The leading manufacturer for industrial data communications and networking INSYS icom and the network security company Rhebo present their common solution for secure and stable communication, data acquisition and data processing in industrial networks. The objective of their partnership is to ensure efficiency, network stability and cyber security in industrial networks as well as to realize remote maintenance, condition monitoring and even big data analytics – easy, step-by-step and future-proof.
Increasing networking in the production area requires continuous monitoring with anomaly detection. This is the only way to reliably detect unknown or hidden security incidents as well as technical error conditions in addition to already known attack patterns. Routers as an interface between machines, systems, company networks or control centers are ideally suitable to implement this functionality. Using the high-quality, long-term available INSYS icom VPN routers and IoT gateways, a huge number of applications like remote maintenance, condition monitoring and security monitoring can be implemented in the OT (operational technology) as well.
Due to their hardened IoT operating system (icom OS) with high functionality, their integrated computing power for their own applications (icom SmartBox) and scalable software for edge computing (icom Data Suite), they can do more than data communications: Thus, Rhebo Industrial Protector, the passive, non-reactive monitoring system for communications in industrial control systems and in pilot systems, runs directly on an INSYS icom router. Its Linux containers offer maximum flexibility through their high degree of virtualization.
Wolfgang Wanner, Senior Manager for Sales & Business Development at INSYS icom, describes the advantages of the solution: "Now operators of control networks can record the data traffic that takes place behind the router directly on our smart routers. The data will then be highly compressed and sent to the Rhebo Industrial Protector anomaly detection to identify unknown cyber incidents and technical error conditions. This extends the possibilities of our customers by an important IT security function. In Rhebo we found a partner who reliably adds the growing aspect of network security and stability to our value proposition."
Rhebo Industrial Protector: integrated network monitoring with anomaly detection
Rhebo Industrial Protector continuously analyses the communication in the control systems and evaluates it in real-time for anomalies. Security-relevant incidents as well as technical error conditions are detected, evaluated and reported – no matter if they were already known or are new. As a complete picture of the control systems is available any time, it is possible to react to anomalies before the operation of the system will be affected.
"We are glad to be part of the strong partner network of INSYS icom. The high-quality, powerful components of INSYS icom are established in industrial enterprises with networked productions as well as critical infrastructures of the energy and water management and provide for an efficient monitoring. The routers are integrating the Rhebo Industrial Protector anomaly detection at the most important interfaces of the M2M communication. Thus, we can guarantee secure and stable control networks," explains Klaus Mochalski, CEO Rhebo.
INSYS icom and Rhebo are currently planning joint webinars to present their solution. You will find more information at www.insys-icom.com or www.rhebo.com.
INSYS icom, leading manufacturer for industrial data communication and interconnection, now offers the Managed Service icom OAM (Operations, Administration & Maintenance) for central device management of icom Smart IoT Gateways. When using several devices, icom OAM significantly improves management of device operation, administration and maintenance.
Possible savings during commissioning, maintenance and updates
Performing all these tasks manually requires high administrative and human resource effort, which costs companies productivity and competitiveness.
The icom OAM automates these tasks to avoid mistakes and ensure timely roll-out and smooth operation. Moreover, icom OAM is a Managed Service exclusively tailored to the routers and gateways of INSYS icom to roll-out updates efficiently. "Our new OAM supports the administrators of icom Smart IoT Devices and significantly improves their daily work. The more routers they have to manage, the more helpful OAM becomes. But even for smaller applications, admins will appreciate OAM for reasons of clarity and efficiency and of course from the view of IT security", explains David Sukowatey, Product Manager of INSYS icom.
The system monitors the management operations and logs relevant update events of the devices (e. g. execution of an auto update or profile activation) via an activity log. Administrators can view the device information such as serial number, update details or firmware version and the activity of the past OAM operations. New firmware updates, certificates security settings and configurations can be managed across several routers using icom OAM.
OAM in ISO 27001-certified cloud
The web platform of OAM stands within its own, secure cloud environment, which is hosted in a German data processing centre that is certified as per ISO 27001.
INSYS icom, leading manufacturer for industrial data communication and interconnection, will present how to implement Industrial IoT with their new Smart IoT Gateways, at Booth E07 in Hall 8 of the Hannover Messe.
The icom Smart IoT Gateways allow the implementation of a variety of application cases, from data logging to edge computing up to professional remote maintenance, whilst supporting all common protocols that are necessary for particular industries. The complete solution is designed for Industrial IoT and secures the future and long-term competitiveness of companies. The VPN routers and IoT gateways of the MRX-, MRO-, SCR- and ECR-series form the core of this. Due to their feature-rich, hardened IoT operating system (icom OS), their integrated computing power for own applications (icom SmartBox) and scalable software for edge computing (icom Data Suite), they provide more than just data transmission.
Besides secure and flexible communication connections, they offer plenty of data processing and control options on site, e.g. as intelligent protocol converters. Hence, even small plants or existing plants (retrofit) can be connected with an unparalleled cost to benefit ratio. Commissioning and roll-out processes plus the operation of the gateways are made easy, quick and secure using the device management solution OAM.
Smart Energy Gateway for power engineering
The Smart Energy Gateway connects renewable energy plants, grid stations and control centres securely and flexibly, e.g. via IEC 60870-5-101/104. Simple automation tasks can be realised without using cost-intensive control technology. INSYS icom stands out for its comprehensive know-how in the critical infrastructure field and allows for secure grid stability, customer supply and revenues of renewable energy plants.
Smart Machinery Gateway for mechanical engineering: OPC UA
The Smart Machinery Gateway makes machines and plants secure, cost-efficient and durable for Industrial IoT. It integrates established industrial protocols such as OPC UA or Siemens S7/S5. Moreover, processes can be interconnected to gain time and save costs. The flexibility of the solution allows for machine data to be provided all relevant stakeholders in compliance with IT security and data protection requirements.
INSYS icom, leading manufacturer for industrial data communication and interconnection in the field of energy and water supply, presents new Smart Energy Gateways as integral solutions for Smart Grid and renewable energy plants on booth 5-515 in hall 5 (E-World in Essen, Germany).
The gateways will be used for the secure, cost-efficient monitoring and control of renewable energy plants or the connection of switchgear in a modern smart grid, e.g. via IEC 60870-5-101/104. The company builds on 25 years of expertise that it has established in the energy market. The intelligent routers of the series MRX, MRO, SCR and ECR form the basic element of the Smart Energy Gateways.
Thanks to their Linux environment (icom SmartBox), a software for edge computing (icom Data Suite) and their feature-rich IoT operating system (icom OS), they have more power than just data transmission. Besides secure and flexible communication connections, they provide plenty of data processing and control options at the site, e.g. as intelligent protocol converters. Hence, also small plants or existing plants (retrofit) can be connected with an unparalleled cost/benefit ratio.
The core functions of the icom Smart Energy Gateways
For the connection to SCADA and remote control systems, monitoring and control commands via e.g. IEC 60870-5-104/101 and Modbus TCP will be converted to the plant protocol (also with existing serial and proprietary interfaces).
Several simultaneous VPN tunnels and VPN technologies allow separated access of the market participants. The IT security requirements in the energy field (KRITIS) are met together with further security features.
The telecommunications connection can be realised via LAN, DSL or cellular radio. Comprehensive redundancy functions are provided for high demands on availability.
Please refer to the Smart Energy Gateways brochure.