INS-T3011 is Industrial Control System Firewall which is developed by Primestone independently for security status detection. The firewall supports Modbus TCP、OPC、IEC 60870-5-104、IEC 61850 MMS、Siemens S7 , with instruction-level , "4S" depth protection patented technology for industrial control protocol, and supports kinds of access control policies, VPN, NAT, security and log audit function, can resist attack, and protect the device itself and network system.
Featuring industrial hardware, fan-less, redundant power supply, DIN-Rail mounting, wide operating temperature，independent intellectual property, no need to change current network structure ,fast deployment, convenient management, applicable to SCADA、DCS、PCS、PLC industrial control system. Widely used in various industrial environments such as industrial control automation, traffic control automation, building automatic control systems, mining automatic control systems, oil field control automation, control automation of hydro-power stations, control automation of electric power systems, military industry, etc.
Key Features
3 x 1000Base-TX（port 1~2 support Bypass）, 2 x RS232/485 serial port |
Customized software module， flexible extension base on application |
Adopting industrial control protocol, instruction-level approval of the "4S" depth protection patented technology, deeply analyze industrial data integrity, function code, address range and process parameter range |
Support Modbus TCP、OPC、IEC 60870-5-104、IEC 61850 MMS、Siemens S7 |
Redundant dual power supply, DC 24V (9~36V), resist reverse connection, over currency protection |
-40℃～+85℃ operating temperature, adaptive to harsh environments |
IP40, high strength metal shell, fan-less, low power consumption |
Specification
Port Information | Port：3 x 10/100/1000Base- TX, RJ45; port 1~2 support bypass function; two RS232 /485 serial interfaces |
USB Port: one USB2.0 port |
Power Interface：8 PIN,5.08mm , terminal block |
Mechanical Structure | Dimensions：154 mm(H)× 112 mm(D)× 36 mm(W) |
Mounting ：DIN-Rail mounting |
Weight：<1.3kg |
Protection Grade：IP40 |
Environmental Requirement | Operating Temperature：-40℃～ +85℃ |
Storage Temperature：-40℃～ +85℃ |
Relative Humidity：5% ～ 95% (non-condensation) |
MTBF : 500000 h |
Switching Properties | Backplane bandwidth：56Gbps |
Throughput capacity：6Gbps |
Buffer Capability：4.1Mbits |
Package forwarding rate：4.4Mpps |
Power Requirement | Operating Voltage：DC 9～36V |
Power Consumption：Full-load<8W |
Functional Features | Working hierarchy : transparent、routing、mixture working mode |
Working mode：test、protection、Bypass |
Route switch：VLAN、QoS、flow control，NTP、FTP、SNMP protocols，3 layer route |
management：CLI、HTTPs Web、SNMP、SSH、USB security management |
diagnosis：LEDs（power supply、system、function、port、data）、power-lossing alarm、log and audit |
Reliability ：industrial hardware、STP/VRRP redundant protocol、host and backup standby system |
Firewall | state inspection firewall，support access control based on multiple mechanism，resistance of DoS attack，attack detection，IP/MAC binding，anti-fraud，storm resistance，authentication and audit. |
Security Features | Industrial protocols：ModbusTCP、OPC、IEC 60870-5-104、IEC 61850 MMS、S7，customized self-defined protocol development |
Industrial protocol protection： Industrial protocol authorizing system“4S” protection patent，support industrial protocol integrity, function code、address range and read/write permission、technological parameter range protection |
NAT: Network address switch NAT，1:1 / 1：n NAT |
VPN: IPsec / SSL / L2TP |
Self-security: virus prevention、D-DoS、permission and hierarchical management |
Indicator Light | Power indicator：P1、P2 |
System Running Indicator：SYS |
Alarm Status Indicator：ALM |
Port Status Indicator：ACT/SPD（1～3）, serial port T1～T2 |
Warranty | 5 Years |
Order Information
Main device
No. 01.09.0002 | INS-T3011-00: firewall main device，including standard boundary firewall software system, without deep analysis module of industrial protocol |
No. 01.09.0010 | INS-T3011-01:firewall main device，including standard boundary firewall software system，including 1 kind of deep analysis module of industrial protocol |
No. 01.09.0011 | INS-T3011-02:firewall main device，including standard boundary firewall software system，including 2 kinds of deep analysis module of industrial protocol |
No. 01.09.0012 | INS-T3011-03:firewall main device，including standard boundary firewall software system，including 3 kinds of deep analysis module of industrial protocol |
No. 01.09.0013 | INS-T3011-04:firewall main device，including standard boundary firewall software system，including 4 kinds of deep analysis module of industrial protocol |
No. 01.09.0014 | INS-T3011-99:firewall main device，including standard boundary firewall software system，including all kinds of deep analysis module of industrial protocol |
Deep analysis module of industrial protocol：
① Modbus deep analysis protection module
② OPC deep analysis protection module
③ IEC 60870-5-104 deep analysis protection module
④ S7（Profinet）deep analysis protection module
⑤ VPN module