Phoenix Contact mGuard Line Protects Industrial Networks |
Phoenix Contact
P.O. Box 4100
Harrisburg, PA, 17111 0100
USA
Press release date: January 20, 2012
MIDDLETOWN, Pa. - Following the latest report of vulnerabilities in a control platform, the U.S. Department of Homeland Security recently issued an alert recommending several strategies to mitigate damage and protect control systems from attacks. Phoenix Contact's FL mGuard line of security appliances can help make these strategies a reality.
In December 2011, independent researcher Ruben Santamarta publicly released vulnerabilities he discovered within several Schneider Electric PLCs. The U.S. Department of Homeland Security's Industrial Control Systems Cyber Emergency Response Team (US ICS-CERT) quickly issued an alert confirming the findings and providing mitigation strategies.
The agency recommended users to:
o Minimize network exposure for all control system devices. Control system devices should not face the Internet.
o Locate control system networks and devices behind firewalls, and isolate them from the business network (also known as a defense-in-depth solution).
o If remote access is required, use secure methods, such as Virtual Private Networks (VPNs).
"This is just the latest news report about threats to control systems, but, unfortunately, it won't be the last," said Dan Schaffer, industrial network security specialist for Phoenix Contact. "Whatever control platform they are using, control engineers should follow the recommendations of the US ICS-CERT group to prevent malicious or accidental network damage. The mGuard products meet the needs of both the automation and IT worlds, making it easy to implement this type of defense-in-depth solution."
The mGuard provides firewall protection to block both attacks and unwanted network traffic that can negatively impact sensitive control networks. Additionally, the mGuard's advanced logging capabilities can alert the network manager if somebody has tried access to the network. These logs can be stored locally, or the mGuard can send them to a central location to make auditing and compliance reporting easier. If the application requires Internet access (such as for remote support or diagnostics), the mGuard can create a secure VPN tunnel for safe and secure communication.
ICS-CERT is coordinating mitigations with Mr. Santamarta and Schneider Electric. Schneider Electric has produced a fix for two of the reported vulnerabilities and is continuing to develop additional mitigations.
About Phoenix Contact
Phoenix Contact develops and manufactures industrial electrical and electronic technology products that power, protect, connect and automate systems and equipment for a wide range of industries. Phoenix Contact GmbH & Co. KG, Blomberg, Germany, operates 47 international subsidiaries, including Phoenix Contact USA in Middletown, Pa.
For more information about the mGuard or about Phoenix Contact, visit http://www.phoenixcontact.com/mguard, or call technical service at 800-322-3225, e-mail info@phoenixcon.com.
PHOENIX CONTACT
586 Fulling Mill Road
Middletown, PA 17057
info@phoenixcon.com
(800) 888-7388
|
|
|
|
|
|
| 
