Swedish flag with blue background and yellow cross, symbolizing Sweden's national identity and heritage.

Vretenborgsvägen 28, floor 6
SE – 126 30 Hägersten
Phone: + 46 8 683 03 00

Norwegian flag featuring a blue cross with white borders on a red background, symbolizing Norway.

Midstranda 51
NO – 2321 Hamar
Phone: + 47 62 54 02 91

Flag of Denmark, national flag with red background and white cross, symbolizing Danish heritage and pride, used in official and cultural contexts in Denmark.

Hassellunden 14
DK – 2765 Smørum
Phone + 45 70 300 310

Get connected

942 355-001

IAF-240 Essential – DIN Rail Industrial Firewall with VPN by Hirschmann

The Hirschmann IAF-240 Essential is a compact DIN rail industrial firewall for critical infrastructure and Industry 4.0 applications, bundling the IAF-240 hardware with a 3-year Essential Edition subscription covering stateful packet inspection, multi-protocol VPN including WireGuard, Layer 3 routing, high availability, VLAN, QoS, and Docker edge computing. Built on a quad-core NXP ARMv8 processor with 4 GB LPDDR4 and 64 GB eMMC, it carries ATEX Zone 2 and UL Class 1 Div. 2 hazardous location approvals and operates from -40°C to +70°C. Available from Recab, your Nordic partner for Hirschmann industrial firewall solutions.
Description
The Hirschmann IAF-240 Essential is a DIN rail industrial firewall combining the IAF-240 hardware with a 3-year Essential Edition software subscription, providing cost-effective OT network perimeter security, VPN connectivity, and edge computing capability for industrial sites requiring a reliable and manageable firewall without full deep packet inspection overhead. The hardware platform is built around a quad-core NXP i.MX 8M Mini ARMv8 64-bit Cortex-A53 processor at 1.6 GHz, 4 GB LPDDR4 memory, 64 GB eMMC storage, and TPM 2.0 hardware encryption, housed in a compact 48 x 137 x 105 mm aluminium DIN rail enclosure with four Gigabit Ethernet RJ45 ports, a USB 2.0 port, and an RS-232/422/485 serial interface, drawing 2.5–12W from a dual 12–24V DC supply. The Essential Edition subscription provides stateful packet inspection firewall with packet and port filtering, firewall learning mode, access control lists, network objects, application control, eXpress Data Path, and Let’s Encrypt certificate management for robust perimeter security. Multi-protocol VPN via IPsec IKEv2, OpenVPN, WireGuard, and WebVPN secures remote access and site-to-site connectivity, while Layer 3 routing with NAT, SNAT, DNAT, and BiNAT enables precise traffic control between network segments. Cloud-based firewall management, VLAN, QoS, Python and Bash scripting, Docker container edge application support, CRON jobs, SNMPv3, VRRP high availability with configuration and status synchronisation, and UPnP/NAT-PMP complete the management capabilities. Operating from -40°C to +70°C, certified to CE, FCC, UL 61010, and carrying ATEX Category 3G Zone 2 and UL Class 1 Div. 2 hazardous location approvals with a 60-month guarantee and 5-year warranty. Available from Recab, your Nordic partner for Hirschmann industrial firewall solutions.
Features
  • Stateful packet inspection firewall with firewall learning mode and ACLs provides industrial OT perimeter security.
  • IPsec IKEv2, OpenVPN, WireGuard, and WebVPN deliver flexible multi-protocol secure remote access and site connectivity.
  • VRRP high availability with configuration and status synchronisation ensures continuous firewall operation in redundant setups.
  • ATEX Category 3G Zone 2 and UL Class 1 Div. 2 approvals permit installation in hazardous industrial process locations.
  • Docker container support and Python/Bash scripting enable edge application deployment and automation on the firewall.
  • Compact 48 x 137 x 105 mm DIN rail aluminium housing at only 2.5–12W suits space-constrained industrial control panels.
Specifications
CPU NXP i.MX 8M Mini ARMv8
Memory LPDDR4 4 GB
Storage 64 GB eMMC
Ports 4 x GbE RJ45
Power Dual 12-24 V DC
Weight 613 g
Temperature -40-70 °C
Protection IP30
Warranty 5 Years
Dimensions 48 x 137 x 105 mm
  • Industrial site perimeter security requiring stateful firewall and multi-protocol VPN in compact DIN rail form
  • Critical infrastructure OT network protection with ATEX Zone 2 approved compact firewall hardware
  • Remote access security for industrial automation with WireGuard, OpenVPN, and IPsec VPN connectivity
  • Industry 4.0 edge computing with Docker containers and Python scripting on a secured DIN rail firewall platform