FL MGUARD security routers combine a stateful inspection firewall, NAT address translation and an IPsec VPN gateway in a single DIN-rail housing. The family ranges from the FL MGUARD 2102 with two RJ45 ports and two VPN tunnels, through the FL MGUARD 4302 with 250 tunnels and extended firewall functions, to the FL MGUARD 4305 with five RJ45 ports, a separate DMZ zone and a three-port managed switch. Where neither a DMZ nor 250 tunnels are required, the five-port FL MGUARD 2105 is an alternative, with a four-port unmanaged switch and two VPN tunnels. A throughput of 10/100/1000 Mbit/s allows network segmentation without restricting data traffic-the firewall handles up to 940 Mbit/s in router mode and up to 850 Mbit/s in stealth mode.
Product certification to IEC 62443-4-2 is confirmed by the datasheets for the FL MGUARD 2102 and 4305; both also provide safe separation for PROFIsafe according to IEC 61784-3-3. In the 4300 series, the development process is additionally certified to IEC 62443-4-1, and the 4302 and 4305 models carry DNV approval. The FL MGUARD 4305 operates from −40 °C to +60 °C with a 12–36 V DC supply; the FL MGUARD 2102 has a narrower range of −20 °C to +60 °C with the same supply range.
Because the railway-sector TS 50701 standard is derived from the IEC 62443 series, selected mGuard routers meet its requirements and can be used in diagnostic, remote-monitoring and data-transmission networks for railway infrastructure. Stealth mode allows the device to be inserted into an existing installation without changing the addressing, while centralized management is provided by mGuard Device Manager.
