iSIM is an intuitive network management tool for Radiflow’s secure ruggedized gateways installed at remote sites and substations.
CROSS-NETWORK MAINTENANCE
Combine multiple iSEG Secure gateways on different networks into maintenance groups for easy batch OS upgrades
SECURITY VIOLATION ALERTING
Filterable, prioritized security alerts from across all managed gateways, with all required exception details
USER-ACCESS MANAGEMENT
Security profiles are converted into firewall rules, which are automatically uploaded to the secure gateways
AUTOMATIC DATABASE BACKUP
Automatic backup of device settings databases for restoring misconfigured devices or setting up failover gateways
NETWORK PERFORMANCE ANALYSIS
Performance visibility including traffic statistics and reports for maintenance log files and
AUTHENTICATION MANAGEMENT
Radiflow’s Authentication Proxy Agent allows setting time and device access constraints, for maintenance activities
Management tool for on-site iSEG secure gateways
iSIM provides a real-time view of all networked devices and allows combining devices on disparate networks into a single group for simple, quick cross-network maintenance, thus increasing the cost-effectiveness of the operator’s overall cybersecurity operation.
iSIM significantly simplifies OS upgrading by creating device groups and allowing for group batch operations. Prior to the upgrade, iSIM verifies each device’s connectivity, to enable uploading the new OS version to all device group members. Upon completion, a detailed report is issued.
iSIM periodically backs up device configurations to the server. This backup can be used to restore the configuration of devices that had been misconfigured due to human error, or should a physical replacement of a device be needed.
Security
Radiflow’s devices offer advanced security features such as a distributed firewall and task-based validation of human-to-machine (H2M) sessions. This enables granting access to only specific end-devices without exposing the entire network. All user access and activities are fully logged.
Radiflow’s distributed firewall enables enforcing security profiles across the network according to predetermined policies. iSIM translates the security profiles into firewall rules, which are automatically uploaded to the secure gateways across the network. This ensures that the same profiles are used across the network.
When service maintenance is needed but granting access to the entire network is not acceptable, Radiflow’s APA (Authentication Proxy Agent) allows setting a time window for accessing a specific device via the distributed firewall.
iSIM enables selecting specific Radiflow devices on the network and creating custom firewall rules for each device. This in effect creates, during the allotted time window, a direct tunnel from the technician’s PC to the specific SCADA device (PLC, IED, RTU, etc.) without exposed the entire network. At the end of the access window a detailed log file is generated with all of the technician’s operations.
Diagnostics
iSIM provides a map view of the network topology, divided into sub-networks, indicating each edge device (by Radiflow or otherwise) such as PLCs, RTUs etc.
Events reported to iSIM by Radiflow’s networked devices are presents in an aggregate view.
Operational alerts are prioritized and color-coded, and presented graphically as map links. The user is able to filter alerts by severity, protocol and more.
iSIM also contains traffic analysis tools, which provide:
