Industrial network management software designed for converged automation networks
new
EDR-G9004
2 Gigabit copper + 2 Gigabit copper/SFP combo port industrial secure routers
- 4-port Gigabit all-in-one firewall/NAT/VPN/router
- Gen3 LAN Bypass for system fault tolerance
- Dual WAN redundant interfaces through public networks
- Industrial-grade Intrusion Prevention/Detection System (IPS/IDS)
- Visualize OT security with the MXsecurity management software
- Secure remote access tunnel with VPN
- Examine industrial protocol data with Deep Packet Inspection (DPI) technology
- Easy network setup with Network Address Translation (NAT)
- Developed according to IEC 62443-4-2 with Secure Boot
- -40 to 75°C operating temperature range (-T model)
High price? Log in and buy cheaper
Place the order by 12:00, the package will be shipped on the same day
Free shipping from €300
Promocja cenowa na model HDR-15-5
Product intended for professional use onlyModels
-
Model Availability Warranty Wishlist Your PriceYour Price Items Quantity AddEDR-G9004-VPN-2MGTXSFPIndustrial secure router with 2 Gigabit copper ports with Gen3 Bypass, 2 Gigabit copper/SFP combo ports with firewall/NAT/VPN, 12-48 VDC input voltage, -10 to 60°CIn stockWarranty: €2,242.00€2,757.66Login to check your price EDR-G9004-VPN-2MGTXSFPIndustrial secure router with 2 Gigabit copper ports with Gen3 Bypass, 2 Gigabit copper/SFP combo ports with firewall/NAT/VPN, 12-48 VDC input voltage, -10 to 60°CAvailability:In stockNet price:€2,242.00 -
Model Availability Warranty Wishlist Your PriceYour Price Items Quantity AddEDR-G9004-VPN-2MGTXSFP-TIndustrial secure router with 2 Gigabit copper ports with Gen3 Bypass, 2 Gigabit copper/SFP combo ports with firewall/NAT/VPN, 12/24/48 VDC input voltage, -40 to 75°C operating temperatureOut of stock Warranty: €1,973.00€2,426.79Login to check your price EDR-G9004-VPN-2MGTXSFP-TIndustrial secure router with 2 Gigabit copper ports with Gen3 Bypass, 2 Gigabit copper/SFP combo ports with firewall/NAT/VPN, 12/24/48 VDC input voltage, -40 to 75°C operating temperatureAvailability: Out of stockNet price:€1,973.00 -
Model Availability Warranty Wishlist Your PriceYour Price Items Quantity AddEDR-G9004-VPN-2MGTXSFP-CTIndustrial secure router with 2 Gigabit copper ports with Gen3 Bypass, 2 Gigabit copper/SFP combo ports with firewall/NAT/VPN, 12/24/48 VDC input voltage, -10 to 60°C operating temperature, conformal coatingOut of stock Warranty: €2,335.00€2,872.05Login to check your price EDR-G9004-VPN-2MGTXSFP-CTIndustrial secure router with 2 Gigabit copper ports with Gen3 Bypass, 2 Gigabit copper/SFP combo ports with firewall/NAT/VPN, 12/24/48 VDC input voltage, -10 to 60°C operating temperature, conformal coatingAvailability: Out of stockNet price:€2,335.00 -
Model Availability Warranty Wishlist Your PriceYour Price Items Quantity AddEDR-G9004-VPN-2MGTXSFP-CT-TIndustrial secure router with 2 Gigabit copper ports with Gen3 Bypass, 2 Gigabit copper/SFP combo ports with firewall/NAT/VPN, 12/24/48 VDC input voltage, -40 to 75°C operating temperature, conformal coatingOut of stock Warranty: €2,459.00€3,024.57Login to check your price EDR-G9004-VPN-2MGTXSFP-CT-TIndustrial secure router with 2 Gigabit copper ports with Gen3 Bypass, 2 Gigabit copper/SFP combo ports with firewall/NAT/VPN, 12/24/48 VDC input voltage, -40 to 75°C operating temperature, conformal coatingAvailability: Out of stockNet price:€2,459.00
Accessories
-
Model Availability Warranty Wishlist Your PriceYour Price Items Quantity AddDIN rail power supply 30W 24V 1.5AIn stockWarranty: €13.40€16.48Login to check your price DIN rail power supply 30W 24V 1.5AAvailability:In stockNet price:€13.40 -
Model Availability Warranty Wishlist Your PriceYour Price Items Quantity AddLIC-IPS-DEVICE-NEW-1Y-1N-MR1-year device-based IPS licenseOut of stock Warranty: LIC-IPS-DEVICE-NEW-1Y-1N-MR1-year device-based IPS licenseAvailability: Out of stock- -
Model Availability Warranty Wishlist Your PriceYour Price Items Quantity AddLIC-IPS-DEVICE-RENEW-1Y-1N-MR1-year device-based IPS renewal licenseOut of stock Warranty: LIC-IPS-DEVICE-RENEW-1Y-1N-MR1-year device-based IPS renewal licenseAvailability: Out of stock- -
Model Availability Warranty Wishlist Your PriceYour Price Items Quantity AddSFP module with 1 1000BaseSFP port with LC connector for 30km transmission, 0 to 60?In stockWarranty: €328.00€403.44Login to check your price SFP module with 1 1000BaseSFP port with LC connector for 30km transmission, 0 to 60?Availability:In stockNet price:€328.00 -
Model Availability Warranty Wishlist Your PriceYour Price Items Quantity AddSFP module with 1 1000BaseSFP port with LC connector for 30km transmission,-40 to 85?Out of stock Warranty: €373.00€458.79Login to check your price SFP module with 1 1000BaseSFP port with LC connector for 30km transmission,-40 to 85?Availability: Out of stockNet price:€373.00 -
Model Availability Warranty Wishlist Your PriceYour Price Items Quantity AddSmall Form Factor pluggable transceiver with 1000BaseLX, LC connector, 10 km, 0 to 60°CIn stockWarranty: €257.00€316.11Login to check your price Small Form Factor pluggable transceiver with 1000BaseLX, LC connector, 10 km, 0 to 60°CAvailability:In stockNet price:€257.00 -
Model Availability Warranty Wishlist Your PriceYour Price Items Quantity AddSmall Form Factor pluggable transceiver with 1000BaseLX, LC connector, 10 km, -40 to 85°CIn stockWarranty: €302.00€371.46Login to check your price Small Form Factor pluggable transceiver with 1000BaseLX, LC connector, 10 km, -40 to 85°CAvailability:In stockNet price:€302.00 -
Model Availability Warranty Wishlist Your PriceYour Price Items Quantity AddSmall Form Factor pluggable transceiver with 1000BaseSX, LC connector, 0.5 km, 0 to 60°CIn stockWarranty: €145.00€178.35Login to check your price Small Form Factor pluggable transceiver with 1000BaseSX, LC connector, 0.5 km, 0 to 60°CAvailability:In stockNet price:€145.00 -
Model Availability Warranty Wishlist Your PriceYour Price Items Quantity AddSmall Form Factor pluggable transceiver with 1000BaseSX, LC connector, 0.5 km, -20 to 75°CIn stockWarranty: €197.00€242.31Login to check your price Small Form Factor pluggable transceiver with 1000BaseSX, LC connector, 0.5 km, -20 to 75°CAvailability:In stockNet price:€197.00 -
Model Availability Warranty Wishlist Your PriceYour Price Items Quantity AddSmall Form Factor pluggable transceiver with 1000BaseZX, LC connector, 80 km, 0 to 60°COut of stock Warranty: €1,323.00€1,627.29Login to check your price Small Form Factor pluggable transceiver with 1000BaseZX, LC connector, 80 km, 0 to 60°CAvailability: Out of stockNet price:€1,323.00 -
Model Availability Warranty Wishlist Your PriceYour Price Items Quantity AddSmall Form Factor pluggable transceiver with 1000BaseZX, LC connector, 80 km, -40 to 85°COut of stock Warranty: €1,366.00€1,680.18Login to check your price Small Form Factor pluggable transceiver with 1000BaseZX, LC connector, 80 km, -40 to 85°CAvailability: Out of stockNet price:€1,366.00 -
Model Availability Warranty Wishlist Your PriceYour Price Items Quantity AddSFP module with 1 2.5GBaseFX port with LC connector, single-mode, for 20 km transmission, -40 to 85 °C operating temperatureIn stockWarranty: €663.00€815.49Login to check your price SFP module with 1 2.5GBaseFX port with LC connector, single-mode, for 20 km transmission, -40 to 85 °C operating temperatureAvailability:In stockNet price:€663.00 -
Model Availability Warranty Wishlist Your PriceYour Price Items Quantity AddSFP module with 1 2.5GBaseFX port with LC connector, multi-mode, for 170, 200, 550, 600 m transmission, -40 to 85 °C operating temperatureIn stockWarranty: €267.00€328.41Login to check your price SFP module with 1 2.5GBaseFX port with LC connector, multi-mode, for 170, 200, 550, 600 m transmission, -40 to 85 °C operating temperatureAvailability:In stockNet price:€267.00 -
Model Availability Warranty Wishlist Your PriceYour Price Items Quantity AddSFP module with 1 2.5GBaseFX port with LC connector, single-mode, for 5 km transmission, -40 to 85 °C operating temperatureIn stockWarranty: €431.00€530.13Login to check your price SFP module with 1 2.5GBaseFX port with LC connector, single-mode, for 5 km transmission, -40 to 85 °C operating temperatureAvailability:In stockNet price:€431.00 -
Model Availability Warranty Wishlist Your PriceYour Price Items Quantity AddSFP module with 1 2.5GBaseFX port with LC connector, single-mode, for 45 km transmission, -40 to 85 °C operating temperatureOut of stock Warranty: €1,978.00€2,432.94Login to check your price SFP module with 1 2.5GBaseFX port with LC connector, single-mode, for 45 km transmission, -40 to 85 °C operating temperatureAvailability: Out of stockNet price:€1,978.00
Useful products
Industrial network security management software designed for OT networks
Description
The EDR-G9004 Series is a set of highly integrated industrial multi-port secure routers with firewall/NAT/VPN functions. These devices are designed for Ethernet-based security applications in critical remote control or monitoring networks. These secure routers provide an electronic security perimeter to protect critical cyber assets including substations in power applications, pump-and-treat systems in water stations, distributed control systems in oil and gas applications, and PLC/SCADA systems in factory automation. Furthermore, with the addition of IDS/IPS, the EDR-G9004 Series is an industrial next-generation firewall, equipped with threat detection and prevention capabilities to further protect critical infrastructure from cybersecurity attacks.
Defend Against Malicious Threats With Advanced Cybersecurity Features
The EDR-G9004 Series’ embedded firewall uses policy rules to control network traffic between trusted zones while Network Address Translation (NAT) shields the internal network from unauthorized access by outside hosts. The Virtual Private Networking (VPN) functionality further provides users with secure communication tunnels when accessing the private network from the public Internet. To help protect your OT assets from cyberattacks, the EDR-G9004 Series supports Deep Packet Inspection (DPI) to examine the data portion of network packets for various OT-specific protocols.
Simplify Configurations With the User-friendly Interface and Quick Settings
The EDR-G9004 Series’ Setup Wizard provides an easy way for users to set up DMZ ports to create a secure network buffer zone in just three steps. In addition, the object-based firewall management feature gives engineers a simple way to configure and maintain firewall filtering for IP addresses and subnets, network services, industrial application services, and user-defined services.
Industrial-grade Design to Ensure Uninterrupted Network Connectivity
The EDR-G9004 Series’ rugged hardware makes these secure routers ideal for harsh industrial environments, featuring wide-temperature models that are built to operate reliably in hazardous conditions and extreme temperatures of -40 up to 75°C. Moreover, the EDR-G9004 Series supports WAN, Layer 3 redundancy mechanisms, and Gen3 LAN Bypass fault tolerance to ensure that your network stays connected at all times.
Virtual Patching and Intelligent Threat Protection
Patching remains a major challenge in OT environments because OT applications cannot afford interrupting operations by shutting down systems to apply patches. Virtual patching technology can help complement existing patch management processes by shielding known and unknown vulnerabilities. In addition, the EDR-G9004 features intelligent IPS functionality for continuous protection against cyberthreats which uses pattern-based detection to identify and block known attacks.
MX-ROS Addresses Growing Cybersecurity Threats
Moxa’s MX-ROS is a software platform for industrial security routers and firewalls. The platform supports the robust security and user-friendly operation of secure routers through simplified web and CLI interfaces. In addition to adhering to IEC 62443-4-2, MX-ROS devices offer a wealth of the latest cross-industry Operational Technology (OT) network management features with each release to safeguard hardware and software.
Technical Specification
- Input/Output Interface
Alarm Contact Channels | Resistive load: 1 A @ 24 VDC |
Buttons | Reset button |
Digital Input Channels | +13 to +30 V for state 1 -30 to +3 V for state 0 Max. input current: 8 mA |
- Ethernet Interface
10/100/1000BaseT(X) Ports (RJ45 connector) | 2 (with Gen3 LAN Bypass) |
Combo Ports (10/100/1000BaseT(X) or 1000/2500BaseSFP) | 2 |
DMZ | Supports DMZ port |
Standards | IEEE 802.3 for 10BaseT IEEE 802.3u for 100BaseT(X) IEEE 802.3ab for 1000BaseT(X) IEEE 802.3z for 1000BaseSX/LX/LHX/ZX IEEE 802.3x for flow control |
- Ethernet Software Features
Management | Back Pressure Flow Control DDNS DHCP Server/Client Web Console (HTTP/HTTPS) LLDP SNMPv1/v2c/v3 Telnet TFTP HTTPS SSH |
Routing Throughput | Max. 350K packets per second / 2 Gbps (based on RFC 2544) |
Routing Table | Max. 4K routing rules |
Concurrent Connections | Max. 400K (based on RFC 3511) |
Connections Per Second | Max. 20K (based on RFC 3511) |
Routing Redundancy | VRRP |
Security | Secure Boot IPsec L2TP (server) RADIUS TACACS+ Trust access control SCP SFTP NTP authentication Syslog Authentication |
Time Management | NTP Server/Client SNTP |
Multicast Routing | Static Route |
Unicast Routing | OSPF RIPV1/V2 Static Route |
- LED Interface
LED Indicators | PWR1, PWR2, STATE, BYPASS, WAN/DMZ, VRRP/HA, VPN, USB |
- DoS and DDoS Protection
Technology | ARP-Flood FIN Scan ICMP Flood TCP Sessions Without SYN NMAP-ID Scan NMAP-Xmas Scan Null Scan SYN/FIN Scan SYN/RST Scan SYN-Flood Xmas Scan |
- Firewall
Filter | DDoS Ethernet protocols ICMP IP address MAC address Ports |
Stateful Inspection | Router firewall Transparent (bridge) firewall |
Deep Packet Inspection | Modbus TCP Modbus UDP DNP3 IEC 60870-5-104 IEC 61850 MMS EtherNet/IP MELSEC Omron FINS OPC UA Siemens S7 Comm. Siemens S7 Comm. Plus Additional protocols will be supported through future firmware updates. |
Intrusion Prevention System | Requires an additional license. |
Throughput | Firewall: Max. 350K packets per second / 2 Gbps (based on RFC 2544) IPS: Max. 200K packets per second / 2 Gbps (based on RFC 2544) |
- IPsec VPN
Authentication | MD5 and SHA (SHA-512) RSA (key size: 1024-bit, 2048-bit) X.509 v3 certificate |
Concurrent VPN Tunnels | Max. 250 IPsec VPN tunnels |
Encryption | DES 3DES AES-128 AES-192 AES-256 AES-256-GCM |
Protocols | IPsec L2TP (server) PPTP (client) |
Throughput | Conditions: AES-256, SHA-256 Max. 100K packets per second / 800 Mbps (based on RFC 2544) |
- NAT
Features | 1-to-1 N-to-1 NAT loopback Port forwarding |
- Real-Time Firewall / VPN Event Log
Event Type | Firewall event VPN event |
Media | Local storage SNMP Trap Syslog server |
- Serial Interface
Console Port | RS-232 (TxD, RxD, GND), 3-pin (115200, n, 8, 1) |
Connector | USB Type-C |
- Power Parameters
Connection | Removable terminal block |
Input Voltage | 12/24/48 VDC, redundant dual inputs |
Operating Voltage | 9.6 to 60 VDC |
Input Current | 1.01 A @ 12 VDC 0.51 A @ 24 VDC 0.27 A @ 48 VDC |
Reverse Polarity Protection | Supported |
- Physical Characteristics
Housing | Metal |
IP Rating | IP40 |
Dimensions | 45 x 135 x 105 mm (1.77 x 5.31 x 4.13 in) |
Weight | 800 g (1.76 lb) |
Installation | DIN-rail mounting Wall mounting (with optional kit) |
- Environmental Limits
Operating Temperature | Standard Models: -10 to 60°C (14 to 140°F) Wide Temp. Models: -40 to 75°C (-40 to 167°F) |
Storage Temperature (package included) | -40 to 85°C (-40 to 185°F) |
Ambient Relative Humidity | 5 to 95% (non-condensing) |
- Standards and Certifications
Safety | IEC 62368-1 UL 62368-1 |
EMC | EN 55032/35 |
EMI | CISPR 32, FCC Part 15B Class A |
EMS | IEC 61000-4-2 ESD: Contact: 8 kV; Air: 15 kV IEC 61000-4-3 RS: 80 MHz to 1 GHz: 20 V/m IEC 61000-4-4 EFT: Power: 4 kV; Signal: 4 kV IEC 61000-4-5 Surge: Power: 2 kV; Signal: 4 kV IEC 61000-4-6 CS: 10 V IEC 61000-4-8 PFMF |
Railway | EN 50121-4 |
Shock | IEC 60068-2-27 |
Freefall | IEC 60068-2-32 |
Vibration | IEC 60068-2-6 |
- MTBF
Time | 1,876,185 hrs |
Standards | Telcordia (Bellcore), GB |
- Warranty
Warranty Period | 5 years |
Download
Recommended Products
Recommended
8 FE copper + 2 GbE SFP multiport industrial secure router
Recommended
5-port entry-level unmanaged Ethernet switches
Recommended
5-port entry-level unmanaged Ethernet switches with metal housing
Recommended
1-port MQTT-supported Modbus RTU/ASCII/TCP-to-EtherNet/IP gateways