Advanced industrial security appliance engineered to provide unparalleled protection for operational technology (OT) networks. Featuring a robust combination of NAT, Routing as well as Deep Packet Inspection (DPI) on common industrial protocols and Intrusion Detection / Intrusion Prevention it serves as a cornerstone for safeguarding both manufacturing and critical infrastructure against a myriad of cyberthreats.

Anybus Defender is Stateful Firewall

Stateful firewall keeps track of ongoing conversations between devices. It remembers the details of connections (like who started the conversation and if it’s allowed) and only lets data through if it matches an approved, ongoing connection or a set rule. This makes it smarter and more secure than a simple filter.

Deep Packet Inspection (DPI) is an important feature that looks beyond the TCP/UDP Ports and opens the contents of industrial protocols such as Modbus TCP, EtherNet/IP (CIP) and Siemens S7 protocols.

This enables use-cases where you can write a new set point for temperature, pressure, level of chemicals, etc., but you will not be allowed to set values over the maximum value defined in the firewall.

Anybus Defender includes a unique Packet Capture and Analysis for easy rule creation.
Don’t spend hours typing in DPI rules, let Anybus Defender do the work for you!  If rules / specific packet types are needed, they can be created by a user.

Perpetual License - DPI function never expires!

User Manual

Features and benefits

DPI/FW Perpetual License inc. 3Y support

Interfaces
Rugged Fan-less IP50 construction for tough environments with 1x WAN and 3x LAN Gigabit Ethernet ports plus 2 SFP ports for 2 additional RJ-45 or fibre optic connectivity with support for both multi-mode and single-mode fibre. A total or 6 physical segments with VLAN support for many more logical segments.

Deep Packet Inspection (DPI)
Anybus Defender supports popular industry standard protocols and can auto-learn industrial network traffic to minimize manual rule creation.

Intrusion Protection System (IPS)
Virtual Patching with integrated Snort and Suricata Intrusion Detection & Protection Systems. Customisable signatures.

Graphical User Interface (GUI)
Configuration via on board Web interface with use-case wizards for easy configuration. Create rules effortlessly with One-Click Easy Rule creation directly from firewall logs, alongside Floating Rules applicable across all interfaces.

Rich Network Security Controls
Simplified NAT Configuration facilitates the setup for single or multiple IP addresses, subnets, or transparent layer 2 firewalling, capable of bridging interfaces and filtering traffic.

Asset Discovery & Inventory
Network asset identification scanner supporting various industrial specific protocols and methods to discovery, query and investigate asset. Provides connected assets make, type, version and patch level details – with accuracy score.

Central Management
Optional Central Anybus Cybersecurity Console for management of a group of Defenders.

Technical Specifications

General

Net Weight (g): 1270 g
Current Consumption Max value at Vcc nom (mA): 1100mA
Input Voltage (V): 24VDC
Power Consumption (W): 26.4W
Operating Temperature °C Min: 0 °C
Operating Temperature °C Max: 50 °C
Warranty (years): 3

Certifications & Standards

CE: Yes
Protection Class IP: IP50

Physical Features

Contains Battery: No

Identification & Status

Brand: Anybus
Country of Origin: United States of America (the)
HS Code: 8517620000
Dual Usage: No
Export Control Classification Number (ECCN): 5A992.c
Item Number: ABD6024-DPIFW