Introduction

The ISA3000 bundles the proven security of the Cisco Secure Firewall with the visibility and control of industrial protocols and applications developed by leading automation vendors such as Omron, Rockwell, GE, Schneider, Siemens, and others. The ISA3000 is key as you start converging IT and OT security and capturing the benefits of your industrial digitization efforts.

As a foundational component of your IoT/OT security journey, the ISA3000 is the ideal ruggedized firewall to segment industrial networks, protect OT assets from potential threats, and build compliance with a variety of industrial standards, regulations, and guidelines such as NERC-CIP, ISA99/IEC62443, CFATS, ANSI/AWWA G430, and others.

Certified for deployment in the most demanding industries (power utilities, oil and gas, transportation, mining, manufacturing, water utilities, and more), the ISA3000 is widely used as a DMZ firewall to connect small, distributed industrial sites, enforce segmentation of large internal networks, and manage VPN connections to enable secure management of remote assets and seamless distributed operations.

The ISA3000 protects industrial processes and vulnerable control equipment. It leverages industry-leading threat detection and vulnerability exploit protection rules developed by Cisco Talos®, including thousands of industrial-focused rules. Using OpenAppID and Deep Packet Inspection (DPI) of industrial protocols, it even lets you write your own custom detectors to create alerts and block or allow traffic based on the industrial application flows you most care about. Cisco Advanced Malware Protection (AMP) is also built in to continuously track suspect file propagation.

Managed through either a user-friendly on-box device manager, on-premises centralized management, or a cloud-based management solution, the ISA3000 provides industrial-focused, out-of-the-box configuration and simplified operational management. And because these management tools are the same you already use with Cisco firewalls in your IT domain, it is easy to extend IT security to OT and enforce consistent security policies across domains.

As part of Cisco’s comprehensive security portfolio, the ISA3000 interacts with your existing tools to deliver an integrated IT/OT security workflow. Cisco Cyber Vision provides host attribute information to enable construction of meaningful and contextual security policies. Cisco Identity Services Engine (ISE) can be leveraged to exchange unified policy updates as well as host context information using Security Group Tags (SGTs) for security enforcement. The ISA3000 can also exchange NetFlow information with Cisco Stealthwatch® to provide network-level context information. The ISA3000 provides insights and alerts to Cisco SecureX™ to streamline event triage and correlation, enabling coordinated, single-click defenses.

With the ISA3000, you can build a secure IoT/OT infrastructure and leverage your existing IT security tools and expertise to help ensure production integrity, continuity, and safety.

Data transmission

Firewall throughput

2 Gbit/s

Performance

Built-in processor

Yes

Processor cores

4

Mean time between failures (MTBF)

398130 h

Ports & interfaces

Connectivity technology

Wired

Gigabit Ethernet (copper) ports quantity

2

Combo SFP ports quantity

2

Console port

RJ-45

Memory

Internal memory

8000 MB

Storage

Flash memory

16000 MB

Power

Power consumption (typical)

24 W

Technical details

Compliance certificates

CE, China RoHS, RCM, RoHS, Trade Agreements Act (TAA)

Operational conditions

Operating temperature (T-T)

-40 - 74 °C

Storage temperature (T-T)

-40 - 85 °C

Operating relative humidity (H-H)

5 - 95%

Non-operating altitude

0 - 15000 m

Weight & dimensions

Width

112 mm

Depth

160 mm

Height

130 mm

Weight

1.9 kg

Other features

Firewall throughput

2000 Mbit/s