OT Network Security Solution – MOXA EDR-810-2GSFP | EDR Series
Where This Product Is Used
The MOXA EDR-810-2GSFP is purpose-built for securing operational technology (OT) networks in environments where uptime, reliability, and cyber-resilience are non-negotiable. Typical deployment scenarios include:
- Power & Energy: Substation automation networks (IEC 61850), SCADA perimeter protection, and inter-zone segmentation between control and corporate networks.
- Oil & Gas: Pipeline SCADA firewall enforcement, remote RTU site VPN tunneling, and Modbus/DNP3 deep-packet inspection.
- Water & Wastewater: WWTP PLC network isolation, remote pump station secure access, and multi-site WAN aggregation.
- Factory Automation & Smart Manufacturing: Cell/zone segmentation per IEC 62443-3-3, machine-level firewall between ERP and shop-floor OT, and secure remote maintenance via IPsec/OpenVPN.
- Transportation & Rail: Trackside communication security, wayside controller network isolation, and EN 50155-compliant rolling stock deployments.
- Building Automation (BAS/BMS): BACnet/IP zone separation, HVAC controller network protection, and secure remote diagnostics.
Technical Specifications
| Parameter | Value |
|---|---|
| Model | EDR-810-2GSFP |
| LAN Ports | 8 × 10/100BaseT(X) RJ45 |
| WAN / Uplink Ports | 2 × 100/1000BaseSFP (Gigabit SFP) |
| Firewall | Stateful Packet Inspection (SPI), ACL, DoS/DDoS protection |
| VPN | IPsec (IKEv1/IKEv2), OpenVPN, L2TP/PPTP; up to 32 tunnels |
| NAT / PAT | 1-to-1 NAT, N-to-1 NAT, Port Forwarding |
| Routing | Static, RIP v1/v2, OSPF |
| Industrial Protocols | Modbus TCP/RTU, EtherNet/IP, DNP3 deep-packet inspection |
| Management | Web GUI, CLI (SSH/Telnet), SNMP v1/v2c/v3, Syslog, MXconfig |
| Power Input | 12–48 VDC (redundant dual inputs) |
| Operating Temperature | -40°C to 75°C |
| Mounting | DIN Rail / Wall Mount |
| Protection | IP30 housing; 2 kV ESD protection |
| Certifications | IEC 62443-4-2, UL 508, CE, FCC Class A, DNV GL |
| Dimensions (W×H×D) | 54 × 135 × 105 mm |
| Weight | Approx. 1,100 g |
| MTBF | > 200,000 hours @ 25°C |
Why Engineers Specify This Model
- Gigabit SFP Uplinks: The 2 × GbE SFP ports enable high-bandwidth fiber uplinks to core switches or WAN aggregation points — critical for high-throughput SCADA polling or historian replication.
- IEC 62443-4-2 Certified: Meets the component-level security requirements of the IEC 62443 standard, satisfying procurement requirements for critical infrastructure projects.
- Industrial Protocol Awareness: Deep-packet inspection for Modbus TCP, EtherNet/IP, and DNP3 allows policy enforcement at the application layer without breaking OT communications.
- Wide Temperature Range: -40°C to 75°C operation covers outdoor cabinets, unheated substations, and harsh factory environments without additional thermal management.
- Redundant Power Inputs: Dual 12–48 VDC inputs with relay alarm output ensure continuous operation even during a power supply failure.
- Compact DIN Rail Form Factor: 54 mm wide — fits standard 35 mm DIN rail in space-constrained control panels alongside PLCs and I/O modules.
Complete System Bill of Materials
For a complete secure remote-access cell/zone architecture using the EDR-810-2GSFP, engineers typically specify:
- MOXA EDR-810-2GSFP — Cell/zone firewall & VPN gateway (this unit)
- MOXA EDS-308 or EDS-405A — Unmanaged switch for PLC/HMI LAN segment
- MOXA MGate 5105-MB-EIP — Modbus-to-EtherNet/IP protocol gateway (if required)
- MOXA NPort 5150A — Serial device server for legacy RS-232/485 instruments
- SFP-1G-LX or SFP-1G-SX — Gigabit SFP transceiver (sold separately, specify fiber type)
- DIN Rail 35 mm × 7.5 mm — Standard mounting rail (customer-supplied)
- 24 VDC DIN Rail PSU (e.g., MOXA PWR-24500-DT) — Redundant power supply
Compliance & Industry Standards
- IEC 62443-4-2 — Industrial cybersecurity component requirements (certified)
- IEC 61850-3 — Communication networks for power utility automation
- UL 508 — Industrial control equipment (UL listed)
- EN 50155 — Railway rolling stock electronics
- CE / FCC Class A — EMC compliance for industrial environments
- DNV GL — Marine & offshore type approval
- NERC CIP — Supports compliance architecture for North American bulk electric systems
Quality Assurance & Sourcing
Konmask.com sources the MOXA EDR-810-2GSFP exclusively through authorized industrial distribution channels. Every unit is:
- Verified against MOXA’s official serial number database prior to shipment
- Shipped in original MOXA factory packaging with full documentation
- Covered by MOXA’s standard 5-year hardware warranty
- Inspected for firmware version and hardware revision accuracy
We do not source from gray-market or secondary channels. Counterfeit industrial networking equipment poses serious safety and cybersecurity risks — we take this seriously.
How to Source This Part
- In-stock orders: Add to cart and check out — ships within 1–3 business days from our warehouse.
- Project / volume orders (5+ units): Contact support@konmask.com for volume pricing and lead-time confirmation.
- Urgent / expedite requests: Call or WhatsApp +0086 19859288691 — we can often source and ship within 24 hours for critical plant shutdowns.
- OEM / system integrator accounts: Ask about our SI partner program for recurring project pricing.
Application-Specific FAQ
Q: Can the EDR-810-2GSFP replace a traditional IT firewall in a substation?
A: Yes — it is specifically designed for IEC 61850-3 substation environments with wide-temperature operation, redundant power, and OT-protocol-aware firewall rules that IT firewalls cannot provide.
Q: How many simultaneous VPN tunnels does it support?
A: Up to 32 concurrent IPsec or OpenVPN tunnels, suitable for hub-and-spoke SCADA architectures with multiple remote RTU sites.
Q: Does it support 1-to-1 NAT for IP address conflict resolution between plant segments?
A: Yes — 1-to-1 NAT is supported, which is essential when integrating legacy OT subnets with overlapping IP address schemes.
Q: What SFP transceivers are compatible with the 2 Gigabit SFP ports?
A: MOXA-branded SFP-1G-SX (850 nm multimode) and SFP-1G-LX (1310 nm singlemode) are recommended. Third-party SFPs may work but are not officially supported.
Q: Is the unit suitable for outdoor cabinet installation in tropical climates?
A: The -40°C to 75°C operating range and IP30 housing make it suitable for ventilated outdoor cabinets. For fully sealed outdoor enclosures, pair with an appropriate IP65/IP66 cabinet and thermal management.
© 2026 Konmask.com. All rights reserved.
Original Source: https://Konmask.com
Contact: support@konmask.com | +0086 19859288691
