Detect cyber attacks promptly

The Intrusion Detection System (IDS) StationGuard monitors Ethernet networks in the power grid and identifies cyber threats, prohibited activity, and malfunctions.

With this combination of cybersecurity and functional monitoring, not only can new threats and as yet unknown attack scenarios be identified, but different kinds of malfunctions in the power utility automation system too.

• Protects all kind of substations
  IEC 60870-5-104, DNP3, Modbus TCP or IEC 61850. No matter what protocol your substation is based on, StationGuard monitors all communication in detail and detects cyber threats and communication errors.
• Tailor-made for substations
  StationGuard and the RBX1 platform have been specially developed for use in substation automation systems. StationGuard knows how every device in the network should behave. With this new and patented approach StationGuard reliably identifies anomalies in the station network.
• Easy to configure
  StationGuard is configured with no learning phase needed. All that's required is the substation’s SCL description and a few manual inputs. StationGuard can also be used in substations with incomplete or outdated SCL information.
• Speaks the language of protection and control engineers
  The user interface has been designed to match the diagrams and terminology used in substations. The clear and understandable alarm messages can be easily traced back to substation events, making cooperation between engineers and security officers simple and efficient.
• Immediate protection
  StationGuard uses a unique whitelisting approach to protect networks right from the very first minute and without any learning phase whatsoever. Even threats or communication problems that existed prior to its installation are immediately identified.
• Identify malfunctions
  Not only are threats identified, but also communication errors, device failures, or time synchronization problems are detected.
• Fewer false alarms
  StationGuard knows the processes in substations and can therefore distinguish between legitimate events and potentially dangerous activities. With StationGuard's maintenance mode, fewer false alarms are triggered during maintenance work and a high degree of security is ensured.

StationGuard - designed for the power grid

Regardless if your system is based on IEC 60870-5-104, DNP3, Modbus TCP or IEC 61850, StationGuard deeply inspects all communication to find cyber threats, prohibited activity and errors.

Based on our 25+ years’ of experience in power utility automation systems, StationGuard truly understands the communication in substation automation and SCADA systems. With its unique system model approach, this knowledge is used to determine between legitimate traffic and malicious activity.

With its built-in support for maintenance activities, you are in full control of which devices communicate what and when. StationGuard helps documenting all assets and their protocols and services used.

Key features

• Deep packet inspection of IEC 61850, IEC 60870-5-104, DNP3, Modbus TCP, PRP/HSR, and many more
• Easy to understand alarms thanks to ZeroLine™ diagram
• Save time in alarm analysis
• Analyzes substation protocols in depth
• Full protection during routine testing thanks to maintenance mode function
• Easy integration of alarm messages due to binary contacts and Syslog interface

We make life easy for you – Expert Support

If an alarm indicates prohibited or non-standard-compliant behavior, the StationGuard experts are on hand to help you evaluate the cause. A profile of your substation can also be created on request to offer an alarm analysis targeted specifically for your site and its devices.

In addition to our Technical Support team, who are available 24/7, StationGuard Expert Support helps you to evaluate alarms and perform network capture analyses.

 Brochure