Industrial Firewall / Grid Security Gateway

Overview

The Industrial Firewall is a dedicated boundary security device for electric power monitoring system network protection. Lingqi’s industrial firewall is designed in strict compliance with China’s National Development and Reform Commission Decree No. 14 and Classified Protection 2.0 standards, providing dual-layer protection of “vertical encryption authentication plus horizontal security isolation.” On the vertical axis, it supports national cryptography algorithms SM2/SM3/SM4 with digital certificate authentication, delivering end-to-end encrypted transmission for IEC 61850, IEC 104, and Modbus protocols. On the horizontal axis, it implements three-layer isolation at the physical, network, and application levels.

The firewall uses an industrial-grade network processor with wire-speed processing up to 1Gbps and zero packet loss for 64-byte packets. It supports 3000+ security policy rules with Deep Packet Inspection (DPI) for precise identification and filtering of specific industrial protocol commands. Dual-machine hot standby and Bypass failover ensure automatic switchover to the backup device or pass-through mode during single-point failures, maintaining uninterrupted power communication services.

Protocols

• IEC 61850 (GOOSE, MMS)
• IEC 60870-5-101/104
• Modbus RTU/TCP
• OPC UA
• MQTT
• CAN / CANopen
• DLT645
• PROFINET (via 400+ library)
• BACnet (via 400+ library)

Certifications

• CE
• ISO 9001 / ISO 14001 / ISO 45001
• State Grid Electric Power Research Institute (China)
• China Southern Grid Certification