With over 35 years of expertise in industrial automation and networking, Moxa is among the first companies to achieve both IEC 62443-4-1 and IEC 62443-4-2 certifications. These certifications reflect Moxa’s commitment to delivering secure-by-design industrial networking solutions, strong OT cybersecurity, and reliable performance for critical industrial applications.

As industrial organizations face increasing cybersecurity threats and operational challenges, maintaining network availability and minimizing security vulnerabilities have become essential. Moxa's IEC 62443-certified industrial network security solutions, including managed switches, industrial routers, next-generation firewalls, and network management software, are designed to strengthen operational technology (OT) security, improve network resilience, and support uninterrupted operations. By integrating advanced security capabilities with reliable industrial networking infrastructure, Moxa helps organizations build secure, resilient, and future-ready OT networks while reducing operational disruptions and cybersecurity risks.

Built on Secure Industrial Networking

Moxa’s secure industrial networking solutions are engineered to safeguard OT devices and network infrastructure while reinforcing our commitment to delivering secure-by-design networking technologies. Equipped with advanced security capabilities that strengthen authentication, authorization, and accounting (AAA), these solutions help reduce cybersecurity risks and enhance network protection. Our approach to building secure and resilient industrial networks is guided by three core security principles.

How Moxa Ensures Secure Industrial Devices?

Built on Trusted Industrial Security

With over 35 years of expertise in industrial networking, Moxa delivers reliable and secure connectivity solutions for critical OT environments. As cyber threats targeting industrial systems continue to increase, we integrate a Secure Development Lifecycle (SDL) to establish a strong security foundation across all Moxa network devices. In addition, our devices are shipped with secure default configurations that enhance system integrity and significantly reduce the attack surface.

Moxa’s Security Commitment

• Apply Secure Development Lifecycle (SDL) and continuous vulnerability management across the full device lifecycle.
• Improve system integrity to ensure safer firmware deployment, updates, and operational stability.
• Minimize attack surfaces through a secure-by-design architecture, including enforced HTTPS-only access.

How Moxa Strengthens Authentication, Authorization, and Accounting (AAA)?

Enhancing Operational Control and Network Visibility

In industrial OT environments, network devices are accessed by multiple users with different roles and permission levels. Without a secure and structured access control strategy, it becomes difficult to enforce cybersecurity policies, monitor activities, and respond quickly to abnormal behavior. Moxa’s IEC 62443-aligned industrial network security solutions help ensure that only authorized users can access critical devices while maintaining full visibility across network operations.

Moxa’s Security Commitment

• Enforce role-based access control to restrict user actions within approved operational boundaries.
• Log security-relevant events to support compliance audits and enable rapid incident response in OT networks.

How Moxa Reduces OT Network Cybersecurity Threats?

Securing Remote Access to OT Networks

Industrial networks often require remote connectivity for maintenance, monitoring, and integration with enterprise systems. However, without appropriate security controls, these connections can create significant cybersecurity risks.

Moxa’s Security Commitment

• VPN technologies that provide encrypted remote access
• Secure routers and firewalls that monitor and control external connections
• Authentication mechanisms that restrict access to authorized devices and users
• Secure management protocols, such as HTTPS and SSH, that safeguard network administration activities

How can organizations secure access to OT networks?

Enhancing OT Network Resilience with IEC 62443-Certified Security

As cybersecurity threats intensify and industrial compliance requirements become more stringent, organizations must strengthen the resilience of their OT network infrastructure. Moxa’s IEC 62443-aligned industrial network security solutions are designed to deliver secure industrial communications, advanced traffic control, and high system availability. By integrating layered protection mechanisms, these solutions help safeguard critical operations and ensure continuous industrial network performance.

Moxa’s Security Commitment

• Enable secure communication channels to protect credentials, configurations, and sensitive industrial data in OT environments.
• Control and restrict data flow using port-based access control, built-in firewall and ACL policies, and network segmentation technologies such as VLAN, NAT, and routing.
• Maintain high network availability with fail-safe and redundancy mechanisms that support uninterrupted industrial operations.

Find Secure Industrial Networking Solutions

Moxa integrates industrial networking expertise with advanced cybersecurity capabilities to deliver IEC 62443-certified industrial network security solutions for OT environments, enabling robust, layered defense for critical industrial networks.

Discover how these defense-in-depth security architectures protect operational technology systems, ensuring secure, resilient, and uninterrupted industrial communications across modern automation infrastructures.

Moxa Secure Networking Portfolio

Network Management Software

• MXview One

Secure Routers, Firewalls & NATs

• NAT
• IPS
• IDS
• Firewall
• VPN

Secure Managed Switches

• VLAN
• Subnetting
• SSL/SSH
• DHCP Snooping
• IEEE 802.1X
• ACL

Secure Wireless APs/Clients

• WPA3/802.11w
• Wireless Access Control

Secure Edge Connectivity

• TLS/SSL
• Serial Access Control

IEC 62443-Certified Secure Networking Solutions for OT

• Secure Managed Switches
• Secure Routers, Firewalls, and NATs
• Secure Wireless APs/Clients
• Secure Edge Connectivity
• Network Management Software

Secure Managed Switches
Ports
Security Features
Redundancy Protocols
Software Management
Industrial Certifications

MDS-G4000 Family	RKS-G4028	EDS-4000/G4000	EDS-500E Family
Up to 4 10GbE + 24 GbE	Up to 28 GbE	Up to 6 2.5GbE + 8 GbE	Up to 4 GbE + 24 FE
HTTPS, SSL/SSH, ACL, IEEE 802.1X, Port Security, DHCP Snooping, Secure Boot1	HTTPS, SSL/SSH, ACL, IEEE 802.1X, Port Security, DHCP Snooping, Secure Boot		HTTPS, SSL/SSH, ACL2, IEEE 802.1X
Turbo Ring, Turbo Chain, RSTP/STP, MRP, VRRP (L3 Model)		Turbo Ring, Turbo Chain, RSTP/STP, MRP
MXview One
IEC 61850-3, IEEE 1613, EN 50121-4, NEMA TS2, ATEX3, CID23	IEC 62443-4-2 SL2, IEC 61850-3, IEEE 1613, EN 50121-4, NEMA TS2	IEC 62443-4-2 SL2, IEC 61850-3, IEEE 1613 (Class 1), DNV4, ABS4, NK4, LR4, EN 50121-4, NEMA TS2, ATEX5, CID25, IECEx5	IEC 61850-3, IEEE 1613, DNV6, ABS6, NK6, LR6, EN 50121-46, NEMA TS26, ATEX6, CID26

• 1. Only available for -4XGS models.
• 2. Only available for 18 and 28 port models.
• 3. Only available for the non-4XGS models.
• 4. Only available for -LV and PoE models.
• 5. Only available for -LV models.
• 6. Only available for 10 and 18 port models.

Secure Routers, Firewalls, and NATs
Ports
NAT
Firewalls
IPS/IDS
DPI
VPN
Routing Throughput (based on RFC 2544)
Redundancy Protocols
Software Management
Industrial Certifications

EDF-G1002-BP	EDR-G9010	EDR-G9004	EDR-8010	NAT-102	NAT-108
2 GbE (Gen3 LAN Bypass)	2 2.5GbE + 8 GbE1	Up to 2 2.5GbE + 2 GbE (1/2 DMZ/WAN ports)	2 GbE + 8 FE1	2 FE	8 FE
-	1-to-1, N-to-1, NAT loopback, Port forwarding, IP Twins Mapping4
DDoS, Ethernet protocols, ICMP, IP address, MAC address, Ports				IP address, MAC address (Device Lockdown), Ports
Enabled by default. IPS pattern update functionality requires an additional license.	Requires an additional license			-	-
DNP3, EtherNet/IP, IEC 60870-5-104, IEC 61850 MMS, Modbus TCP, Modbus UDP, Omron FINS, Siemens S7 Comm., Siemens S7 Comm. Plus, OPC UA, MELSEC communication protocol				-	-
-	Up to 250 IPsec VPN tunnels		Up to 50 IPsec VPN tunnels	-	-
-	Max. 350K packets per second / 2 Gbps		Max. 50K packets per second / 500 Mbps	Max. 15K packets per second / 100 Mbps
-	VRRP, Turbo Ring, Turbo Chain, RSTP/STP	VRRP	VRRP, Turbo Ring, Turbo Chain, RSTP/STP	-	-
MXview One, MXview Security3, MXsecurity				MXview One	MXview One
NEMA TS2, EN 50121-4, CID2, ATEX, IECEx, DNV	IEC 62443-4-2 SL2, IEEE 1613, IEC 61850-3 Ed. 2.0, ATEX2, CID22, EN 50121-42, NEMA TS22, DNV2, DNV IEC 61162-460 Edition 3.02, DNV security profile 22, IACS UR E27 Rev.12, IEC 609452	IEEE 1613, IEC 61850-3 Ed. 2.0, ATEX, CID2, IECEx, EN 50121-4, NEMA TS2, DNV	IEEE 1613, IEC 61850-3 Ed. 2.0, ATEX, CID2, IECEx, EN 50121-4, NEMA TS2, DNV, DNV IEC 61162-460 Edition 3.0, DNV security profile 2, IACS UR E27 Rev.1, IEC 60945	EN 50121-4, NEMA TS2, ATEX, CID2	-

• 1. Supports user-configurable DMZ/WAN ports.
• 2. Only available for -LV models.
• 3. An active MXview One license is required in order to activate the MXview Security add-on license.
• 4. NAT-108 Series only.

Moxa Solutions
Operation Mode
Wi-Fi Standards
Frequency Band
Data Rates
Wireless Security
Interfaces
Operating Temperature
Protection Class
AeroMesh

AWK-1161A	AWK-1165A	AWK-1161C	AWK-1165C	AWK-3262A	AWK-4262A
AP		Client		AP/Client
802.11ax
Selectable 2.4 GHz / 5 GHz Dual Band				Concurrent 2.4 GHz + 5 GHz Dual Band
574 Mbps (2.4 GHz) / 1,201 Mbps (5 GHz)				574 Mbps (2.4 GHz) + 1,201 Mbps (5 GHz)
WPA3, Protected Management Frames (802.11w), Wi-Fi ACL (Automatic/Static), Client Isolation, Hide SSID
1 x GbE	5 x GbE	1 x GbE	5 x GbE	1 x GbE + 1 x 2.5GbE (PoE)
-25 to 60°C / -40 to 75°C (-T models)					-40 to 75°C
IP30					IP68
-	-	-	-	✓	✓

Key Features
User Authentication & Authorization
Device Integrity
Device Least Functionality
Communication Integrity
Network Access Control
Configuration Management
Device Management
Vulnerability Management

NPort 6100-G2/6200-G2/6400-G2/6600-G2 Series Secure Terminal Servers	MGate MB3000-G2 Series Modbus Gateways	ioThinx 4510 Series Advanced Modular Remote I/Os
Embedded Security Functions for Secure Deployment
Password protection (length, character enforcement, update policy) Authentication servers (RACIUS/TACACS+) Role-Based Access Control (RBAC)	Password protection (length, character enforcement, update policy) Authentication servers (RACIUS/TACACS+) Role-based Access Control (RBAC)	Password protection (length, character enforcement)
Secure Boot check software authenticity before bootup Check CRC code before update the device		Check CRC code before update the device
Security Hardening Guide Unused services can be disabled Telnet console default disabled	Security Hardening Guide Unused services can be disabled	Security Hardening Guide Unused services can be disabled
DNP3, EtherNet/IP, IEC 60870-5-104, IEC 61850 MMS, Modbus TCP, Modbus UDP, Omron FINS, Siemens S7 Comm., Siemens S7 Comm. Plus, OPC UA, MELSEC communication protocol	Authentication & Encryption for management interface HTTPS (TLS 1.2 embedded with self-signed certificate, also supports public certificate import) SNMPv3 ECC 521 or RSA-4096	HTTPS (TLS 1.2 embedded with self-signed certificate, and can be exported) SNMPv3
Accessible IP List		Accessible IP List Access Control List (ACL)
Securing Your Devices in Daily Maintenance
GUI type of Device Search Utility CLI type of MCC tools		GUI type of MXconfig CLI type of MCC tools
Syslog with RFC 3164 format with ISO8601 timestamp Local syslog storage & remote syslog with failover Manageable via MXview One network management software	Syslog with RFC 3164 format with ISO8601 timestamp Local syslog storage Manageable via MXview One network management software	Syslog Manageable via MXview One network management software
Dedicated Cybersecurity Response Team for handling vulnerability Perform Nessus Scan

Simplify Secure Network Deployment & Maintenance

Industrial operators can centrally manage Moxa secure routers, firewalls, and managed switches through the MXview One Series. This platform simplifies OT network security management, enabling quick configuration of protection levels and real-time monitoring of device status.

Designed for IEC 62443-certified industrial network security solutions, it provides real-time alerts for abnormal activity and supports centralized firewall policy control. A unified dashboard ensures continuous visibility across industrial control networks.