Skip to Content

ABD1004-NATFW

Compact industrial firewall designed for OT network segmentation and protection. The Anybus Defender Compact 1004 with NAT/FW licence provides essential firewall, NAT and routing capabilities in a small-footprint DIN rail package — ideal for machine-level network isolation and IP conflict avoidance.

Configured via the mbNETFIX Manager Windows software — designed to feel familiar to automation engineers with a PLC-like programming interface. Features a learning mode that lets you monitor traffic before enforcing rules, versatile NAT options (1:1, Simple NAT, port forwarding) and MAC/IP/port/protocol filtering.

Security by design: secure boot and RSA-encrypted project configurations ensure your firewall setup cannot be tampered with.

533.00 € 533.00 € (Tax excluded)
533.00 € (Tax excluded)

How it works


1
Install
Mount on DIN rail, connect WAN and LAN ports between your IT network and the machine or cell you want to protect
2
Learn
Deploy in learning mode — the Defender monitors all traffic and shows you exactly what's happening on your network
3
Configure
Use mbNETFIX Manager to define your firewall rules, NAT settings and whitelists — with a familiar PLC-style interface
4
Protect
Switch to enforcement mode — only whitelisted traffic gets through. Your OT network is now segmented and secured


Key use cases


OT/IT network segmentationIsolate your production network from the corporate IT network with strict deny-by-default policies
IP conflict avoidanceUse NAT (1:1, SimpleNAT, port forwarding) to connect identical machines to one network without address conflicts
Machine-level protectionPlace a Defender in front of each machine or cell — only whitelisted traffic gets through
IEC 62443 complianceImplement security zones and conduits according to industry standards for precise machine isolation
Traffic learning & visibilityDeploy in learning mode first — see exactly what traffic flows through your network before enforcing any rules
Transparent bridgingDrop into an existing network without changing any IP addresses — the Defender works invisibly at Layer 2

 

Hightlights


PLC-style configuration
mbNETFIX Manager feels familiar to automation engineers — no networking expertise required to set up basic protection
Security by design
Secure boot, RSA-encrypted project files uniquely paired to each device — tamper-proof from factory
Compact & rugged
Only 235 g, -40 to +75°C operating range, metal housing, DIN rail mount — fits in any cabinet
Deny by default
All traffic is blocked unless explicitly allowed — the safest starting point for any OT network


Technical Specs


License typeNAT/FW — Perpetual
Stateful firewallYes — MAC, IP, port and protocol filters
NAT1:1 NAT, SimpleNAT, port forwarding
Bridge / transparent modeYes
RoutingNAT/Routing mode with static routes
IP/MAC whitelisting & blacklistingYes
Learning modeYes — monitor traffic before enforcing rules
Secure bootYes — RSA-encrypted project configurations


WAN1x RJ45 10/100 Mbit Ethernet
LAN3x RJ45 10/100 Mbit Ethernet (switch)
Total ports4x 10/100 Mbit RJ45


SoftwarembNETFIX Manager (Windows)
Interface stylePLC-like programming interface
Project securityEncrypted and uniquely paired via RSA key


IP ratingIP30
Housing materialMetal
MountingDIN rail (EN 50022)
Dimensions (W x H x D)136 x 52 x 130 mm
Weight235 g
Operating temperature-40°C to +75°C
Storage temperature-40°C to +85°C


IP ratingIP30
Housing materialMetal
MountingDIN rail (EN 50022)
Dimensions (W x H x D)136 x 52 x 130 mm
Weight235 g
Operating temperature-40°C to +75°C
Storage temperature-40°C to +85°C


CEYes
RoHSYes (2011/65/EU)
WEEEYes
Country of originGermany


 

Feature availability depends on model configuration. Visit the Owasys Developer Zone for OS and kernel information, or contact your VYNZE account manager.


Build the perfect configuration

Everything you need to complete your setup!

Your Dynamic Snippet will be displayed here... This message is displayed because you did not provide enough options to retrieve its content.