Supported devices and protocols
Kaspersky Industrial CyberSecurity for Networks analyzes traffic of the following types of devices used for process automation:
- Programmable logic controllers (PLC)
- Intelligent electronic devices (IED)
- Devices with server software installed
- Devices categorized as network equipment
Kaspersky Industrial CyberSecurity for Networks also has generic types of devices for process control: Generic PLC, Generic IED and Generic Gateway. Using these types of devices, you can configure Kaspersky Industrial CyberSecurity for Networks to analyze traffic for those devices that are not on the list of supported types. For generic types of devices, you can specify any combination of application-level protocols from the list of supported protocols on devices related to programmable logic controllers, intelligent electronic devices and network gateways.
For the supported types of devices, Kaspersky Industrial CyberSecurity for Networks analyzes communications over the following application-level protocols:
- ABB SPA-Bus
- Allen-Bradley EtherNet/IP
- BECKHOFF ADS/AMS
- BSAP
- CODESYS V2 and V3 Gateway over TCP and V3 Gateway over UDP
- COS
- DMS for ABB AC 700F devices
- DNP3
- Emerson ControlWave Designer
- Emerson DeltaV, including the protocol for updating embedded software (firmware)
- FTP
- General Electric EGD
- General Electric SRTP
- IEC 60870: IEC 60870-5-101, IEC 60870-5-104
- IEC 61850: GOOSE, MMS (including MMS Reports), Sampled Values
- INA2000
- KNXnet/IP
- Mitsubishi MELSEC System Q
- MMS (ISO 9506-2)
- Modbus TCP
- OMRON FINS
- OPC DA, protocol for interaction of devices over WMI technology
- OPC UA Binary
- PROFINET IO and RPC for PROFINET IO
- Schneider Electric UMAS
- Siemens Industrial Ethernet
- Siemens S7comm, S7comm-plus
- TASE.2
- YARD
- Yokogawa Vnet/IP
- Relematika BDUBus
- PNU20
- Modification of the Modbus TCP protocol for devices of Ekra 200 series
- AutomationDirect DirectLOGIC device interaction protocol
- Protocol for interaction of Foxboro FCP270, FCP280 devices
- IPU-FEU device interaction protocol
- MiCOM C264 device interaction protocol
- Valmet DNA device interaction protocol
- Protocol for initial setup of Prosoft-Systems devices
- DTS data transfer protocol
- Protocol of devices with Siemens DIGSI 4 system software
- Protocols for interaction of devices in Honeywell Experion PKS / PlantCruise control systems
- Protocols for initial configuration and interaction of Moxa NPort series devices
- Protocols for detection and interaction of Honeywell ControlEDGE 900 series devices
To analyze traffic and interactions of devices, the application uses specialized modules for processing application-level protocols. The modules included in packages from the Kaspersky Industrial CyberSecurity for Networks distribution kit provide support for the listed types of devices and application-level protocols. You can update protocol processing modules by installing updates. When installing updates to the application, new modules that support additional types of devices and/or application-layer protocols may be added.
