×
Siemens Industry Online Support
Siemens AG
Entry type: Product note Entry ID: 109753709, Entry date: 12/12/2017
(2)
Rate

Plant Security Services released Perimeter Firewall Installation including Next Generation Firewall for Sales and Delivery

  • Entry
  • Associated product(s)
Plant Security Services released Perimeter Firewall Installation including Palo Alto Networks' Next Generation Firewall for Sales and Delivery
  1. Product description


    The portfolio element Perimeter Firewall Installation as part of the cluster Implement Security enhances the Plant Security Portfolio with an element that helps to segment and protect the industrial networks from threats coming from the outside. This is an integral part of the defense in depth concept of the IEC 62443. 

a. Perimeter Firewall Installation


Installation and configuration of Perimeter Firewall within an automation plant. Pricing includes configuration of firewall rules with direct 1-to-1 relationship to existing firewall rules or design of maximum 40 new firewall rules.

 

Perimeter Firewall Installation consists of the following:

  • Review of plant network layout

  • Creation of a Plant Perimeter Firewall concept. This is established in collaboration with the customer and includes the definition of IDS settings, deployment model, alerting settings, communication matrix and other firewall specific settings.

  • Installation and configuration of Perimeter Firewall with 1-1 implementation of existing firewall rules implemented on previous plant perimeter firewall device on plant perimeter or design of maximum 40 new firewall rules, if no firewall will be replaced

  • Test of communication via the Plant Perimeter Firewall in collaboration with the customer

  • Perimeter Firewall Installation Report delivery



b. Palo Alto Networks PA-220 Next-Generation Firewall


(Support must be purchased separately!)

Performance and Capacities

-

PA-220

Firewall throughput (App-ID)

-

500 Mbps

Threat prevention throughput

-

150 Mbps

IPsec VPN throughput

-

100 Mbps

New sessions per second

-

4.200

Max sessions

-

64.000

 

 

 

c. Palo Alto Networks PA-800 Series Next-Generation Firewall

(Support must be purchased separately!)


Performance and Capacities

PA-850

PA-820

Firewall throughput (App-ID)

1,9 Gbps

940 Mbps

Threat prevention throughput

780 Mbps

610 Mbps

IPsec VPN throughput

500 Mbps

400 Mbps

New sessions per second

9.500

8.300

Max sessions

192.000

128.000

 

 

 


d. Palo Alto Networks PA-3020 Next-Generation Firewall

(Support must be purchased separately!)


Performance and Capacities

-

PA-3020

Firewall throughput (App-ID)

-

2 Gbps

Threat prevention throughput

-

1 Gbps

IPsec VPN throughput

-

500 Mbps

New sessions per second

-

50.000

Max sessions

-

250.000

 

 

 



Security information
In order to protect technical infrastructures, systems, machines and networks against cyber threats, it is necessary to implement – and continuously maintain – a holistic, state-of-the-art IT security concept. Siemens’ products and solutions constitute one element of such a concept. For more information about cyber security, please visit
https://www.siemens.com/cybersecurity#Ouraspiration.