Swedish flag with blue background and yellow cross, symbolizing Sweden's national identity and heritage.

Vretenborgsvägen 28, floor 6
SE – 126 30 Hägersten
Phone: + 46 8 683 03 00

Norwegian flag featuring a blue cross with white borders on a red background, symbolizing Norway.

Midstranda 51
NO – 2321 Hamar
Phone: + 47 62 54 02 91

Flag of Denmark, national flag with red background and white cross, symbolizing Danish heritage and pride, used in official and cultural contexts in Denmark.

Hassellunden 14
DK – 2765 Smørum
Phone + 45 70 300 310

Get connected

942 355-002

IAF-240 Advanced – Industrial Firewall with Deep Packet Inspection by Hirschmann

The Hirschmann IAF-240 Advanced is a DIN rail industrial firewall for critical infrastructure and Industry 4.0 applications, bundling the IAF-240 hardware with a 3-year Advanced Edition subscription covering deep packet inspection for OT protocols including DNP3, EtherNet/IP, IEC 61850 GOOSE, Modbus TCP, OPC, and Siemens S7, plus anti-malware, web filtering, VPN, high availability, and Docker edge computing. Powered by a quad-core NXP ARMv8 processor with 4 GB LPDDR4 and 64 GB eMMC on dual 12–24V DC supply, it operates from -40°C to +70°C with ATEX Zone 2 hazardous location approvals. Available from Recab, your Nordic partner for Hirschmann industrial firewall solutions.
Description
The Hirschmann IAF-240 Advanced is a DIN rail industrial firewall platform combining the IAF-240 hardware with a 3-year Advanced Edition software subscription, engineered for critical infrastructure protection, Industry 4.0 OT security, and secure remote access in process automation, energy, and manufacturing environments. The hardware is built around a quad-core NXP i.MX 8M Mini ARMv8 64-bit Cortex-A53 processor at 1.6 GHz with 4 GB LPDDR4 memory, 64 GB eMMC storage, TPM 2.0 hardware encryption, and four Gigabit Ethernet RJ45 ports at 10/100/1000 Mbit/s, plus an RS-232/422/485 serial interface, in a 48 x 137 x 105 mm aluminium DIN rail housing drawing only 2.5–12W from a dual 12–24V DC supply. The Advanced Edition subscription adds deep packet inspection covering AMP, DNP3, EtherNet/IP, IEC 61850 GOOSE, IEC104, Modbus TCP, OPC, Siemens S7 and S7 Plus for full OT protocol visibility and threat detection at the application layer, alongside anti-malware, web filtering and blacklisting, IDS-adjacent application control, and eXpress Data Path acceleration. VPN connectivity is provided via IPsec IKEv2, OpenVPN, WireGuard, and WebVPN, and high availability is managed through configuration synchronisation, status synchronisation, and VRRP Virtual IPs for redundant deployment scenarios. Cloud-based firewall management, VLAN, QoS, Python and Bash scripting, Docker container support for edge application deployment, and SNMPv3 complete the management suite. Layer 3 routing with NAT, SNAT, DNAT, and BiNAT enables network segmentation. Operating from -40°C to +70°C with ATEX Category 3G Zone 2 and UL Class 1 Div. 2 hazardous location approvals, CE, FCC, and UL 61010 certification, and a 60-month guarantee. Available from Recab, your Nordic partner for Hirschmann industrial firewall solutions.
Features
  • Deep packet inspection covers DNP3, EtherNet/IP, IEC 61850 GOOSE, IEC104, Modbus TCP, OPC, and Siemens S7 protocols.
  • Anti-malware and web filtering/blacklisting protect OT networks from malware and unwanted internet traffic.
  • IPsec IKEv2, OpenVPN, WireGuard, and WebVPN multipoint VPN support secure remote access and site interconnection.
  • High availability with configuration synchronisation, status synchronisation, and VRRP Virtual IPs enables redundant deployments.
  • ATEX Category 3G Zone 2 and UL Class 1 Div. 2 approvals permit installation in hazardous process industry locations.
  • Docker container support and Python/Bash scripting enable flexible edge application deployment and automation scripting.
Specifications
CPU NXP i.MX 8M Mini ARMv8
Memory LPDDR4 4 GB
Storage 64 GB eMMC
Voltage Dual 12 – 24 V DC
Power Minimum 2.5W, Maximum 12W
Ports 4 x GbE RJ45
Humidity 5-95 %
Housing Aluminum with DIN clip
IP Rating IP30
Guarantee 60 months
  • Critical infrastructure OT network security requiring deep packet inspection of IEC 61850 and Modbus TCP traffic
  • Industry 4.0 manufacturing OT/IT boundary protection with anti-malware and web filtering capabilities
  • Process automation secure remote access via multi-protocol VPN with high availability VRRP failover
  • Hazardous location industrial firewalling with ATEX Zone 2 and UL Class 1 Div. 2 approved hardware