ProSoft Insights / Technology focus

Ensuring Secure Remote Connectivity

Language

Search Insights

Categories

Tags

Subscribe

Yes, I would like to receive marketing information from ProSoft Technology, Inc., and its affiliates, subsidiary companies and brands indicated below.

I therefore provide my consent to the use of the personal information submitted here for the purpose of providing me marketing information related to ProSoft Technology, Inc. and its affiliates’ and subsidiaries’ products, services and marketing events. I understand that I may withdraw my consent at any time. Additional information regarding ProSoft’s data privacy policies, including how to withdraw this consent, is available at www.prosoft-technology.com/privacy. ProSoft Technology, Inc. is a subsidiary of Belden Inc., and their affiliates, subsidiary companies and brands include ProSoft Technology SAS, ProLinx Comunicacao Industria, LTDA; Global Blue Networks Inc., and ProSoft Technology (Asia Pacific) SDN BHD.

Recent Posts

Radios keep AGV circuit safe for automotive manufacturer

21 Aug, 2019 / Application stories

In a busy automotive plant in Liverpool, U.K., a production line handles electric hybri...

Australia mine ensures safety in harsh environment

19 Aug, 2019 / Application stories

A large copper mine in Australia was facing an issue that similar end users in the vert...

System integrator solves protocol clash in Italy

09 Aug, 2019 / Application stories

A system integrator in Italy tends to use Siemens® with PROFIBUS already integrated. A ...

Increase productivity with 4G connectivity

02 Aug, 2019 / Work Smarter

You know 3G is nearing its retirement soon. What you may not know is the benefits 4G co...

Ensuring Secure Remote Connectivity

Security, Vulnerabilities, and Patch Management

The machine has been delivered, installed, and commissioned by the OEM, and the remote connectivity vendor’s “cyber secure” certificate is hanging on your wall, but time has passed, the outdated certificate has expired, new vulnerabilities have been discovered and patches issued. The end user has to schedule downtime for the maintenance team to install patches to keep the remote access system secure to maintain service level agreements with the integrator/OEM.

 

ProSoft Connect is a secure cloud-native platform for the IIOT. What does this mean?

Connect is a Cloud-native service hosted on Amazon Web Services, which is a highly reliable platform with physical security built in. Connect uses a container and micro-service architecture. This increases security in multiple ways:

  • Micro-services run independently from each other; this reduces the chance of cascading vulnerability where an attack on one service results in access to another service.
  • Containers only provide the services required for the micro-service to run. This approach significantly decreases the “attack surface” or ways the attacker can penetrate the software.

 

Anytime a vulnerability is found in a service used in Connect, we update the container(s) used in that service and immediately eliminate the threat for ALL users.

Learn more about the containers and micro-services architecture in this white paper!

 

Security - Aligned with IEC62443 and NIST 800-82 Industrial and Automation Security Standard

 

  • EasyBridge Secure Remote Access provides an AES256 encrypted Layer 2 VPN connection between the user's PC and the network connected to the Connect gateway.
  • VPN uses SSTP and L2TP client with IPSec encryption tunneling protocol.
  • All communications with the ProSoft Connect service use HTTPS for site authentication and data encryption.
  • Gateways are activated in Connect using a two-step authentication.
  • 2-Factor authentication (Email- and app-based)
  • Outbound connections only - All gateway connections are initiated by the gateway to prevent a spoofed service from initiating a gateway connection.
  • No user-installed software is required, which eliminates potential “watering hole” attacks and time-consuming software patch maintenance for the user.
  • ProSoft Connect uses the native OS VPN client and does not require IT approval to install software, as there isn’t any.

 

Connect does not require updates for security patches, as these are taken care of by the OS security updates. With the Connect service any hardware firmware updates can be implemented by the Owner (IT) or Administrator (Engineering team leader) during scheduled downtime, minimizing the impact of the live plant or by individual gateway when required.

 

Learn more in this white paper about security considerations to keep in mind when evaluating remote connectivity solutions for industrial applications.

Learn more about ProSoft Connect here.