmware upgrades while allowing normal HMI traffic.
* Tailoring appropriate Modbus access permissions to PLCs for different stations.
* Restricting Modbus access permissions to specific memory locations in a controller.
* Enforcing read-only access to safety instrumented systems.
The complete Tofino industrial security solution consists of three core components:
* Tofino Security Appliance – an industrially hardened and certified appliance that is installed in front of individual and/or zones of HMI, DCS, PLC or RTU control devices that require protection.
* Tofino LSM – a variety of software plug-ins providing security services such as firewall, secure asset management and VPN encryption. Each LSM is downloaded into the security appliances to allow them to offer customisable security functions, depending on the requirements of the control system.
* Tofino Central Management Platform – a centralised management system and database for monitoring, supervision and configuration of each security appliance. One CMP can manage one or more LSMs.
ESG as a growth lever RS South Africa
IT in Manufacturing
Leading organisations are treating ESG not as a compliance obligation but as a practical tool for operational efficiency, supply chain resilience and business performance, with data and collaboration central to unlocking its value.
Read more...Preparing Africa’s data centres for the demands of autonomous AI Schneider Electric South Africa
IT in Manufacturing
Africa’s data centre infrastructure must evolve significantly to support agentic AI workloads, with GPU-intensive computing, advanced cooling and reliable power demanding a fundamentally different approach to facility design and investment.
Read more...Virtualising the control room to reshape building management systems Schneider Electric South Africa
IT in Manufacturing
Schneider Electric explains how virtualising building management systems frees facilities teams from ageing hardware, delivers stronger cybersecurity and enables portfolio-wide control from a single interface.
Read more...AI infrastructure solutions for data campus Schneider Electric South Africa
IT in Manufacturing
Schneider Electric and Motivair deliver more than $290 million in power and cooling infrastructure for TeraWulf’s AI-ready Lake Mariner data campus.
Read more...Africa’s data centre evolution: AI, edge computing and new energy demands
IT in Manufacturing
With less than half a gigawatt of active white space capacity serving over a billion people, Africa’s data centre sector faces a stark gap that AI’s surging power and cooling demands are set to widen. Vertiv and Open Africa Data Centres unpack how modularity, edge computing and smarter energy strategies could change the equation.
Read more...Luna Rossa partners with Siemens for 38th America’s Cup Siemens South Africa
IT in Manufacturing
Siemens details how Luna Rossa is using digital engineering and simulation tools, from CAD to structural optimisation, to design a faster yacht for the 38th America’s Cup.
Read more...AI is raising South Africa’s cybersecurity stakes
IT in Manufacturing
As AI accelerates both the sophistication and scale of cyber threats, South African organisations face significant gaps in cloud security, data governance and identity management that need to be addressed before AI capabilities are further embedded into business operations.
While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.
printer friendly version