ABB FM9925A-E

Description

Product Description

The ABB FM9925A-E is a high-performance, modular firewall and security appliance specifically engineered for industrial automation and control system (IACS) networks. This robust device, the ABB FM9925A-E, is a critical component in ABB’s comprehensive industrial cybersecurity portfolio, designed to protect critical process control and SCADA systems from unauthorized access and cyber threats. It provides deep packet inspection, stateful firewall services, and secure communication tunneling to create robust security perimeters (demilitarized zones, or DMZs) between different network zones, such as the enterprise IT network and the sensitive process control network. Implementing the ABB FM9925A-E is a foundational step in adhering to international security standards like IEC 62443, safeguarding the availability and integrity of industrial operations.

Product Parameters

• Product Type: Industrial Firewall and Security Appliance.
• Brand & Series: ABB, part of the Industrial IT and System 800xA security solutions.
• Model: ABB FM9925A-E.
• Security Functions: Stateful inspection firewall, VPN (IPsec), Network Address Translation (NAT), and deep packet inspection for industrial protocols.
• Interfaces: Multiple Ethernet ports (typically copper and fiber options) for connecting to different security zones (e.g., Plant Network, Cell/Area Zone, DMZ).
• Performance: Rated for a specific throughput (e.g., Mbps/Gbps) and concurrent connection capacity suitable for industrial traffic loads.
• Protocol Support: Understood and can filter specific industrial protocols (e.g., MODBUS TCP, OPC Classic, IEC 61850, PROFINET) to detect anomalous behavior.
• Management: Configured and managed via a dedicated management interface and software (e.g., ABB’s Industrial Security Manager or a web-based GUI).
• Hardening: The underlying operating system is hardened for industrial use, with unnecessary services disabled.
• Certifications: Typically certified for use in industrial environments and compliant with relevant cybersecurity standards.
• Mounting: Designed for DIN-rail or panel mounting in industrial control cabinets.

Advantages and Features

The ABB FM9925A-E offers the key advantage of being designed specifically for the operational technology (OT) environment, understanding its unique protocols, traffic patterns, and availability requirements. Its features include deterministic performance to ensure network segmentation does not introduce harmful latency to real-time control traffic. The appliance provides robust logging and event reporting tailored for industrial incidents. Its physical ruggedness ensures reliable operation in typical plant floor conditions of temperature, vibration, and electrical noise. As a purpose-built OT security device, the ABB FM9925A-E simplifies the implementation of a “defense-in-depth” strategy within an ABB or multi-vendor automation architecture.

Application Cases in Application Fields

This firewall is deployed to create secure boundaries in virtually any modern industrial facility. In an oil refinery, the ABB FM9925A-E is placed in a DMZ to securely allow data flow from the Process Control Network (where System 800xA resides) to the Manufacturing Execution System (MES) or corporate network. In a pharmaceutical plant, it isolates packaging line PLC networks from the wider facility network to contain any potential malware spread. For a water utility, it protects SCADA systems controlling dams and treatment plants from unauthorized access via corporate or public networks. The ABB FM9925A-E is also crucial in power generation and distribution to secure substation automation networks and protect against cyber threats to critical infrastructure.

Comparisons with Competing Products

Compared to standard IT firewalls from vendors like Cisco or Palo Alto Networks, the ABB FM9925A-E is distinguished by its native understanding of industrial protocols and its ruggedized hardware designed for control cabinet environments. While IT firewalls offer broad feature sets, they may not handle legacy or proprietary OT protocols effectively and may not meet the physical robustness requirements. Against other industrial cybersecurity specialists like Siemens (Scalance S) or Rockwell Automation (Stratix), the ABB FM9925A-E offers deep integration benefits within ABB’s ecosystem (like System 800xA) and is often preferred in sites with a significant ABB automation footprint, providing a streamlined management and support experience.

Selection Suggestions and Precautions

• Network Architecture Design: Before selecting the ABB FM9925A-E, you must have a clear zone-and-conduit model of your industrial network (as per ISA/IEC 62443) to define where the firewall will be placed and what traffic it must filter.
• Performance Sizing: Accurately assess the network traffic load (bandwidth, packets per second, number of connections) that will pass through the appliance to ensure the ABB FM9925A-E model is correctly sized and will not become a bottleneck.
• Protocol Analysis: Identify all industrial and IT protocols that need to traverse the firewall to ensure the ABB FM9925A-E supports deep inspection for them.
• Redundancy: For critical security perimeters, consider deploying units in a high-availability (HA) pair to eliminate a single point of failure.
• Configuration and Maintenance: Configuration requires specialized cybersecurity and network knowledge. Establish a strict change management process. Regularly update its firmware/software to patch vulnerabilities, following a tested procedure.

1794-II8 AB
1794-IV16 AB
1794-IV32 AB
1794-LBL AB
1794-N2 AB PLC
1794-NM1 AB
1794-IE12 AB PLC
1794-IE4XOE2 AB