MTL Industrial Security

Supervisory Control and Data Acquisition (SCADA) and industrial control systems have long been considered immune to the cyber-attacks suffered by corporate information systems. The move to open standards such as Ethernet TCP/IP and web technologies has seen control systems affected by a growing number of both malicious and non-malicious network security events impacting critical infrastructure and manufacturing industries.You may never be attacked by a serious hacker, but typical control networks are extremely vulnerable to simple day to day security and reliability issues. Human errors, poor network segmentation and unprotected points of entry into the network, ‘soft’ targets such as un-patched PCs and vulnerable PLCs, can result in significant production losses and even safety issues.

Traditional firewalls are too complex for most security professionals to configure correctly and are even harder to set up properly on the plant floor. Control devices and protocols offer limited authentication, integrity or confidentiality mechanisms and can be completely controlled by any individual that can “ping” the device. Nor can they be easily patched or have security features added to them even when security vulnerabilities are discovered.

The MTL Tofino™ Industrial Security Solution is much more than just a firewall. It has revolutionised the approach of control system cybersecurity by introducing ‘Enforcer modules’ for popular Industrial Control System protocols in IEC 62443 ‘Zones’ and ‘Conduits’, providing a ‘defence in depth’ architecture. The system changed the way industrial ethernet security is managed by providing an intrinsically secure solution right out of the box. This provides a simple, effective cybersecurity solution for control and automation engineers which does not require IT skills for configuration and installation. The Tofino Configurator (TC) platform will configure, monitor and manage the functions of each remote Tofino™ Appliance so that it can be automatically tuned to meet the security needs of the devices it is protecting.

The 9202-ETS is our new second generation Tofino™ solution that continues to provide the highest level of network security with the great benefits of its predecessor with added features for further customer value. It is exceptionally easy to install compared with alternative systems and includes the latest configurator software to protect industrial networks from cyber-security vulnerabilities. This maximises plant uptime and process availability while protecting it from a network attack.

The MTL Tofino™ security solution is a package consisting of the 9202-ETS MTL Tofino security appliance hardware, 9211-TC Tofino Configurator (TC) and any additional Loadable Security Modules (LSMs) if required. Select the 9202-ETS icon below for more information.

This latest solution is backwards compatible with its predecessor the 9211-ET and the CMP software. As part of the second generation release a migration path has been developed to support our existing installed base. Please contact our technical support team for more information.