“When we looked at traditional IT-type security logging solutions, we realized that critical event information can get lost if the network wasn’t perfect. SCADA networks, with their radio and satellite connections to remote sites, are often far from perfect. We designed the Tofino Event Logger LSM to record and protect event information even when communication links are interrupted,” said Eric Byres, CTO of Byres Security.
Like many network devices, the Tofino Event Logger LSM can forward security event and alarm data to a central IT syslog server. What is unique is that if communications are interrupted, or if the syslog server is shut down, messages will be stored locally for forwarding later when the connection is repaired, or they can be offloaded to a USB storage device. Local storage volume is significant with the ability to record up to 20,000 events. Additionally, the Tofino Central Management Platform server automatically backs up all records, giving critical data triple protection against loss.
This new module can be deployed without plant downtime and without IT expertise, for quick, cost-effective installation and administration. Furthermore its triple data storage feature means that it can be used in systems where syslog servers are not available.