Backed by more than 35 years of experience in industrial automation and industrial networking, Moxa is among the first companies worldwide to earn both IEC 62443-4-1 certification for its Secure Development Lifecycle (SDL) processes and IEC 62443-4-2 certification for a broad portfolio of industrial networking products. These internationally recognized certifications demonstrate Moxa's dedication to delivering robust OT cybersecurity, secure-by-design technologies, and dependable network performance for critical industrial environments.
As industrial organizations face increasing cybersecurity threats and operational challenges, maintaining network availability and minimizing security vulnerabilities have become essential. Moxa's IEC 62443-certified industrial network security solutions, including managed switches, industrial routers, next-generation firewalls, and network management software, are designed to strengthen operational technology (OT) security, improve network resilience, and support uninterrupted operations. By integrating advanced security capabilities with reliable industrial networking infrastructure, Moxa helps organizations build secure, resilient, and future-ready OT networks while reducing operational disruptions and cybersecurity risks.

Built on Secure Industrial Networking

Moxa’s secure industrial networking solutions are engineered to safeguard OT devices and network infrastructure while reinforcing our commitment to delivering secure-by-design networking technologies. Equipped with advanced security capabilities that strengthen authentication, authorization, and accounting (AAA), these solutions help reduce cybersecurity risks and enhance network protection. Our approach to building secure and resilient industrial networks is guided by three core security principles.

How Moxa Ensures Secure Industrial Devices

Built on Trusted Industrial Security

With over 35 years of expertise in industrial networking, Moxa delivers reliable and secure connectivity solutions for critical OT environments. As cyber threats targeting industrial systems continue to increase, we integrate a Secure Development Lifecycle (SDL) to establish a strong security foundation across all Moxa network devices. In addition, our devices are shipped with secure default configurations that enhance system integrity and significantly reduce the attack surface.

Moxa’s Security Commitment

• Apply Secure Development Lifecycle (SDL) and continuous vulnerability management across the full device lifecycle.
• Improve system integrity to ensure safer firmware deployment, updates, and operational stability.
• Minimize attack surfaces through a secure-by-design architecture, including enforced HTTPS-only access.

How Moxa Strengthens Authentication, Authorization, and Accounting (AAA)

Enhancing Operational Control and Network Visibility

In industrial OT environments, network devices are accessed by multiple users with different roles and permission levels. Without a secure and structured access control strategy, it becomes difficult to enforce cybersecurity policies, monitor activities, and respond quickly to abnormal behavior. Moxa’s IEC 62443-aligned industrial network security solutions help ensure that only authorized users can access critical devices while maintaining full visibility across network operations.

Moxa’s Security Commitment

• Enforce role-based access control to restrict user actions within approved operational boundaries.
• Log security-relevant events to support compliance audits and enable rapid incident response in OT networks.

How Moxa Reduces OT Network Cybersecurity Threats

Enhancing OT Network Resilience with IEC 62443-Certified Security

As cybersecurity threats intensify and industrial compliance requirements become more stringent, organizations must strengthen the resilience of their OT network infrastructure. Moxa’s IEC 62443-aligned industrial network security solutions are designed to deliver secure industrial communications, advanced traffic control, and high system availability. By integrating layered protection mechanisms, these solutions help safeguard critical operations and ensure continuous industrial network performance.

Moxa’s Security Commitment

• Enable secure communication channels to protect credentials, configurations, and sensitive industrial data in OT environments.
• Control and restrict data flow using port-based access control, built-in firewall and ACL policies, and network segmentation technologies such as VLAN, NAT, and routing.
• Maintain high network availability with fail-safe and redundancy mechanisms that support uninterrupted industrial operations.

Find Secure Industrial Networking Solutions

Moxa integrates industrial networking expertise with advanced cybersecurity capabilities to deliver IEC 62443-certified industrial network security solutions for OT environments, enabling robust, layered defense for critical industrial networks.
Discover how these defense-in-depth security architectures protect operational technology systems, ensuring secure, resilient, and uninterrupted industrial communications across modern automation infrastructures.

Moxa Secure Networking Portfolio

Secure Routers, Firewalls & NATs

• NAT
• IPS
• IDS
• Firewall
• VPN

Secure Managed Switches

• VLAN
• Subnetting
• SSL/SSH
• DHCP Snooping
• IEEE 802.1X
• ACL

Simplify Secure Network Deployment & Maintenance

Industrial operators can centrally manage Moxa secure routers, firewalls, and managed switches through the MXview One Series. This platform simplifies OT network security management, enabling quick configuration of protection levels and real-time monitoring of device status.

Designed for IEC 62443-certified industrial network security solutions, it provides real-time alerts for abnormal activity and supports centralized firewall policy control. A unified dashboard ensures continuous visibility across industrial control networks.

IEC 62443-Certified Secure Networking Solutions for OT

• Secure Managed Switches
• Secure Routers, Firewalls, and NATs

Secure Managed Switches
Ports
Security Features
Redundancy Protocols
Software Management
Industrial Certifications

MDS-G4000 Family	RKS-G4028	EDS-4000/G4000	EDS-500E Family
Up to 4 10GbE + 24 GbE	Up to 28 GbE	Up to 6 2.5GbE + 8 GbE	Up to 4 GbE + 24 FE
HTTPS, SSL/SSH, ACL, IEEE 802.1X, Port Security, DHCP Snooping, Secure Boot1	HTTPS, SSL/SSH, ACL, IEEE 802.1X, Port Security, DHCP Snooping, Secure Boot		HTTPS, SSL/SSH, ACL2, IEEE 802.1X
Turbo Ring, Turbo Chain, RSTP/STP, MRP, VRRP (L3 Model)		Turbo Ring, Turbo Chain, RSTP/STP, MRP
MXview One
IEC 61850-3, IEEE 1613, EN 50121-4, NEMA TS2, ATEX3, CID23	IEC 62443-4-2 SL2, IEC 61850-3, IEEE 1613, EN 50121-4, NEMA TS2	IEC 62443-4-2 SL2, IEC 61850-3, IEEE 1613 (Class 1), DNV4, ABS4, NK4, LR4, EN 50121-4, NEMA TS2, ATEX5, CID25, IECEx5	IEC 61850-3, IEEE 1613, DNV6, ABS6, NK6, LR6, EN 50121-46, NEMA TS26, ATEX6, CID26

• 1. Only available for -4XGS models.
• 2. Only available for 18 and 28 port models.
• 3. Only available for the non-4XGS models.
• 4. Only available for -LV and PoE models.
• 5. Only available for -LV models.
• 6. Only available for 10 and 18 port models.

Secure Routers, Firewalls, and NATs
Ports
NAT
Firewalls
IPS/IDS
DPI
VPN
Routing Throughput (based on RFC 2544)
Redundancy Protocols
Software Management
Industrial Certifications

EDF-G1002-BP	EDR-G9010	EDR-G9004	EDR-8010	NAT-102	NAT-108
2 GbE (Gen3 LAN Bypass)	2 2.5GbE + 8 GbE1	Up to 2 2.5GbE + 2 GbE (1/2 DMZ/WAN ports)	2 GbE + 8 FE1	2 FE	8 FE
-	1-to-1, N-to-1, NAT loopback, Port forwarding, IP Twins Mapping4
DDoS, Ethernet protocols, ICMP, IP address, MAC address, Ports				IP address, MAC address (Device Lockdown), Ports
Enabled by default. IPS pattern update functionality requires an additional license.	Requires an additional license			-	-
DNP3, EtherNet/IP, IEC 60870-5-104, IEC 61850 MMS, Modbus TCP, Modbus UDP, Omron FINS, Siemens S7 Comm., Siemens S7 Comm. Plus, OPC UA, MELSEC communication protocol				-	-
-	Up to 250 IPsec VPN tunnels		Up to 50 IPsec VPN tunnels	-	-
-	Max. 350K packets per second / 2 Gbps		Max. 50K packets per second / 500 Mbps	Max. 15K packets per second / 100 Mbps
-	VRRP, Turbo Ring, Turbo Chain, RSTP/STP	VRRP	VRRP, Turbo Ring, Turbo Chain, RSTP/STP	-	-
MXview One, MXview Security3, MXsecurity				MXview One	MXview One
NEMA TS2, EN 50121-4, CID2, ATEX, IECEx, DNV	IEC 62443-4-2 SL2, IEEE 1613, IEC 61850-3 Ed. 2.0, ATEX2, CID22, EN 50121-42, NEMA TS22, DNV2, DNV IEC 61162-460 Edition 3.02, DNV security profile 22, IACS UR E27 Rev.12, IEC 609452	IEEE 1613, IEC 61850-3 Ed. 2.0, ATEX, CID2, IECEx, EN 50121-4, NEMA TS2, DNV	IEEE 1613, IEC 61850-3 Ed. 2.0, ATEX, CID2, IECEx, EN 50121-4, NEMA TS2, DNV, DNV IEC 61162-460 Edition 3.0, DNV security profile 2, IACS UR E27 Rev.1, IEC 60945	EN 50121-4, NEMA TS2, ATEX, CID2	-

• 1. Supports user-configurable DMZ/WAN ports.
• 2. Only available for -LV models.
• 3. An active MXview One license is required in order to activate the MXview Security add-on license.
• 4. NAT-108 Series only.