Skip to Content

ABD6004-NATFW

Industrial security appliance with 4 Gigabit Ethernet ports for flexible OT network protection. The Anybus Defender 6004 with NAT/FW license provides essential firewalling, NAT and network segmentation across multiple physical and logical segments — 1x WAN and 3x individually configurable LAN ports (reconfigurable as 2nd WAN when needed).

Deny-by-default stateful firewall with versatile NAT configuration, transparent bridging and VLAN support. Built-in OT asset discovery identifies every connected device with make, type, firmware version and patch level. Configuration via intuitive web GUI with use-case wizards, one-click rule creation from firewall logs, RESTful API and CLI access. Optional central management via the Anybus Cybersecurity Console.

Rugged fan-less IP50 metal enclosure with DIN rail mounting. Ideal for protecting multiple machine cells or OT zones from a single appliance.

Price
2,030.00 € 2,030.00 € (Tax excluded)
2,030.00 € (Tax excluded)

Terms and Conditions

How it works


1
Install
Mount on DIN rail, connect WAN and up to 3 LAN segments to your machine cells or OT zones
2
Discover
Asset scanner identifies all connected OT devices across all LAN segments with firmware and patch level details
3
Configure
Use the web GUI with use-case wizards to set up NAT, firewall rules and whitelists per port — one-click rule creation from logs
4
Protect
Switch to enforcement — only whitelisted traffic gets through on each segment. Multiple zones secured from one device



Key use cases


Multi-segment OT protection4x Gigabit ports — 1 WAN + 3 individually configurable LANs. Protect multiple zones from a single appliance
IP conflict avoidanceVersatile NAT (1:1, 1:many) to connect identical machines on one network without address conflicts
Machine cell isolationDeny-by-default firewall with VLAN support — each LAN port can protect a separate machine cell or zone
IEC 62443 complianceImplement security zones and conduits according to industry standards for precise machine isolation
OT asset discoveryAutomatically identify every device across all LAN segments — make, type, firmware version and patch level
Transparent bridgingDrop into an existing network at Layer 2 without changing any IP addresses — invisible to connected devices

 

Technical Specs


License typeNAT/FW — Perpetual
Stateful firewallYes — deny by default
NATSimple NAT wizard, 1:1, 1:many
Bridge / transparent modeYes
VLAN supportYes — logical segmentation
Certificate managementYes
Asset discovery & inventoryYes — OT/ICS specific, with accuracy score
NotificationsEmail, syslog, Telegram Messenger, Pushover
Central managementOptional — Anybus Cybersecurity Console


WAN1x RJ45 Gigabit Ethernet
LAN3x RJ45 Gigabit Ethernet (individually configurable)
ReconfigurableLAN ports can be reconfigured as 2nd WAN port
VLANSupported — additional logical segments
Total ports4x Gigabit RJ45


Web GUIOn-board web interface with use-case wizards
Rule creationOne-click from firewall logs + floating rules
APIIntegrated RESTful API
CLISSH / Console access
DiagnosticsTraffic diagnostics, debug tools, ARP & bandwidth monitoring


Input voltage24V DC
Current consumption (max)1100 mA
Power consumption (max)26.4W


IP ratingIP50
Housing materialMetal — fan-less
MountingDIN rail (EN 50022)
Dimensions (L x W x H)140.4 x 69.6 x 179.7 mm
Weight1270 g
Operating temperature0°C to +50°C
Humidity0–85% non-condensing


CEYes
RoHSYes (2011/65/EU)
WEEEYes
Country of originUSA


 

Need more? The NAT/FW license covers essential firewalling, NAT, bridging and asset discovery across all 4 Gigabit ports. For Deep Packet Inspection on industrial protocols (Ethernet/IP, Modbus), virtual patching via IPS, VPN, DHCP server and policy scheduling — upgrade to the DPI/FW license. For advanced routing, traffic shaping, load balancing and high availability — see the PRO/FW license.


Build the perfect configuration

Everything you need to complete your setup!

Your Dynamic Snippet will be displayed here... This message is displayed because you did not provide enough options to retrieve its content.