Product Number: TOFINO XENON ModbusTCP LSM

TOFINO XENON Modbus TCP Enforcer LSM

The Tofino Xenon Modbus TCP Enforcer Loadable Security Module (LSM) is a content inspector for Modbus communications, checking every Modbus command and response against a list of "allowed" commands defined by your control engineers.

  • Availability:
    Global
  • Status:
    Discontinued

Specifications

Name

942140001

Last Order Date

2025-12-31

Last Delivery Date

2026-04-30

Last Service Date

2031-04-30

Configuration functions

Simple configuration using the Tofino Configurator

Alarm and event actions

Reports security alerts to a syslog server and to non-volatile memory on a Tofino Xenon Industrial Security Appliance

Event generation

All standard Tofino modes supported:
• Test: all traffic allowed; alerts generated as per user rules
• Operational: traffic filtered and alerts generated as per user rules

Monitoring

Deny by default: any Modbus function code, or register or coil address, that is not on the "allowed" list is automatically blocked and reported
The following options may be set on a per-connection basis:
• Permitted Modbus function codes
• Permitted register or coil address range
• Permitted Modbus Unit IDs
• Sanity check enable/disable
• State tracking enable/disable
• TCP Reset on blocked traffic (when utilizing TCP transport protocol)
• Modbus exception reply on blocked traffic

Modules and components

• Tofino Xenon Industrial Security Appliance. This new enforcer cannot be run in older systems. They will work for existing Tofino Xenons in the field.
• Tofino Firewall/Event Logger LSM
• Tofino Configurator version 3.2

Update and Revision

Revision Number: 0.43 Revision Date: 12-15-2025

Update and Revision

Revision Number: 0.43 Revision Date: 12-15-2025


Part Numbers

Item # Type
942140001 TOFINO XENON ModbusTCP LSM