TF MBsecure+

MBsecure+ gateway provides full Protocols* visibility to the HMI application server without physical access to the PLC

Securing SCADA/ICS Protocols

SCADA/ICS communication protocols are designed for the exchange of control messages on industrial networks, including serial, LAN and WAN, across multiple industries as energy, water, Oil&Gas, automotive, transportation, petrochemicals utilities and more. Over the years, SCADA protocols such as Modbus, Syslog, OPC etc have become the most commonly used SCADA protocol for connecting industrial electronic equipment and devices.

Protecting networks with disparate security levels

When interconnecting network segments of unequal levels of security, the lesser secure network makes the secure network more vulnerable to hacking. MBsecure+ distributes the specific protocol data from PLCs among networks of different security classifications – eliminating any physical link between the PLC and HMI network. The PLC isolation occurs on the physical OSI Layer-1&2 without using CPU, software or IP address – making it impossible to hack.

Hack-proof PLC-HMI isolation

Acting as a hardware bridge between two LINUX units with Multi protocols* support, MBsecure+ acquires the PLC data over TCP/IP and responds to the HMI with the acquired data. Attempting to access the PLC through any device on the HMI network is futile – as if one of the RG-45 wire pairs is missing – while data is transmitted downstream untouched.

  • Physical ISOLATION at OSI Layer-1&2
  • Secure unit access (HTTPS) with encryption keys
  • Configurable HMI list to provide access restriction
  • Data bandwidth = 1 GB
  • Power – 1x5VDC / 8AMP
  • No FANs, no disk drives
  • 2xRJ-45 CAT6 connectors STP/UTP
  • DIN RAIL brackets
  • Operating System for accompanying CPU’s – Linux
  • Full Modbus RTU support
  • Up to 247 MODBUS devices supported per unit
  • Syslog Support
  • MQTT Support
  • SMTP Support
  • OPC DA/UA Support*
  • DNP3 Support*
  • BACnet Support*
  • Multiple HMI units support
  • Hardware Reset to factory defaults
  • High Availability (unit redundancy)

* Future release

  • Data transfer speed – 1Gbps
  • Physical ports – 2x1Gbps LAN ports
  • Measurements: Wx290 , Hx50 , Dx230 (mm)
  • Power consumption: max-40W
  • Weight: 450gr
  • Power supply:
    • 1x5VDC/ 8AMP
  • Mounting options:
    • Desktop / 19” Rack Shelf
    • Din Rail

Download Files

Terafence TF_MBsecure+

    TF_MBsecure (Modbus) Installation and Configuration Manual