Cisco 3000 Industrial Security Appliance ISA 3000 Cisco

Cisco 3000 Industrial Security Appliance (ISA 3000) のご紹介 Cisco Systems July 19 th, 2016

Cisco ISA 3000 - パデュー モデル Level 5 Level 4 Enterprise Network Site Business Planning & Logistics Network E-Mail, Intranet, etc. Terminal Server RDP Server App Server Level 3 Factory. Talk App Server Factory. Talk Directory Engineering Workstation Level 2 Factory. Talk Client Engineering Workstation HMI Level 1 Batch Control Sensors Discrete Control Drives Drive Control DMZ Patch Mgmt. Domain Controller Magelis HMI Continuous Process Control Actuators Site Manufacturing Operations and Control Operator Interface Enterprise Zone Manufacturing Zone Area Supervisory Control Safety Control Robots Basic Control Cell/Area Zone Process © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 3

Cisco ISA 3000 の特徴 EMC & Safety - 多くの産業規格に対応 産業プロトコル対応 IPS シグネチャ EN-61850 -3 / IEEE 1613 (Power Substation) EN 50155, EN 50121 -4, EN 50121 -3 -2 (Railway) EN 60945 / IEC 60533 (Marine) EN 61131 -2 (Industrial Controls) EN 61326 (Electrical Controls) EN 61000 -4 -2 (Electro Static Discharge), 8 KV Air / 15 KV contact EN 61000 -4 -3 (Electro Magnetic field, 10 and 20 V/m) EN 61000 -4 -4 (Fast Transients – 4 KV power line, 4 KV, data line EN 61000 -4 -5 (Surge- 4 KV/2 KV) EN 61000 -4 -6 (Conducted Immunity, 10 V / emf) EN 61000 -4 -8 (Power Frequency MFI 40 A / m, 1000 A / m (1 s)) EN 61000 -4 -9 (Pulse MFI ) EN 61000 -4 -10 (Oscillatory Magnetic Field Immunity) EN 61000 -4 -11 (AC power Voltage Immunity) – AC PS (50 ms) EN 61000 -4 -17 (Ripple on DC power port- for DC PS only) EN 61000 -4 -29 (Voltage Dips Immunity- 10 ms hold up time) EN 61000 -6 -2 (Immunity for Industrial Environments) EN 61000 -6 -4 (Emissions for Industrial environments) EN 61000 -6 -1 (Immunity for Light Industrial Environments) Hardware Bypass 機能 18の産業用プロトコルを識別・コントロール ISA 3000 INSPECTION Inside Interface Outside Interface © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 4

産業プロトコル対応 － Modbus の例 Modbus 用のルールは Modbus のすべてのオプションに対応 RTU-0122 に対する 50 以上の値 の設定を制限 Modbus packet © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 5

Cisco ASA with Fire. POWER との違い • Softwareは基本的に同じものを使用 • Softwareのデフォルト設定は、ISA 3000が"All Allow, Transparent"であるのに対し、ASAは"Deny all, routed" ISA 3000 ASA 5506 H-X マウント DINレール マウント 19“ラック/ ウォール マウント (オプション DINレール マウント) 電源 DC (冗長サポート) 外部AC電源 (冗長サポート無し) ハードウェア バイパス Yes No アラーム Input/Output Yes No 動作温度 -40 C to +85 C (type Test) -40 C to +60 C (continuous operation) -40 C to 70 C with 40 LFM; -34 C to 74 C with 200 LFM -20 C to 60 C IP Rating IP 30 (Operating) IP 40 (プラグ未使用時) SDカード サポート Yes No © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 6

Cisco ISA 3000 発注情報 SKU Description ISA-3000 -4 C-K 9 Industrial Security Appliance 3000 4 copper ports ISA-3000 -2 C 2 F-K 9 Industrial Security Appliance 3000 2 copper 2 fiber ports L-ISA 3000 SEC+-K 9 ISA 3000 Security PLUS License ISA 3000 Sec. Plus Lic. w/ HA, DMZ, VLAN trunk, more conns. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 8