Product Hierarchy
Product Hierarchy

TOFINO XENON IEC104 Enforcer LSM - TOFINO XENON IEC104 Enforcer LSM


The Tofino Xenon IEC104 Enforcer Loadable Security Module (LSM) is a content inspector for IEC104 communications, checking every IEC104 command against a list of "allowed" message types and function codes defined by your control engineers.

Product description

Name: TOFINO XENON IEC104 Enforcer LSM
Part Number: 942140007

Configuration features

Configuration functions: Simple configuration using the Tofino Configurator

Diagnostics features

Alarm and event actions: Reports security alerts to a syslog server and to non-volatile memory on a Tofino Xenon Industrial Security Appliance
Event generation: All standard Tofino modes supported:
• Test: all traffic allowed; alerts generated as per user rules
• Operational: traffic filtered and alerts generated as per user rules
Modules and components: • Tofino Xenon Industrial Security Appliance. This new enforcer cannot be run in older systems. They will work for existing Tofino Xenons in the field.
• Tofino Firewall/Event Logger LSM
• Tofino Configurator version 3.2
Monitoring: Deny by default: any IEC104 function code that is not on the "allowed" list is automatically blocked and reported
The following options may be set on a per-connection basis:
• Permitted common address and I/O address size
• Permitted originator address and common address
• Permitted IEC104 Unit IDs
• Sanity check enable/disable
• TCP Reset on blocked traffic (when utilizing TCP transport protocol)
• Cause of Transmission Size (COT)

Further Instructions

History

Update and Revision: Revision Number: 0.40 Revision Date: 10-14-2025
No accessories are available for this product