EN50155 approved Security Gateway platform to enforce secure separation of critical networks.
Acting as a barrier between key areas of your network, the EN50155 RazorSecure Security Gateway - when integrated with RazorSecure’s Delta anomaly detection software - provides comprehensive protection and monitoring for safety-critical systems.
Key Capabilities
The RazorSecure Security Gateway (SGW) is designed to easily deploy and manage sophisticated network segregation and separation across a diverse range of on board architectures. Created for both new and existing rolling stock, it uses a layer-7 firewall with rail protocol support, providing a turnkey solution for the protection and monitoring of onboard networks.
SGW segregates critical on board networks and enforces separation between security zones, reducing cyber attack surface and protecting potentially vulnerable systems. By performing layer-7 traffic inspection and passing only approved traffic, the SGW protects the train’s operational systems, ensuring vehicle safety, availability, and resilience to cyber threats.
SGW alerts operators to any unauthorised traffic detected, and when deployed with RazorSecure’s Delta Intrusion Detection System, wider network activity is also monitored to reliably detect threats, anomalies, and changes in network configuration throughout the train
Key Benefits
-
PROTECT THE INTEGRITY OF ON-BOARD SYSTEMS
Security Gateway reduces cyber attack surface and eliminates vulnerabilities by ensuring access through conduits is controlled, and separation between security zones is enforced. By passing only approved traffic and verifying conformance to rail protocols with the expected payload, SGW protects the trains critical operational systems.
-
DETECT NETWORK THREATS
Security Gateway alerts operators to any unauthorised traffic it detects. When deployed with RazorSecure’s Delta Intrusion Detection System, wider network activity is also monitored to reliably detect threats, anomalies and changes in network configuration throughout the train.
-
CYBER COMPLIANCE FOR NEW & LEGACY FLEETS
Security Gateway is easily integrated with on board networks without modifying existing routing. It can be deployed virtually or as an appliance, supporting compliance with IEC62443 and TS50701 for all types of rolling stock.
-
EVOLVING CYBER PROTECTION
Security Gateway meets the developing cyber security needs of today’s trains by providing a secure on board platform capable of supporting a range of applications, including log aggregation, secure network services, access control, and authentication.