Swedish flag with blue background and yellow cross, symbolizing Sweden's national identity and heritage.

Vretenborgsvägen 28, floor 6
SE – 126 30 Hägersten
Phone: + 46 8 683 03 00

Norwegian flag featuring a blue cross with white borders on a red background, symbolizing Norway.

Midstranda 51
NO – 2321 Hamar
Phone: + 47 62 54 02 91

Flag of Denmark, national flag with red background and white cross, symbolizing Danish heritage and pride, used in official and cultural contexts in Denmark.

Hassellunden 14
DK – 2765 Smørum
Phone + 45 70 300 310

Get connected

942 355-003

IAF-240 Pro – Industrial Firewall with IDS/IPS and Deep Packet Inspection by Hirschmann

The Hirschmann IAF-240 Pro is a DIN rail industrial firewall for critical infrastructure and Industry 4.0, bundling the IAF-240 hardware with a 3-year Pro Edition subscription combining the full Advanced Edition feature set with Intrusion Detection and Prevention (IDS/IPS), Web Application Firewall (WAF), identity awareness, dynamic routing, and deep packet inspection for OT protocols including IEC 61850 GOOSE, Modbus TCP, Siemens S7, and EtherNet/IP. Operating from -40°C to +70°C with ATEX Zone 2 approval, it represents the highest security tier in the IAF-240 range. Available from Recab, your Nordic partner for Hirschmann industrial firewall solutions.
Description
The Hirschmann IAF-240 Pro is a DIN rail industrial firewall combining the IAF-240 hardware with the highest-tier 3-year Pro Edition software subscription, delivering the most comprehensive OT security capability in the IAF-240 product range for critical infrastructure operators, energy utilities, and advanced manufacturing sites requiring next-generation threat prevention beyond stateful inspection and deep packet inspection. The hardware shares the same proven platform as the Essential and Advanced editions: a quad-core NXP i.MX 8M Mini ARMv8 64-bit Cortex-A53 processor at 1.6 GHz, 4 GB LPDDR4 memory, 64 GB eMMC storage, TPM 2.0, and four Gigabit Ethernet RJ45 ports in a 48 x 137 x 105 mm aluminium DIN rail housing at 2.5–12W on dual 12–24V DC supply. The Pro Edition adds Intrusion Detection and Prevention (IDS/IPS) for active threat blocking, a Web Application Firewall (WAF) for application-layer attack protection, identity awareness for user and role-based policy enforcement, and dynamic routing protocols for advanced network topology support, on top of the full Advanced Edition security stack including deep packet inspection for DNP3, EtherNet/IP, IEC 61850 GOOSE, IEC104, Modbus TCP, OPC, and Siemens S7 and S7 Plus, anti-malware, web filtering, application control, and eXpress Data Path. VPN connectivity covers IPsec IKEv2, OpenVPN, WireGuard, and WebVPN, and high availability is provided via VRRP with configuration and status synchronisation. Docker container support, Python and Bash scripting, cloud-based firewall management, VLAN, QoS, and SNMPv3 complete the feature set. ATEX Category 3G Zone 2 and UL Class 1 Div. 2 hazardous location approvals, CE, FCC, and UL 61010 certification, -40°C to +70°C operation, and a 60-month guarantee. Available from Recab, your Nordic partner for Hirschmann industrial firewall solutions.
Features
  • IDS/IPS active intrusion detection and prevention adds next-generation threat blocking beyond stateful inspection.
  • Web Application Firewall (WAF) and identity awareness enable application-layer and role-based access enforcement.
  • Deep packet inspection covers DNP3, EtherNet/IP, IEC 61850 GOOSE, IEC104, Modbus TCP, OPC, and Siemens S7/S7 Plus.
  • Anti-malware, web filtering, and dynamic routing extend the security and network management capability of the platform.
  • ATEX Category 3G Zone 2 and UL Class 1 Div. 2 hazardous location approvals cover process industry installation requirements.
  • IPsec IKEv2, OpenVPN, WireGuard, and WebVPN with VRRP high availability deliver comprehensive secure connectivity options.
Specifications
CPU NXP i.MX 8M Mini ARMv8
Memory LPDDR4 4 GB
Storage 64 GB eMMC
Ports 4 x GbE RJ45 ports
Operating Voltage Dual 12 – 24 V DC
Weight 613 g
Dimensions 48 x 137 x 105 mm
Protection Class IP30
Warranty 5 Years
Operating Temp -40-+70 °C
  • Advanced critical infrastructure OT security requiring IDS/IPS active threat prevention and Web Application Firewall
  • Next-generation industrial network protection combining DPI, identity awareness, and dynamic routing protocols
  • Energy and utility OT/IT security with full IEC 61850 GOOSE, Modbus TCP, and Siemens S7 deep packet inspection
  • High-security manufacturing OT environments demanding the most comprehensive DIN rail industrial firewall capability