Swedish flag with blue background and yellow cross, symbolizing Sweden's national identity and heritage.

Vretenborgsvägen 28, floor 6
SE – 126 30 Hägersten
Phone: + 46 8 683 03 00

Norwegian flag featuring a blue cross with white borders on a red background, symbolizing Norway.

Midstranda 51
NO – 2321 Hamar
Phone: + 47 62 54 02 91

Flag of Denmark, national flag with red background and white cross, symbolizing Danish heritage and pride, used in official and cultural contexts in Denmark.

Hassellunden 14
DK – 2765 Smørum
Phone + 45 70 300 310

Get connected

EAGLE40-4F-SECURITY

EAGLE40-4F-SECURITY – Industrial Firewall with Deep Packet Inspection by Hirschmann, a Belden Brand

The Hirschmann EAGLE40-4F-SECURITY is a field-level industrial firewall with 4x Gigabit Ethernet RJ45 ports, stateful packet inspection, multipoint IPSec VPN, and Deep Packet Inspection modules covering Modbus TCP, OPC, EtherNet/IP, IEC 104, DNP3, and AMP protocols. Built on an NXP i.MX 8M Mini ARMv8 Cortex-A53 processor, it operates from -40 to +70°C in a compact aluminum DIN rail housing with ATEX Category 3G Zone 2 approval. Available from Recab, your Nordic partner for Hirschmann industrial firewall solutions.
Description
The Hirschmann EAGLE40-4F-SECURITY is a field-level industrial next-generation firewall that extends the EAGLE40-4F platform with Deep Packet Inspection capability, specifically targeting the protocol-level security requirements of operational technology networks. In addition to the full stateful inspection firewall, multipoint IPSec VPN, and routing features shared with the EAGLE40-4F-ROUTER variant, the SECURITY model adds the Unified Protection Suite DPI Enforcer Modules, providing application-layer inspection and enforcement for Modbus TCP, OPC, EtherNet/IP, IEC 104, DNP3, and AMP — the core protocols used in SCADA, energy, and process automation environments. This enables the EAGLE40-4F-SECURITY to enforce not just network-layer policies but also protocol-specific command and data validation rules, providing a far stronger security posture for critical OT infrastructure than stateful inspection alone. The hardware platform is identical to the ROUTER variant: an NXP i.MX 8M Mini ARMv8 64-bit Cortex-A53 processor at 1.6GHz, 2GB LPDDR4 RAM, and 8GB eMMC storage, drawing just 2.5 to 12W from a dual 12 to 24VDC supply. The four 10/100/1000Mbps GbE RJ45 ports are complemented by a 1x RJ45 serial interface for RS-232, RS-422, and RS-485 connectivity. Security features also include DoS prevention, role-based access control, firewall learning mode, routed and transparent firewall modes for Layer 2 and Layer 3 filtering, LDAP and RADIUS authentication, management VLAN, and ingress storm protection. Routing covers OSPFv2, static routing with route tracking, multinetting, 1-to-1 NAT, port forwarding, and VLAN routing. VRRP provides gateway redundancy. The 48 x 137 x 105mm aluminum DIN rail housing operates from -40 to +70°C and carries CE, FCC, UL 61010, ISA-12.12.01 Class 1 Div. 2, and ATEX-95 Category 3G Zone 2 approvals with a 5-year warranty. Available from Recab, your Nordic partner for Hirschmann industrial firewall solutions.
Features
  • Deep Packet Inspection Enforcer Modules cover Modbus TCP, OPC, EtherNet/IP, IEC 104, DNP3, and AMP protocols.
  • The Unified Protection Suite enforces application-layer protocol rules beyond what stateful inspection alone can achieve.
  • Multipoint IPSec VPN with IKE v1/v2, AES-256, and X.509v3 certificates secures inter-site OT network connectivity.
  • Routed and transparent stateful firewall modes provide Layer 2 and Layer 3 filtering flexibility for diverse OT architectures.
  • ATEX-95 Category 3G Zone 2 and ISA-12.12.01 Class 1 Div. 2 approvals confirm safe deployment in hazardous industrial areas.
  • Low 2.5 to 12W power draw from dual 12 to 24VDC supply enables energy-efficient distributed field-level security deployment.
Specifications
Type EAGLE40-4F-SECURITY
CPU NXP i.MX 8M Mini
Memory LPDDR4 2 GB
Storage 8 GB eMMC storage
Power Dual 12 - 24 V DC
Weight 613 g
Dimensions 48 x 137 x 105 mm
IP Rating IP30
Warranty 5 years
Operating Temp -40-+70 °C
  • SCADA and process control OT network protection with protocol-level DPI for Modbus TCP and IEC 104
  • Energy and power grid field device security using DPI enforcement for DNP3 and OPC protocols
  • EtherNet/IP and industrial automation zone firewall protection with deep packet inspection and IPSec VPN
  • Hazardous area OT cybersecurity deployments requiring ATEX Zone 2 certified DPI-capable firewalls