Introducing OPSWAT Threat Intelligence Similarity Search Learn More


OPSWAT OTfuse

Industrial Firewall for OT/ICS Assets




Completely transparent IPS/IDS appliance for critical OT assets

Protect the most critical OT assets first, by applying highly granular device access policies, and enforcing device access zones.

Protection without costly redesign or segmentation projects

Slides seamlessly inline at the cabinet level of OT/ICS assets, without a need for network segment changes or firewall configurations.

OPSWAT OTfuse is a crucial, last line of defense for OT assets that need it most

Bringing Zero-Trust Cybersecurity to the Production Floor

Simple

Establishes a virtual perimeter around each critical OT asset, complementing industrial firewalls deployed higher up in the network.

Automated

Self-learns your OT network subnets and automatically enforces which device and protocols are permitted to communicate with the OT asset.

Effective

Eliminates unauthorized device config changes, resets, reads, and logic update preventing both malicious intrusions and unintentional access.

SCHEDULE A DEMO

Your Last Line of Defense for Critical OT Assets

OPSWAT OTfuse is an intelligent Intrusion Detection and Prevention System (IDPS) for mission-critical
PLCs, VFDs, DCSs, and other industrial assets.

Easy to Deploy & Scale

Installs quickly and seamlessly at the cabinet level, targeting the most critical and vulnerable assets first

Intuitive to Operate

Starts working right away with no reconfiguration of existing network segmentation and subnet address scheme

Native Support for Industrial Protocols

Including TCP, UDP, Modbus TCP, Ethernet/IP, S7, DNP3, BACnet, SLMP, FINS, EGD

Native Support for GE Protocols

Including iFIX and Cimplicity systems (GEADL, GESDI, GESRTP)

Eliminates Critical Threats

Including unknown nodes or clients, rogue scanning or communication, unscheduled reconfig or update, very high message rates (DoS), and fake devices (IP spoofing)


Dedicated Protection for Critical Industrial Appliances

OTfuse vs. Other OT IDPS solutions vs. Firewalls:

Easy to deploy, transparent security for PLCS, RTUs, and critical industrial appliances

Feature
OTfuse
Other Industrial IDPS solutions
Firewalls
Native OT protocol support
Partial
Deep OT packet inspection
Partial
Network bypass in case of failure or power loss
Layer 2 transparent bridge
Proprietary support of GE protocols
Hardware key (USB) for admin access
As an option

Need to Protect GE Appliances?

Through a licensing agreement with GE, OPSWAT OTfuse supports proprietary GE protocols, as well as GE iFIX and GE CIMPLICITY communications. OPSWAT OTfuse is the next-gen upgrade for aging GE OpShield appliances.

Solutions for Every Industrial Enterprise

OPSWAT OTfuse is available in Standard and Lite form factors, as well as
dedicated configurations for OT networks that use GE iFIX and GE
CIMPLICITY communication protocols.

OTfuse Standard

OTfuse GE

OTfuse Lite

Protects up to 15 appliances,
DIN rail

Protects GE iFIX & CIMPLICITY,
DIN rail / 1U rack

Protects up to 3 appliances,
micro form factor

OPSWAT OTfuse Specifications

Application and Protocol Support

Supported Protocols
TCP, UDP, MODBUS, ETHERNETIP, S7COMM, SLMP, FINS, VNETIP, BACNET, DNP3, EGD
GE SCADA/HMI Software
CIMPLICITY, iFIX
GE Proprietary Protocols
DICOM, GE-ADL, GE-SDI, GE-SRTP, IEC60870, MMS

Spec

OTfuse Standard, OTfuse GE

OTfuse Lite

Hardware Manufacturer

Lanner

CompuLab

Number of OT
devices supported

Up to 15

Up to 3

CPU

ATOM (E3845)

Celeron J3455

RAM

8GB

4GB

Storage

128GB

64GB SATA SSD

USB Interfaces

2 (1x2.0; 1/3.0)

4 (2x2.0 + 2x3.0)

Power Inputs

2 voltage inputs (redundant power)

1 twist lock input

Input Power Range

12-36 VDC power input

9-24V DC

Serial (Console)

Yes (1)

1 (optional, requires special cable)

Ethernet Ports

2/3 Gigabit

2 GbE

Bypass Pair (Qty)

Yes (1)

No

Operating Temp Range

Standard: -40⁰C to +75⁰C

-20⁰C to +40⁰C

Digital Input

No

No

Dimensions

146H/127D/78W (mm)

112H/84D/34W (mm)

Weight

1.45 kg

350 grams

Standard Certificates and Declarations

CE/FCC Class A/RoHS/ UL / C1 div II

UL lister for USA and Canada

Vibration 60068-2-6, test Fc

Yes

IEC TR 60721-4-7

EMC Interference Certification

EN55032:2015+AC:2016 Class A: EN55024:2010

N/A

Learn how easy it is to secure your critical OT assets using OPSWAT OTfuse.


talk to us