HMS Networks - Experts & Thought Leaders

HMS Networks now announces the launch of the Anybus Defender Lineup, a suite of industrial network security appliances designed to safeguard critical infrastructures. As cyber threats increasingly target industrial environments, the Anybus Defender series provides a firewall to protect operational technology (OT) networks. New protection strategies Specifically designed for Industrial Control Systems, the primary use-cases are network segmentation in line with ISA/IEC 62443-3-3, Network Address Translation with traffic filtering and deep packet inspection (DPI) on industrial protocols to enable deep protection of industrial assets. The offering is ideal for machine builders who want to embed security in their offering, as well as asset owners in manufacturing and critical infrastructures to upgrade their existing networks with new protection strategies. Four distinct models The Anybus Defender Lineup features four distinct models to meet diverse security needs: Anybus Defender Compact 1004 – A space-efficient solution for smaller industrial environments, offering robust protection without compromising on protection use-cases. Anybus Defender 4002 – A versatile firewall designed for medium-sized networks, combining advanced security features with ease of deployment. Anybus Defender 6004 – Ideal for larger installations, this model delivers enhanced security capabilities and comprehensive network protection. Anybus Defender 6024 – The flagship model, engineered for the most demanding industrial applications, providing extensive security and network coverage. The Anybus Defenders are ideal for physical segmentation strategies and come with various port configurations from RJ-45 ethernet to SFP ports supporting copper or fibre connectivity. Anybus Defender 4002, 6004 and 6024 are available with tree different licences enabling various security use-cases.  Key features of the Anybus Defender lineup Industrial-Grade Security: Built to withstand the harsh conditions of industrial environments, the Anybus Defender appliances offer reliable performance in challenging settings. Scalable Solutions: Whether for small, medium, or large-scale operations, the Anybus Defender series provides scalable security options tailored to the specific needs of each network. ICS-aware software: Built-in industrial asset detection and policy control capabilities for industrial protocols with auto rule creation, enabling the administrator to see what they are managing and taking granular control over the network traffic with ease. User-Friendly Interface: Simplified setup and management through an intuitive interface, enabling operators to monitor and control network security effortlessly. An optional central CyberSecurity Console software can be used to manage a fleet of Anybus Defenders in one simple web user interface.  Industrial network security "We are excited to introduce the Anybus Defender Lineup, which represents a key element required for modern industrial network security," says Thomas Vasen, Business Development Manager of Network Security, adding "As industrial networks become increasingly interconnected, the need for robust security measures is paramount."  He continues, "Driven by regulations such as NIS2 and standards such as 62443-3-3 customers are implementing physical segmentation to separate their machines and critical assets. The Anybus Defender series offers reliable, scalable, and user-friendly solutions to increase visibility, reduce the risks for and the impact of a breach." The Anybus Defender Lineup is now available for order through HMS Networks’ global network of partners and distributors.

Bosch Rexroth, the automation branch of the Bosch group, has over 32,000 employees worldwide and specialises in advanced drive and control technologies. At their Customer and Innovation Centre in Ulm, Germany, they develop innovative solutions for the future of automation, such as the Smart Flex Effector, a compensation module aiming to revolutionise the industry. Smart flex effector Smart flex effector–automate the impossible David Lehmann, System Architect at Bosch Rexroth, explains what a compensation module is and what makes the Smart Flex Effector unique: “When you think about a robot in the factory, you usually think of a six-axis robot assembling parts or building a car, or something like that. The robots have some kind of tool at the tip, like a gripper. The compensation module is the part that goes between the robot arm and the gripper. The Smart Flex Effector stands out due to its ability to provide compliance (flexibility in response to forces) in six degrees of freedom (movement in three-dimensional space)." "We can measure the deflection (change in position) of the tool with high precision with an integrated sensor system. This allows us to perform complex tasks, such as precise assembly operations, that usually only humans can do. Our slogan, ‘Automate the impossible’, sums it up nicely. Our goal with this product is to enable robots to perform new tasks that they are traditionally not good at, thereby increasing efficiency and productivity.” Connectivity challenges Smart Flex Effector needs to exchange position measurement data with the robot controllers To enable the robots to perform these new tasks, the Smart Flex Effector needs to exchange position measurement data with the robot controllers, including information about the deflection of the tool and control signals for the module's locked and unlocked states. However, connecting the Smart Flex Effector to robot controllers was challenging, as David explains. “Our product was available, but we had difficulties installing it at our customer’s sites. When we talked to our customers, the feedback was often the same: 'You have this serial interface, but I don't want to spend two weeks or more trying to connect it with my robot controller. I do not have the time or the resources to do that.'” Simplifying connectivity with Anybus protocol converters To solve these connectivity challenges, Bosch Rexroth turned to HMS Networks who provided the Anybus Communicator Common Ethernet, a ready-made protocol converter capable of connecting serial devices to EtherCAT, EtherNet/IP, Modbus TCP or PROFINET controllers. A key benefit of the Anybus Communicator Common Ethernet was that the same unit can connect to all the major Ethernet protocols, as David describes “This Anybus protocol converter was the ideal solution for us because we can reconfigure it with a firmware update and with just one unit, we are able to provide the connection to the different protocols.” Anybus Communicator’s intuitive user interface Anybus Communicator could be installed via a web browser was a further plus point The Anybus Communicator’s intuitive user interface also won some new fans. “The interface is really nice. Before selling it to our customers, we tested it for ourselves in our lab where application engineers completed feasibility studies, for example. They all said that it was easy and straightforward to complete the required configurations via the web interface, which was important to us as we have customers that are not experts in automation and robotics.” The fact that the Anybus Communicator could be installed via a web browser was a further plus point. “Both we at Bosch and our customers prefer not to install third-party configuration software. It adds security risks and complexity – just getting the required admin rights often delays installations.” Smart Flex Effector + Anybus Communicator = The complete solution The Smart Flex Effector and Anybus Communicator have worked so well together that Bosch Rexroth includes the Anybus Communicator as part of a complete solution. “We decided to create an order number for the Anybus converter, so that customers could buy it directly from us. So, we sell both devices together as a complete solution.” Expanded market With the addition of the Anybus Communicator, Bosch Rexroth can easily connect to all the major Industrial Ethernet protocols, and as a result, has significantly expanded its market. "Now we really can address more or less the whole market”, David concludes. “We can cover everything; we haven't found a robot with a Fieldbus connection that is not supported by this Anybus converter yet."

The Ewon® remote solutions from HMS Networks have always prioritised security. Recently, the Ewon Cosy+, a solution for remote access, was assessed against IEC 62443-4-2 criteria by NVISO, a globally recognised cybersecurity expert, for cybersecurity. As the industry evolves, so do the standards of excellence, with IEC 62443 emerging as the benchmark for cybersecurity in industrial automation technology. Understanding IEC 62443 standards The IEC 62443 standards provide a comprehensive framework for safeguarding industrial equipment against cyber threats, complementing the already established ISO 27001 framework, which focuses primarily on IT security. The IEC 62443 standards outline the essential requirements for protecting industrial systems from security breaches. For machine builders, systems integrators, and plant operators, compliance with IEC 62443 is crucial for IIoT security. The IEC 62443 standards trace the essential needs for saving industrial systems Cédric Bassem, Senior Manager Application and Product Security at NVISO, “One of the strengths of IEC 62443 is that it provides a framework that IIoT manufacturers can use to align their device’s security requirements with the cybersecurity ambitions of the factory owners.” How to implement IEC 62443 standards Developing a secure automation solution begins with identifying risks through a detailed threat analysis for the involved systems and components. This leads to the creation of a robust security plan. The next step involves establishing appropriate processes and ensuring staff are trained in security protocols. Security extends beyond technology to encompass well-defined processes and qualified personnel. Given the evolving nature of cyber threats, it is vital that protection systems adapt over time. Continuous monitoring, maintenance, and updates are essential to maintaining security. Ewon Cosy+ has been assessed on the IEC 62443-4-2 criteria Nviso strengthens the Ewon security measures by conducting regular testing For Ewon remote solutions from HMS Networks, security is the cornerstone. The commitment to cybersecurity is demonstrated through compliance with certification standards such as ISO 27001. To maintain the highest cybersecurity standards, HMS Networks has partnered with NVISO, a pioneering independent organisation specialising in industrial cybersecurity. Nviso strengthens the Ewon security measures by conducting regular testing, providing trainings and other recurrent security verifications. Recently, with the support of NVISO, the Ewon Cosy+ was evaluated against IEC 62443-4-2 standards. Based on the assessment results, Ewon® by HMS Networks is confident that its product will seamlessly integrate into customer environments and support their IEC 62443 implementation and roadmap. The importance of cybersecurity in IIoT Sébastien Thinnes, Ewon Product & Marketing Director, underscores the significance of cybersecurity and IEC 62443 for customers: “The security of our IIoT solutions is paramount." "By implementing IEC 62443 standards, we ensure that our products provide robust protection against emerging threats, safeguarding our customers' industrial operations.”