Cybersecurity Simplified: WALL IE. For Secure and Efficient Machine Networking

CRA, helmholz, IEC 62443, NIS-2, security, WALL IE

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

In a world where industrial systems face ever-growing cybersecurity threats, ensuring secure machine integration has become a necessity—not an option. At the latest with new specifications such as IEC 62443 and the European Machinery Regulation, corresponding cybersecurity measures will now be obligatory for all those who bring machinery into circulation. Helmholz addresses this critical need with the WALL IE, an industrial NAT gateway designed to streamline machine connectivity while safeguarding networks against potential risks.

Cybersecurity in Industrial Systems: A Key Priority

As Ethernet networking becomes integral to machinery and production systems, cybersecurity must take center stage. This necessity is reflected in current international norms and guidelines. For instance, the IEC 62443 series of standards focuses on securing Industrial Automation and Control Systems (IACS). It takes a holistic approach, addressing the needs of operators, integrators, and manufacturers. These standards define clear responsibilities for all stakeholders—mechanical engineers, suppliers, and end users—ensuring a unified approach to cybersecurity.

The European Union (EU) has also prioritized industrial cybersecurity through initiatives like the NIS-2 Directive (effective since 2023) and the Cyber Resilience Act (CRA). These measures underline the EU’s commitment to enhancing the digital security landscape.

Modernizing Machinery Regulations

In response to technological advancements—such as artificial intelligence, autonomy, and networked systems—the European Commission has revised the Machinery Directive 2006/42/EC, aligning it with the New Legislative Framework (NLF). These updates also address fundamental safety and health protection requirements for machinery.

The revised European Machinery Regulation 2023/1230 will come into effect on January 20, 2027, setting new standards for machinery placement in the market. This forward-looking regulation ensures that innovations in machinery technology are both safe and secure.

By aligning cybersecurity and machinery regulations with modern technological demands, industry leaders and regulators are safeguarding the future of industrial automation.

Securely Integrating Machinery Networks

Machine security has become a universal concern, underscoring the critical need to securely integrate machinery networks into overarching production systems. Achieving this requires robust strategies to safeguard Operational Technology (OT)—the hardware and software used to control, monitor, and secure industrial systems, devices, and processes.

The Role of “Secure OT”

The concept of “Secure OT” emphasizes protecting industrial control systems against growing threats in increasingly data-intensive environments. A key strategy here is network segmentation—dividing networks into separate zones to limit the spread of potential cyberattacks and enhance system integrity.

Zones and Conduits: A Proven Approach

Zones and conduits have emerged as a best practice for industrial network security. The IEC 62443 standard recommends this approach, recognizing that complex systems often face varied risks and threats. A security zone groups physical components with similar protection requirements, ensuring tailored defenses.

Security Zone Boundaries: Clearly define which components are inside or outside a zone.
Communication Conduits: Control and secure data flow between zones, with communication outside conduits explicitly restricted.

This layered approach enables a more precise response to risks, preventing a one-size-fits-all protection strategy from leaving critical vulnerabilities unaddressed.

By adopting these secure integration methods, manufacturers can better protect their production networks and enhance the resilience of industrial operations.

Secure Your Network Efficiently with WALL IE

When it comes to protecting networked machinery, the challenge lies in implementing a practical zones-and-conduits protection concept. While the market offers high-end solutions, these are often oversized for securing a single machine network—resulting in excessive complexity and costs. This leaves medium-sized mechanical engineering companies and their customers searching for a streamlined, reliable, and cost-efficient solution. That’s where the NAT Gateway WALL IE from Helmholz comes in: a compact, robust device that integrates seamlessly between the machine and the production network, combining bridge and firewall functionality in a user-friendly, efficient design.

Simple and Secure Network Protection

WALL IE secures your network by controlling which devices can exchange data, thanks to its packet filter functionality. This feature limits access between the production network and automation cells, creating a secure boundary. Additionally, the WALL IE simplifies network management by representing the machine network and production network as a single IP address.

This device operates in two modes for maximum flexibility:

Bridge Mode: Acts as a switch while allowing packet filtering—unlike standard switches—enabling controlled access to specific areas without requiring separate networks.
NAT Mode: Used by most users, this mode forwards traffic between different IPv4 networks (Layer 3) and uses packet filters for access control. NAT (Network Address Translation) functionality supports both basic NAT (1:1 NAT) and NAPT (1:N NAT or “Masquerading”), making it possible to integrate multiple automation cells with identical address ranges into the production network.

Expanded Options with Compact and Plus version

Since its launch in 2015, WALL IE has continuously evolved, responding to customer feedback to expand its capabilities. Since, new variants join the standard version (4 ports, 100 Mbps):

Compact Version: Designed with two ports—one for the company network (WAN) and one for the machine network (LAN)—this model is ideal for simpler setups.
Plus Version: Offers eight configurable ports for LAN or WAN, enabling smaller networks to be managed without additional switches.

Both Compact and Plus feature a faster processor with Ethernet speeds of up to 1 Gbit/s, opening up new application possibilities.

Easy Setup, Minimal Expertise Required

All WALL IE variants are designed for quick and straightforward installation. With no need to adjust LAN network configurations, integrating series machines with identical IP addresses is a breeze. This simplicity ensures that even users with basic network knowledge can deploy WALL IE effectively.

For secure, reliable, and cost-efficient network protection, WALL IE delivers a proven solution tailored to the needs of modern machinery networks.

Summary

In the connected industries of the future, machine and system security will be critical to ensuring stable, error-free operations. By segmenting networks and securing access to machine networks, processes can be optimized effortlessly. The WALL IE series from Helmholz provides an easy-to-configure solution with NAT Gateways and machine firewalls that deliver tailored protection for sensitive data. With minimal effort, these robust devices safeguard critical systems against cyber threats, making them an essential tool for secure and efficient operations.

View our WALL IE portfolio