Cybersecurity Right in the Switch

• Real-time encryption (MACsec) at line speed through hardware-based “Media Access Control Security” encryption (IEEE 802.1 AE, MACsec)

• Easy retrofitting/integration into existing applications (protocol-independent – Modbus TCP, BACnet^®, PROFINET RT etc.)

• Optional authentication of network subscribers (IEEE 802.1X and RADIUS) allows you to control access to the network.

• Compact control cabinet dimensions (45 × 90 × 110 mm) save space and make use in existing systems easier.

• Easy configuration and commissioning, even without specialists

• Network segmentation with Virtual Local Area Networks (VLANs)

• Especially high network redundancy and availability with “Rapid Spanning Tree Protocol” (RSTP)

WAGO’s new industrial managed switches make it easy for users to increase the security of their building automation applications. This innovation integrates cybersecurity functions: 128-bit encryption of data packets on two ports. This makes it possible to retrofit secure data transmission in an existing network – regardless of the protocol and without changes in the application. The encryption meets the IEEE 802.1AE standard (IEEE MAC Security Standard), ensuring data integrity and sender authentication alongside high data throughput.

The optional authentication of other network subscribers uses a port-specific approach in accordance with IEEE 802.1X and RADIUS Server. Due to their compact geometry (45 × 90 × 110 mm), the new 8-port gigabit switches can be easily retrofitted in control cabinets. With WAGO’s 852-1328 Industrial Managed Switch, SFP modules are used for secure communication. This also allows distant buildings to be linked into the network using optical fibers. Configuration and diagnostics of the industrial managed switches are also performed securely using a Web browser or SNMPv3.