Advanced industrial security appliance engineered to provide unparalleled protection for operational technology (OT) networks. Featuring a robust combination of NAT, Routing, Deep Packet Inspection (DPI), and VPN Server and Client functionalities it protects OT assets and can build secure network connectivity over wide area networks.

Anybus Defender is Stateful Firewall

Stateful firewall keeps track of ongoing conversations between devices. It remembers the details of connections (like who started the conversation and if it’s allowed) and only lets data through if it matches an approved, ongoing connection or a set rule. This makes it smarter and more secure than a simple filter.

Deep Packet Inspection (DPI) is an important feature that looks beyond the TCP/UDP Ports and opens the contents of industrial protocols such as Modbus TCP, EtherNet/IP (CIP) and Siemens S7 protocols.

This enables use-cases where you can write a new set point for temperature, pressure, level of chemicals, etc., but you will not be allowed to set values over the maximum value defined in the firewall.

Anybus Defender includes a unique Packet Capture and Analysis for easy rule creation.
Don’t spend hours typing in DPI rules, let Anybus Defender do the work for you!  If rules / specific packet types are needed, they can be created by a user.

Perpetual License - DPI function never expires!

User Manual

Features and benefits

PRO/FW Perpetual License inc. 3Y support

Interfaces
Rugged Fan-less IP50 construction for tough environments with 1x WAN and 3x LAN Gigabit Ethernet ports for 4 physical segments with VLAN support for many more logical segments.

OT-SDWAN
Advanced Virtual Private Networking (VPN) supporting modern protocols including WireGuard® as well as legacy OpenSSL & IPsec methods for compatibility. Traffic shaping and routing functions including support for RIPv1 & v2, BGPv4 protocols

High Availability Redundancy
Possibility to have 2 hardware defenders to run in active-standby mode for seamless failover for networks where maximum uptime is required.

Deep Packet Inspection (DPI)
Anybus Defender supports popular industry standard protocols and can auto-learn industrial network traffic to minimize manual rule creation.

Intrusion Protection System (IPS)
Virtual Patching with integrated Snort and Suricata Intrusion Detection & Protection Systems. Customisable signatures.

Graphical User Interface (GUI)
Configuration via on board Web interface with use-case wizards for easy configuration. Create rules effortlessly with One-Click Easy Rule creation directly from firewall logs, alongside Floating Rules applicable across all interfaces.

Rich Network Security Controls
Simplified NAT Configuration facilitates the setup for single or multiple IP addresses, subnets, or transparent layer 2 firewalling, capable of bridging interfaces and filtering traffic.

Asset Discovery & Inventory
Network asset identification scanner supporting various industrial specific protocols and methods to discovery, query and investigate asset. Provides connected assets make, type, version and patch level details – with accuracy score.

Central Management
Optional Central Anybus Cybersecurity Console for management of a group of Defenders.

Technical Specifications

General

Net Weight (g): 1270 g
Current Consumption Max value at Vcc nom (mA): 1100mA
Input Voltage (V): 24VDC
Power Consumption (W): 26.4W
Operating Temperature °C Min: 0 °C
Operating Temperature °C Max: 50 °C
Warranty (years): 3

Certifications & Standards

CE: Yes
Protection Class IP: IP50

Physical Features

Contains Battery: No

Identification & Status

Brand: Anybus
Country of Origin: United States of America (the)
HS Code: 8517620000
Dual Usage: No
Export Control Classification Number (ECCN): 5A992.c
Item Number: ABD6004-PROFW