Controls and other components of production plants often have no security functionality of their own. In order to enable secure networking, it is recommended to segment the production network and only allow defined communication at the junctions.
The self-learning industrial firewall mbNetfix is ideally convenient for this. Using a whitelist, the user defines which connections, services and protocols are permitted. Any other communication is blocked. To control the communication traffic, the firewall can filter out the allowed and forbidden traffic based on the source MAC/IP addresses, the destination MAC/IP addresses and the ports. In order to keep the attack vectors as small as possible, mbNetfix was designed without a web interface already during the development of mbNetfix.