Product Overview

The Cisco® Industrial Security Appliances are true industrial firewalls that provide OT targeted protection based on proven enterprise class security.

The ISA 3000 with four data links is a DIN rail mount, ruggedized appliance that provides the widest range of Access, Threat, and Application controls for the harshest and most demanding of industrial environments.

The ISA 3000 Series starts with the same industrial success of the IE 4000 switch hardware design and adds the proven security of the Cisco ASA firewall and Source Fire Next Generation IPS software. The ISA 3000 is the answer to provide both safety and security to your network modernization projects. It also provides the anchor point for converging IT and OT security visibility without interfering with industrial operational practice. This security appliance is built to withstand extreme environments, reflect industrial design, all the while adhering to overall IT network design, compliance, and performance requirements.

The ISA 3000 Series is ideal for industrial Ethernet applications where hardened products are required. The product is successfully running in major electrical utilities, energy production, mining and other automation environments. Further uses are intelligent transportation systems (ITS), city surveillance programs, and water/wastewater utilities. Security and safety visibility has never been higher with the ability to simultaneously track suspect file propagation, coil set points, abnormal traffic patterns, and escalation of privileges all within a single device. This industrial element of Cisco’s secure networking portfolio cooperatively interacts with other industrial grade Cisco solutions as well as provides complete vision to interactions between your local cell, the IT world, outside vendors, or contractor activity.

Proper deployment of the ISA 3000 industrial firewall can fulfill security requirements associated with a variety of industrial standards, regulations, and guidelines such as: NERC-CIP, ISA 99, ISA 62443, CFATS, ANSI/AWWA G430 and others.

Managed through either a user-friendly on-box system manager or company wide security management, the ISA 3000 provides industrial focused, out-of-the-box configuration and simplified operational manageability. These highly customizable management options allows for simplified local operational awareness and higher order IT/OT security convergence for the inevitable mingling of industrial and IT capabilities.

General Description

The Cisco ISA 3000 is a DIN Rail mounted ruggedized industrial security appliance that provides firewall, threat defense, and VPN services. The term DIN Rail describes a metal rail of a standard type widely used for mounting circuit breakers and industrial control equipment inside equipment racks. The term derives from the original specifications published by Deutsches Institut für Normung (DIN) in Germany. The device can run either the ASA or Firepower Threat Defense operating system.

The Cisco ISA 3000 is low-power, fan-less, with Gigabit Ethernet and a dedicated management port .ISA3000-2C2F-K9 — Fiber SKU with 2x1GbE SFP and 2x10/100/1000Base-T with a management port.

Hardware Features for the Cisco ISA 3000

The following lists the hardware platform features for the

- CPU Intel 4 Core 1.25Ghz
- 8 GB of 1333MHz DDR3 Memory
- Dedicated management-only Gigabit Ethernet port
- Mini-USB and RJ45 Console port
- All copper data ports have relay bypass when there is a loss of power or under software control
- +/- 12 to 48VDC Rated (9.6 to 60VDC Maximum) redundant power connectors with 24-12 AWG screw cage terminals
- Two external USB-A ports for addition of memory cards, security tokens, modems, or other USB 2.0 compliant devices
- DIN Rail mount incorporated into the chassis
- Fan-less design
- Fault relay outputs and 2 alarm inputs
- Industrial temperature SDHC card support
- Redundant power inputs
- Secure boot support
- Bypass Relay (only available on copper ports)

This ASA CX series of next-generation firewalls is built on the same proven security platform as the rest of the Cisco ASA family of firewalls and delivers exceptional application visibility and control along with superior performance and operational efficiency. These firewalls provide next-generation services that make it possible to take advantage of new applications and devices without compromising security. Unlike other firewalls, the Cisco ASA 5500-X Series keeps pace with rapidly evolving needs by offering end-to-end network intelligence gained by combining the visibility of local traffic with in-depth global network intelligence. The Cisco ASA 5500-X Series is supported by:
  -   Cisco TrustSec® Technology
  -   Cisco AnyConnect® Secure Mobility Solution for Unique Mobile Client Insight
  -   Cisco SIO for Near-Real-Time Threat Information and Proactive Protection
  -   Cisco ASA Next-Generation Firewall Services