Industrial Protection Support Station L Series

 

The LiSS industrial series (IPSS) was developed specifically for industrial data security in control systems and process automation. Accesses and processes are monitored and if necessary prevented. It is a universal system which allows fanless operation and requires a rated input voltage between 12 to 48 VDC (direct current). The compact design is made for mounting on a top hat rail (DIN rail). The device has the ability to shield critical process areas and to allow access to these areas only for predefined users. Additional reliability is achieved through the use of a redundant second device and the High Availability module.

 

LiSS IPSS Hutschiene DIN Rail

 

 

Main functions of LiSS IPSS

  • Secure transmission of critical data on failsafe VPN implementation
  • Uninterruptible power supply
  • Isolation of networks on both logical and physical level
  • Utilization of the available bandwidth
  • Installation in an industrial environment
  • Bridging / routing
  • Extensive diagnostics
  • Centrally manageable
  • User defined interface configuration (routing, Bridge, VLAN *,WWAN)
  • No follow-up costs through software updates or support
  • No hidden "back doors"
  • German and english configuration interface (via  browser, https)

Zusätzliche Module(*)

  • VLAN module
  • Filter module with anti- virus and anti-spam
  • Failover module
  • Bonding / trunking
  • Centralized management
  • UPS connection
  • WWAN wireless connection

 Highlights & Features(**)

  • Multistage stateful inspection firewall (IP tables , masquerading , port forwarding , anti-spoofing )
  • Intrusion prevention system
  • Diagnostic tool (qualified evaluation of log files , network analysis tools)
  • Caching DNS proxy
  • Dynamic DNS
  • DSL router
  • DHCP server
  • Fully featured time server (NTP)
  • Easy integration into existing infrastructure
  • Plausibility check of data entry
  • Single sign -on in the filter module
  • Updates via Internet
  • Hardware write protection
  • Free Bugfixservice
  • Backup feature for all configuration data
  • Detailed logging
  • Comprehensive documentation and diagnostic tools
  • VPN module
  • Prioritization / QoS

 

(*)extra costs
(**)subject to modifications

Download Datasheet (PDF)

 

hutschienen-funktionsschema

 

The figure shows the use of IPSS in a pumping station. From head office it should be possible to secure access to the process network, without an employee on site. For this purpose a IPSS is connected to the internal closed-loop process network, in which the process control computer is located. This computer monitors the activity of the pumps, level of water storage and performs pressure regulation and flow control. The computer is connected via Ethernet to the IPSS. Because the pumping station can be located in a remote industrial area, and thus not accessible via integrated information access such as xDSL, connections via GPRS, EDGE, UMTS or LTE are possible. The IPSS provides a VPN point of access, which is accessible via a public address. The filtering of data packets is realized through the firewall. Blocking an attack is carried out via a detection system. A tunnel over the internet to the headquarters is established. Here is ideally a LiSS (LAN Internet Support Station) located, which is responsible for the establishment and  maintenance of VPN connections to the pumping station. The staff at the headquarter can now access the host computer. In order to increase the reliability of the system an additional IPSS is installed, which provides failover. The IPSS has a redundant power supply and has in addition an UPS connected to each device. The reliability of the tunnel can be ensured through a VPN cluster. VPN-data are held on both IPSS. If one side isn’t reachable, the other can take over directly.









Find Us On...

Find us on FacebookFind us on Twitter