Introduction
The EDR-8010 series is a range of highly integrated industrial multi-port security routers with firewall/NAT/VPN and managed Layer 2 switch functions. These devices are designed for Ethernet-based security applications in critical remote control or surveillance networks. These secure routers provide an electronic security perimeter to protect critical cyber assets such as substations in energy applications, pumping and treatment systems in water plants, distributed control systems in oil and gas applications and PLC/SCADA systems in factory automation.

Defend against malicious threats with advanced cyber security features
The EDR-8010 series embedded firewall uses policy rules to control network traffic between trusted zones, while Network Address Translation (NAT) protects the internal network from unauthorised access by external hosts. Virtual Private Networking (VPN) functionality provides users with secure communication tunnels when accessing the private network from the public Internet. To protect your OT assets from cyber-attacks, the EDR-8010 series supports Deep Packet Inspection (DPI) to inspect the data portion of network packets for various OT-specific protocols.

Simplified configurations with the user-friendly interface and quick settings
The EDR-8010 series setup wizard provides users with an easy way to set up WAN, LAN and bridge ports for routing functions in just four steps. In addition, the object-based firewall management feature provides engineers with an easy way to configure and maintain firewall filtering for IP addresses and subnets, network services, industrial application services and custom services.

Industrial-grade design for uninterrupted network connectivity
The rugged hardware of the EDR-8010 series makes these secure routers ideal for harsh industrial environments. The wide temperature range models are designed for reliable operation in hazardous conditions and extreme temperatures from -40 to 75 °C. In addition, the EDR-8010 series supports comprehensive Layer 2 and Layer 3 redundancy mechanisms to ensure your network stays connected at all times.

Virtual patching and intelligent threat protection
Patching remains a major challenge in OT environments, as OT applications cannot afford to interrupt operations by shutting down systems to apply patches. Virtual patching technology can help complement existing patch management processes by shielding known and unknown vulnerabilities. In addition, the EDR-8010 has intelligent IPS functionality for continuous protection against cyberthreats, which identifies and blocks known attacks using pattern-based detection.

MX-ROS addresses growing cybersecurity threats
MX-ROS (https://www.moxa.com/en/spotlight/portfolio/mx-ros/index) from Moxa is a software platform for industrial security routers and firewalls. The platform supports robust security and user-friendly operation of security routers through simplified web and CLI interfaces. In addition to IEC 62443-4-2 compliance, MX-ROS devices with every release offer a wealth of the latest cross-industry Operational Technology (OT) network management features to protect hardware and software.

Input/Output Interface
– Alarm contact channels: Resistive load: 1 A @ 24 VDC
– Buttons: Reset button
– Digital input channels: +13 to +30 V for state 1, -30 to +3 V for state 0, Max. Input current: 8 mA

Ethernet interface
– 10/100BaseT(X) ports (RJ45 connection): 8
– 1000BaseSFP slots: 2

Standards:
– IEEE 802.3 for 10BaseT
– IEEE 802.3u for 100BaseT(X)
– IEEE 802.3z for 1000BaseSX/LX/LHX/ZX
– IEEE 802.3x for flow control
– IEEE 802.1Q for VLAN tagging
– IEEE 802.1X for authentication
– Static Port Trunk

– DMZ: User-configurable DMZ ports

Ethernet software functions
– Broadcast Forwarding: IP-controlled broadcast, broadcast forwarding
– Management: back pressure flow control, DDNS, DHCP server/client, web console (HTTP/HTTPS), LLDP, QoS/CoS/ToS, SNMPv1/v2c/v3, Telnet, TFTP, HTTPS, SSH
– Redundancy protocols: RSTP, STP, Turbo Ring v2, Turbo Chain
– Routing throughput: max. 50K packets per second / 500 Mbps (based on RFC 2544)
– Routing table: Max. 4K routing rules
– Simultaneous connections: Max. 120K (based on RFC 3511)
– Connections per second: Max. Max. 6K (based on RFC 3511)
– Routing Redundancy: VRRP
– Security: Secure Boot, IPsec, L2TP (Server), RADIUS, Trust Access Control, TACACS+
– Time Management: NTP Server/Client, SNTP
– Unicast Routing: OSPF, RIPV1/V2, Static Route
– Multicast routing: Static Route
– Filter: IGMP v1/v2/v3

Switch properties
– VLAN ID range: VID 1 to 4094
– IGMP groups: 256
– Max. Max. number of VLANs: 16

LED interface
– LED indicators: PWR1, PWR2, STATE, MSTR/H.TC, CPLR/T.TC, VRRP/HA, VPN, USB

DoS and DDoS protection
– Technology: ARP flood, FIN scan, ICMP flood, TCP sessions without SYN, NMAP-ID scan, NMAP-Xmas scan, Null scan, SYN/FIN scan, SYN/RST scan, SYN flood, Xmas scan

Firewall
– Filter: DDoS, Ethernet protocols, ICMP, IP address, MAC address, ports
– Stateful Inspection: Router Firewall, Transparent (Bridge) Firewall
– Deep Packet Inspection: Modbus TCP, Modbus UDP, DNP3, IEC 60870-5-104, IEC 61850 MMS, EtherNet/IP, Omron FINS, Siemens S7 Comm., Further protocols will be supported by future firmware updates.
– Intrusion Prevention System: Requires an additional licence.
– Throughput: Firewall: Max. 50K packets per second / 500 Mbps (based on RFC 2544)

IPsec VPN
– Authentication: MD5 and SHA (SHA-256), RSA (key size: 1024-bit, 2048-bit), X.509 v3 certificate
– Simultaneous VPN tunnels: Max. 50 IPsec VPN tunnels
– Encryption: DES, 3DES, AES-128, AES-192, AES-256
– Protocols: IPsec, L2TP (server), PPTP (client)
– Throughput: Conditions: AES-256, SHA-256, Max. 25K packets per second / 200 Mbps (based on RFC 2544)

NAT
– Functions: 1-to-1, N-to-1, port forwarding, NAT loopback

Real-time firewall / VPN event protocol
– Event type: Firewall event, VPN event
– Media: Local storage, SNMP trap, syslog server

Serial interface
– Console connection: RS-232 (TxD, RxD, GND), 3-pin (115200, n, 8, 1)
– Connection: USB Type-C

Performance parameters
– Connection: Removable terminal block
– Operating voltage: 9.6 to 60 VDC
– Input voltage: 12/24/48 VDC, redundant dual inputs (DNV-certified for 24 VDC)
– Input current: 0.53 A @ 12 VDC, 0.26 A @ 24 VDC, 0.14 A @ 48 VDC
– Reverse polarity protection: Supports

Physical properties
– Housing: Metal
– Dimensions: 45 x 135 x 105 mm (1.77 x 5.31 x 4.13 in)
– Weight: 520 g (1.15 lb)
– Installation: DIN rail mounting (DNV certified), wall mounting (with optional kit)

Environmental conditions
– Operating temperature: Standard models: -10 to 60°C (14 to 140°F), wide temp. models: -40 to 75°C (-40 to 75°F). Models: -40 to 75°C (-40 to 167°F), All models: DNV certified for -25 to 70°C (-13 to 158°F)
– Storage temperature (including packaging): -40 to 85°C (-40 to 185°F)
– Ambient relative humidity: 5 to 95% (non-condensing)

Standards and certifications
– Safety: IEC 62368-1, UL 62368-1
– EMC: EN 55032/35
– EMI: CISPR 32, FCC Part 15B Class A

EMS:
– IEC 61000-4-2 ESD: Contact: 8 kV; Air: 15 kV
– IEC 61000-4-3 RS: 80 MHz to 1 GHz: 20 V/m
– IEC 61000-4-4 EFT: Power: 4 kV; Signal: 4 kV
– IEC 61000-4-5 Surge: Power: 2 kV; Signal: 4 kV
– IEC 61000-4-6 CS: 10 V
– IEC 61000-4-8 PFMF

– Railway: EN 50121-4
– Traffic control: NEMA TS2
– Marine: IEC 60945, DNV
– Shock: IEC 60068-2-27
– Free fall: IEC 60068-2-32
– Vibration: IEC 60068-2-6
– Substations: IEC 61850-3 Edition 2.0, IEEE 1613
– Hazardous areas: ATEX, Class I Division 2, IECEx

MTBF
– Time: 1,347,225 hours
– Standards: Telcordia (Bellcore), GB