Skip to Content
  1. All products
  2. Industrial Cybersecurity
  3. ABD6004-PROFW
  4. Industrial Cybersecurity
Pricelist: Default EUR pricelist Pricelist
Pricelist: Default EUR pricelist Pricelist

ABD6004-PROFW

The ultimate industrial security appliance — full PRO/FW feature set on 4 Gigabit Ethernet ports. The Anybus Defender 6004 with PRO/FW license combines the most powerful OT protection capabilities with the most flexible network topology in the Defender range.

Everything from NAT/FW and DPI/FW included: Deep Packet Inspection on Ethernet/IP CIP and Modbus, virtual patching via Snort and Suricata IPS, VPN (WireGuard, OpenSSL, IPsec), RADIUS/LDAP/AD authentication, DHCP server and policy scheduling. Plus PRO-exclusive features: advanced routing (RIP, BGP), traffic shaping, load balancing with multi-WAN, captive portal and high availability redundancy.

4x Gigabit Ethernet with individually configurable ports — reconfigure a LAN as 2nd WAN for true multi-WAN load balancing and failover. Ideal for large multi-zone OT environments and multi-site deployments with encrypted plant-to-plant VPN connections, centrally managed through the optional Anybus Cybersecurity Console.

Rugged fan-less IP50 metal enclosure with DIN rail mounting.

4,930.00 € 4,930.00 € (Tax excluded)
4,930.00 € (Tax excluded)

Add to cart
Terms and Conditions
Contact Us
How it worksKey use casesTechnical SpecsDocumentation

How it works

1
Install
Mount on DIN rail, connect WAN and up to 3 LAN segments — or configure multi-WAN for redundant uplinks
2
Discover & learn
Asset scanner maps all OT devices. DPI auto-learns industrial traffic patterns across all ports and suggests rules
3
Configure
Set up DPI policies, VPN tunnels, HA failover, traffic shaping and routing via web GUI — or manage centrally via the Console
4
Enforce & monitor
Full protection active across all segments: DPI, IPS, VPN, traffic shaping, HA and load balancing — with real-time notifications



Key use cases

Multi-zone OT security4x Gigabit ports with individually configurable LANs — protect multiple zones from one appliance with DPI on every segment
Deep Packet InspectionInspect Ethernet/IP CIP and Modbus at the application layer across all ports — auto-learn capable
Plant-to-plant VPNEncrypted OT connections between facilities using WireGuard, OpenSSL or IPsec — with multi-WAN failover
High availabilityRedundant deployment with automatic failover — no single point of failure for your OT security
Load balancing & multi-WANReconfigure a LAN port as 2nd WAN — distribute traffic for resilience and performance across uplinks
Traffic shapingPrioritize critical OT traffic and limit bandwidth for non-essential communications across all segments

 

Technical Specs

License typePRO/FW — Perpetual
Stateful firewallYes — deny by default
NATSimple NAT wizard, 1:1, 1:many
Bridge / transparent modeYes
VLAN supportYes — logical segmentation
Certificate managementYes
Deep Packet InspectionEthernet/IP CIP, Modbus — auto-learn capable
Intrusion Protection (IPS)Snort & Suricata — customizable signatures
Virtual patchingYes — protect unpatched legacy devices
VPNWireGuard, OpenSSL & IPsec
Remote client VPNYes
RADIUS / LDAP / AD authenticationYes
DHCP server & forwardingYes
Rules/policy schedulerYes — by date, time and duration
Captive portalYes
Routing protocolsRIPv1 & v2, BGPv4
Load balancingYes — multi-WAN (LAN port reconfigurable as 2nd WAN)
Traffic shapingYes
High availabilityYes — redundancy with automatic failover
Asset discovery & inventoryYes — OT/ICS specific, with accuracy score
NotificationsEmail, syslog, Telegram Messenger, Pushover
Central managementOptional — Anybus Cybersecurity Console


WAN1x RJ45 Gigabit Ethernet
LAN3x RJ45 Gigabit Ethernet (individually configurable)
ReconfigurableLAN ports can be reconfigured as 2nd WAN port
VLANSupported — additional logical segments
Total ports4x Gigabit RJ45


Web GUIOn-board web interface with use-case wizards
Rule creationOne-click from firewall logs + floating rules
APIIntegrated RESTful API
CLISSH / Console access
DiagnosticsTraffic diagnostics, debug tools, ARP & bandwidth monitoring


Input voltage24V DC
Current consumption (max)1100 mA
Power consumption (max)26.4W


IP ratingIP50
Housing materialMetal — fan-less
MountingDIN rail (EN 50022)
Dimensions (L x W x H)140.4 x 69.6 x 179.7 mm
Weight1270 g
Operating temperature0°C to +50°C
Humidity0–85% non-condensing


CEYes
RoHSYes (2011/65/EU)
WEEEYes
Country of originUSA


 

The Defender 6004 PRO/FW is the most complete appliance in the range. 4 Gigabit ports with full PRO feature set — DPI, IPS, VPN, HA, traffic shaping, load balancing, advanced routing and captive portal. Multi-WAN capable by reconfiguring a LAN port as 2nd WAN. For simpler deployments, see the NAT/FW or DPI/FW licenses. For a 2-port form factor, see the Defender 4002.


Documentation

anybus-defender-6004-datasheet-20240502.pdf

Anybus Defender Documentation

Build the perfect configuration

Everything you need to complete your setup!

Your Dynamic Snippet will be displayed here... This message is displayed because you did not provide enough options to retrieve its content.