Product Number: TOFINO XENON DNP3 Enforcer LSM

The Tofino Xenon DNP3 Enforcer Loadable Security Module (LSM) is a content inspector for DNP3 communications, checking every DNP3 command against a list of "allowed" message types and function codes defined by your control engineers.

The Tofino Xenon DNP3 Enforcer Loadable Security Module (LSM) is a content inspector for DNP3 communications, checking every DNP3 command against a list of "allowed" message types and function codes defined by your control engineers.

  • Availability:
    Global
  • Status:
    Discontinued

Specifications

Last Order Date

2025-12-31

Last Delivery Date

2026-04-30

Last Service Date

2031-04-30

Configuration functions

Simple configuration using the Tofino Configurator

Alarm and event actions

Reports security alerts to a syslog server and to non-volatile memory on a Tofino Xenon Industrial Security Appliance

Event generation

All standard Tofino modes supported:
• Test: all traffic allowed; alerts generated as per user rules
• Operational: traffic filtered and alerts generated as per user rules

Monitoring

Deny by default: any DNP3 function code that is not on the "allowed" list is automatically blocked and reported The following options may be set on a per-connection basis:
• Permitted DNP3 function codes
• Check outstation traffic
• Permitted DNP3 Unit IDs
• Sanity check enable/disable
• CRC check
• TCP Reset on blocked traffic (when utilizing TCP transport protocol)
• DNP3 exception reply on blocked traffic

Modules and components

• Tofino Xenon Industrial Security Appliance. This new enforcer cannot be run in older systems. They will work for existing Tofino Xenons in the field.
• Tofino Firewall/Event Logger LSM
• Tofino Configurator version 3.2

Update and Revision

Revision Number: 0.52 Revision Date: 12-15-2025

Update and Revision

Revision Number: 0.52 Revision Date: 12-15-2025


Part Numbers

Item # Type
942140006 TOFINO XENON DNP3 Enforcer LSM