$1,095
Secure communication for machines and systems
The Microwall IO routes these device islands securely and easily into the company intranet. Simple and intuitive filter rules protect sensitive island communication from harmful events in the intranet and from undesired access. Remote maintenance and remote access to the devices in the island network plus management of the Microwall VPN can be accomplished over a WireGuard VPN tunnel both as VPN server and VPN client.
The digital in- and outputs allow you to integrate remote maintenance and firewall-specific Microwall IO actions into automation and process environments. A PLC output or simple button/switch can for example provide VPN access, control certain firewall rules or check on the status of network interfaces. The outputs enable external visualization of messages and events such as an activated VPN access.
Manufacturer: Wiesemann & Theis / Country of Origin: Germany
SKU:
The Microwall IO casts sensitive components or sub-networks into a separate island network and isolates the latter from the higher level company intranet. For remote maintenance, remote support, etc. a WireGuard VPN server is available which provides selected VPN clients with secure and dedicated firewall-protected access to the island components.
All connections between the networks must use rules based on source/destination IP and the used TCP/UDP port numbers to obtain an express release. For outgoing connections host names can be used as a destination within the rules. Communication of undocumented and/or undesired services is prohibited and harmful events such as overload are kept away from the island.
Similar to a traditional DSL internet connection, the entire island network is incorporated via just an IP address of the intranet into the network there. No intervention into the routing concept of the intranet is necessary. Operation of multiple island networks having the same IP ranges is also possible in this mode. This gives machines and systems manufacturers the possibility of operating internal network with a uniform series IP configuration – no cumbersome adaptations to the customer’s infrastructure.
The digital inputs enable event-based activation of VPN access or switching rule groups for the firewall. Then for example when there are equipment faults the operator or equipment controller itself can open the VPN connection to the manufacturer through a switching contact.
The Microwall IO operates like a traditional router, while the island network appears in the intranet in the form of static routing. Static NAT can also be used for 1:1 mapping of intranet addresses to fixed IPs in the island network. These island hosts thereby become quasi-local components of the intranet while still enjoying the protection of appropriate firewall rules.
Connection attempts on the island side to connected hosts are recorded and logged including whatever destination host names were used. For desired connections, a release rule is created just by a mouse click. Unknown, undesired or harmful connections remain blocked.
The Microwall IO uses the WireGuard platform as a VPN solution for remote access. Compared with other VPN solutions this offers advantages such as high data throughput and simple management with a high level of security and stability. Details and current information about WireGuard can be found at https://www.wireguard.com. The Microwall IO can provide a VPN client or VPN server terminal point on your intranet connection. Depending on the application external WireGuard clients can dial in to the islands or the Microwall connects as a VPN client – for example into your service network.
MANUAL / TOOLS / FIRMWARE / ACCESSORIES
