Tofino security solution now includes event logger

A Byres Security product story

Edited by the Processingtalk editorial team Nov 5, 2009

Byres Security has introduced the Tofino Event Logger Loadable Security Module (LSM) as part of the Tofino industrial security solution.

Designed to record network security events and alarms, even when communication links are interrupted, the product facilitates proactive measures to improve plant availability.

This Tofino module also collects data for ANSI/ISA-99, ISO/IEC and NERC-CIP standards compliance.

Eric Byres, a industrial security specialist and chief technology officer of Byres Security, said: 'When we looked at traditional IT-type security logging solutions, we realised that critical event information can get lost if the network isn't perfect.

'SCADA networks, with their radio and satellite connections to remote sites, are often far from perfect.

'We designed the Tofino Event Logger LSM to record and protect event information, even when communication links are interrupted,' he added.

The Tofino Event Logger LSM can forward security event and alarm data to a central IT syslog server.

If communications are interrupted or if the syslog server is shut down, messages will be stored locally for forwarding later when the connection is repaired or they can be offloaded to a USB storage device.

Up to 20,000 events can be recorded.

The Tofino Central Management Platform server automatically backs up all records, giving critical data triple protection against loss.

This new module can be deployed without plant downtime or IT expertise for quick, cost-effective installation and administration, according to the company.

Its triple data storage feature means that it can be used in systems where syslog servers are not available.

The Tofino Event Logger LSM can be used for process control networks where security events and alarm data must be recorded for proactive security programs or for compliance with ANSI/ISA-99, ISO/IEC and NERC-CIP standards.

It can also be used for control and automation networks needing to record data to IT-based event logging servers or for isolated SCADA systems (such as offshore platforms) that must record security events but that have only sporadic communications (or no communications at all) back to central event logging systems.