Product Number: TOFINO XENON EtherNet/IP LSM

TOFINO XENON EtherNet/IP LSM

The Tofino Xenon EtherNet/IP Enforcer Loadable Security Module (LSM) is a content inspector for EtherNet/IP communications, checking every message against a list of "allowed" objects and services.

  • Availability:
    Global
  • Status:
    Discontinued

Specifications

Name

TOFINO XENON EtherNet/IP Enforcer LSM

Last Order Date

2025-12-31

Last Delivery Date

2026-04-30

Last Service Date

2031-04-30

Configuration functions

Simple configuration using the Tofino Configurator

Alarm and event actions

Reports security alerts to a syslog server and to non-volatile memory on a Tofino Xenon Industrial Security Appliance

Event generation

All standard Tofino modes supported:
• Test: all traffic allowed; alerts generated as per user rules
• Operational: traffic filtered and alerts generated as per user rules

Monitoring

Deny by default: any CIP object or service that is not on the "allowed" list is automatically blocked and reported
The following options may be set on a per-connection basis:
• Permitted message type (Read-Only Data, Read/Write Data, Any, Advanced)
• Permitted CIP object class
• Permitted CIP service for each class
• Custom or vendor-specific objects and services
• Sanity check enable/disable
• TCP Reset on blocked traffic
• EtherNet/IP debug reply on blocked traffic

Modules and components

• Tofino Xenon Industrial Security Appliance. This new enforcer cannot be run in older systems. They will work for existing Tofino Xenons in the field.
• Tofino Firewall/Event Logger LSM
• Tofino Configurator version 3.2

Update and Revision

Revision Number: 0.39 Revision Date: 12-15-2025

Update and Revision

Revision Number: 0.39 Revision Date: 12-15-2025


Part Numbers

Item # Type
942140003 TOFINO XENON EtherNet/IP LSM