Key Takeaway
Advantech, a leading supplier of industrial communication solutions, is introducing its new firmware called Security Pack for its industrial managed Ethernet switch product line,defending users from malicious attacks and confidential information leakage.
Taipei, Taiwan, May 3, 2018—Advantech, a leading supplier of industrial communication solutions, is introducing its new firmware called Security Pack for its industrial managed Ethernet switch product line,defending users from malicious attacks and confidential information leakage.
As the Industrial IoT (IIoT) expands, more devices are being connected to networks. This attribute to the fact that users are gradually out of control of the tremendous amount of connected device. Eventually, a lack of access management becomes an open door for hackers. Common threats such as information theft, DNS spoofing and denial-of-service attach can cause a tremendous lost. Unencrypted raw data, a lack of IP and MAC address control, and the short of network access authentication mechanism are usually the root cause. With Advantech Security Pack, data security can be highly enhanced because of the following features.
Compliant with IEC 62443-4-2 level 2 cybersecurity standard, the Security Pack supports enhanced network security features such as access control list, network access control, ARP spoofing prevention, IP source guard and login authentication.
Firmware Feature
Access Control List (ACL): Legal host with known IP and MAC addresses is bundled on a specific port to access the network.
Network Access Control: IEEE 802.1X This feature provides an authentication mechanism to devices wishing to access a LAN or WLAN.
IP Security: DHCP Snooping When DHCP servers are allocating IP addresses to clients on a LAN, DHCP snooping can be configured on LAN switches to prevent malicious or malformed DHCP traffic or communication with rogue DHCP servers.
IP Security: ARP Spoofing prevention
ARP spoofing may allow an attacker to intercept data frames on a network or even modify or stop traffic. Often, this attack is used as an opening for other attacks, such denial of service, man-in-the-middle, or session-hijacking attacks.
ARP spoofing may allow an attacker to intercept data frames on a network or even modify or stop traffic. Often, this attack is used as an opening for other attacks, such denial of service, man-in-the-middle, or session-hijacking attacks.
IP Security: IP source guard
Same as ACL, this feature permits IP traffic from known IP addresses, dropping all other traffic to prevent spoofing attacks.
Same as ACL, this feature permits IP traffic from known IP addresses, dropping all other traffic to prevent spoofing attacks.
Login authentication: This feature provides a cryptographic network protocol for operating network services securely over an unsecured network.
All Advantech managed Ethernet switches support Security Pack. For more information of the security solution, please visit Advantech website or contact us at ICG.Support@advantech.com.tw.
