Belden releases new plug-n-protect OPC firewall to provide robust cyber security for automation facilities

New Hirschmann™ EAGLE20 Tofino OPC Enforcer protects networks using OPC Classic, the world’s most widely used industrial integration protocol.



Belden has recently introduced version 1.6.0 of its Hirschmann™ EAGLE20 Tofino industrial network security system, including the new EAGLE20 Tofino OPC Enforcer Loadable Software Module (LSM). Developed by Byres Security Inc. for Hirschmann™, the OPC Enforcer locks down any system using the widely installed OPC Classic protocol, providing superior security over what can be achieved with conventional firewall solutions. The result is improved network reliability and security for the process control and SCADA industries.

OPC Classic is widely used in control systems as an interoperability solution, interfacing control applications from multiple vendors. But the technologies underlying it were designed before network security issues were widely understood. As a result, OPC Classic has been almost impossible to secure until now. Thomas J. Burke, President, OPC Foundation, commented “The Tofino OPC Enforcer is an important innovation and a great solution for the 90% of industrial networks that use OPC Classic.”


New Hirschmann™ EAGLE20 Tofino OPC Enforcer protects networks using OPC Classic, the world’s most widely used industrial integration protocol.
(Photos: Belden, PR164; This photography can be downloaded from www.PressReleaseFinder.com).

The EAGLE20 Tofino OPC Enforcer provides two important benefits:

  1. It provides robust security and stability for systems using OPC Classic, thus preventing industrial network attacks and accidents. Unlike other firewalls, this product inspects tracks and secures every connection made by an OPC application, opening only the exact TCP port required for a connection between an OPC client and server.
  2. It is implemented without any system changes. The EAGLE20 Tofino hardware is simply installed into the live network and configured using a drag and drop editor to select permitted clients and servers. Once installed, network security is assured, with all OPC traffic managed behind the scenes.

While a lot of the headlines around cyber security focus on hacker attacks, in fact many incidents result from internal network incidents.

“Past plant shutdowns, for example, haven’t been caused by hackers. Instead they were the result of badly configured software causing traffic storms that impacted critical controllers and other systems,” said Eric Byres, security expert and Chief Technical Officer at Byres Security. “The EAGLE20 Tofino OPC Enforcer LSM does much more than block hackers and viruses from accessing the safety system. Its dynamic port management and built-in traffic-rate controls prevent many basic network problems from spreading throughout a plant.”

“OPC Classic is deployed extensively by many of our automation customers, and these customers recognize the need for defense in depth security.” remarked Mark Cooksley, Product Manager for Network Security at Belden. “Unfortunately in practice, the unique challenges presented by OPC have meant that networks supporting this protocol are inadequately protected against modern threats. Now, for the first time, the OPC Enforcer ensures that networks running OPC Classic can benefit from the same pervasive security protection that is standard for networks using other protocols.”

Availability and Requirements

The Hirschmann™ EAGLE20 Tofino OPC Enforcer LSM is available as of today, and requires the EAGLE20 Tofino Security Appliance and the EAGLE20 Tofino Firewall LSM.

About Belden

Belden®: Sending All the Right Signals™

Belden designs, manufactures and markets signal transmission solutions, including cables, connectors and I/O modules, wireless network systems as well as network devices and control, load sensing and load moment limitation systems designed for safety-critical applications ranging from industrial automation to data centers, broadcast studios and the aviation and aerospace industry. The company focuses on segments of the worldwide cable and automation markets that require both highly specialized and readily available products. With manufacturing facilities in North America, Europe and Asia, Belden has recorded a total revenue of USD 1.45 billion for the fiscal year 2009.

Together with its brands Hirschmann™ and Lumberg Automation™ and Trapeze Networks™, Belden offers an extensive and highly specialized product portfolio covering the full range of data communications – from the information and control levels down to the field level. The company has more than 15 offices throughout Europe, the Middle East and Africa, with manufacturing facilities in Czech Republic, Germany, the Netherlands, UK, Denmark, Italy and Hungary.

Contact Information

For more information about Belden, please e-mail for product inquiries.

New Product Bulletin


Protect your control system against network problems and cyber threats.