MOXA

MOXA EDF-G1002-BP Industrial LAN Firewall

SKU EDF-G1002-BP

Includes DIN-rail kit, DB9 female to USB Type-C console cable and quick installation guide.

$1,108.00
$1,108.00
Add to Quote
Download the data sheetmoxa edf g1002 bp series datasheet v2.1 · PDF

A two-port Gigabit industrial firewall that installs inline in front of a PLC, machine cell or network zone. It adds intrusion prevention and deep packet inspection for industrial protocols, with Gen3 LAN Bypass for fault tolerance.

Product specsInstall guide & demo video

Why we endorse this product

  • Installs as a bump in the wire, with no network redesign
  • Gen3 LAN Bypass for fault tolerance
  • IPS and deep packet inspection for OT protocols

Endorsements come from hands-on testing by our OT cyber experts, with 30+ years in control systems design.

$1,108.00
$1,108.00
Add to Quote

Product Details

The Moxa EDF-G1002-BP is a two-port Gigabit industrial LAN firewall with intrusion prevention (IPS) and deep packet inspection (DPI). It installs as a bump in the wire in front of a controller, machine cell or network zone, and its software-configurable Gen3 LAN Bypass provides fault tolerance for the link it protects.

The IPS runs in Monitor mode to show threat activity on the network or in Protect mode to block and contain it. DPI reads industrial protocols including Modbus TCP/UDP, DNP3, IEC 60870-5-104, IEC 61850 MMS, EtherNet/IP, MELSEC, Omron FINS, OPC UA and Siemens S7, which gives granular control over the traffic that reaches critical controllers.

The firewall has a metal housing and mounts on a DIN rail (kit included) or a wall (kit sold separately). It runs on redundant 12/24/48 VDC inputs, operates from -10 to 60°C, and carries a 5-year Moxa warranty.

Why Choose the Moxa EDF-G1002-BP?

  • It goes in without a network redesign. Bump-in-the-wire installation puts the firewall between existing devices, and Gen3 LAN Bypass is there for fault tolerance.
  • You can watch before you block. Monitor mode shows threat activity on the network, and Protect mode blocks and contains it.
  • It reads OT traffic. Deep packet inspection covers Modbus TCP/UDP, DNP3, IEC 60870-5-104, IEC 61850 MMS, EtherNet/IP, MELSEC, Omron FINS, OPC UA and Siemens S7, and Moxa plans to add protocols through firmware updates.
  • Virtual patching shields vulnerable equipment that cannot be shut down for patching. It is agentless and works alongside your existing patch process.
  • It is built for control cabinets, with a metal housing, DIN-rail or wall mounting, redundant 12/24/48 VDC inputs and a -10 to 60°C operating range.
  • It is certified for hazardous locations (Class I Division 2, ATEX, IECEx) and carries EN 50121-4 railway, NEMA TS2 traffic control and DNV maritime certifications.
  • Secure Boot checks system integrity at startup, and Moxa backs the unit with a 5-year warranty.

Who Should Deploy This Technology?

Asset owners and integrators who need a firewall in front of a specific controller, machine cell or network zone and do not want to redesign the network to get it there.

Moxa lists these applications for the series:

  • Intelligent transportation systems (ITS)
  • Pump-and-treat systems in water stations
  • Distributed control systems in oil and gas
  • PLC and SCADA systems in factory automation

It also fits sites that cannot patch on a regular schedule, since virtual patching shields equipment that has to stay running.

What Other Options Should Be Considered When Deploying This Technology?

  • If you also need routing, NAT or VPN, look at the Moxa EDR-G9004 secure router, a four-port firewall, NAT, VPN and router in one unit.
  • If the cabinet runs colder than -10°C or hotter than 60°C, Moxa makes a wide-temperature model, the EDF-G1002-BP-T, rated -40 to 75°C. Conformal-coated models (EDF-G1002-BP-CT and EDF-G1002-BP-CT-T) are also available. Contact us for a quote on any of them.
  • If you need visibility without blocking, a network TAP such as the Garland Copper Breakout TAP copies traffic to your monitoring tools.
  • IPS pattern updates need a license. Moxa sells device-based licenses in one- to five-year terms, and licenses managed through its MXsecurity software. Contact us for a quote.

FAQs

Does the EDF-G1002-BP need a license?

The intrusion prevention system is enabled by default. Updating the IPS patterns requires an additional Moxa license, sold separately.

Which industrial protocols does deep packet inspection cover?

Modbus TCP, Modbus UDP, DNP3, IEC 60870-5-104, IEC 61850 MMS, EtherNet/IP, MELSEC, Omron FINS, OPC UA, Siemens S7 Comm. and Siemens S7 Comm. Plus. Moxa says more protocols will be added through firmware updates.

What throughput does it support?

Up to 1000 Mbps (80K packets per second) as a firewall and up to 500 Mbps (40K packets per second) with IPS, measured per RFC 2544. It handles up to 120K concurrent connections and 6K new connections per second, per RFC 3511.

What happens to traffic if the firewall has a fault?

The two LAN ports support software-configurable Gen3 LAN Bypass, which Moxa provides for system fault tolerance. Bypass behavior is set in the device configuration.

What power does it need?

12, 24 or 48 VDC on redundant dual inputs, with an operating range of 9.6 to 60 VDC and a maximum input current of 0.69 A. Power connects through a removable terminal block. A power supply is not listed in the package contents.

What is in the box?

The firewall, a DB9 female to USB Type-C cable, a DIN-rail kit, a plastic cap for the USB Type-A port, a quick installation guide and a warranty card. The WK-40-01 wall-mounting kit is sold separately.

What temperature range is it rated for?

This model operates from -10 to 60°C (14 to 140°F). Moxa also makes wide-temperature models rated -40 to 75°C. Contact us for a quote.

How is it managed?

Through a web console over HTTP or HTTPS, plus SSH, Telnet and SNMP v1, v2c and v3. Several units can be managed together with Moxa's MXsecurity software, which is licensed separately.

What warranty does it carry?

Five years from Moxa. Details are atwww.moxa.com/warranty.

Who do I contact with questions?

Emailinfo@otcyberdirect.com or call +1 (508) 289-1195.

Not sure this is the right fit?

Tell us about your network and an OT cyber expert will confirm the fit, adjust the configuration, or point you to a better option. No sales sequence, just an answer.

Talk to an OT cyber expert