Skip to main content

PLC Guard — Datasheet

Deep Packet Inspection and Network Monitoring for Industrial Control Systems | Version 1.0

📄 Download PDF

Overview​

First Watch PLC Guard is a specialised deep-packet inspection and network monitoring engine built for industrial control systems. It analyses SCADA protocols such as CIP, DNP3, Modbus, and S7CommPlus to detect and filter control-layer events based on predefined policies, enhancing protection for PLCs.

The First Watch cybersecurity platform is powered by patented technology developed at the University of Waikato. Each core component addresses specific OT security challenges, providing deep visibility into control-layer operations and actively defending critical control logic from unauthorised access or tampering.

Key Features​

Real-Time Visibility​

Provides in-depth, real-time monitoring of all operational network activities, including:

  • Code uploads/downloads
  • Firmware changes
  • PLC setting and hardware configuration modifications
  • Tag read/write commands

Quick Detection and Response​

Notifies the user of a security incident before damage occurs.

Detailed Event Logging​

Maintains a comprehensive event log to support forensic investigations.

Advanced Traffic Monitoring​

Monitors and filters network traffic, recognising modern protocols (e.g., DNS, SSH, HTTP/S). Detects unauthorised communications and use of disallowed protocols (e.g., Internet-connected hosts accessing industrial devices).

Selective Control over PLC Operations​

  • Block unauthorised firmware upgrades and download project files
  • Ensures that both the PLC's firmware and user-defined logic remain secure from unauthorised access or modification

Automated Device Discovery​

Automatically identifies all OT network devices, including PLCs, and provides key attributes such as vendor and controller model, firmware version, and serial number and product codes.

Industrial Firewall Functionality​

Functions as a DPI-capable firewall to block unauthorised actions like:

  • Code and firmware changes
  • PLC setting adjustments
  • Tag access or configuration changes
  • Sends real-time alerts to enable proactive incident mitigation

Secure Mesh VPN Support​

Serves as a foundational component for a distributed, secure mesh VPN — adding an extra layer of OT network security.

Technical Specifications — Standard Appliance​

First Watch PLC Guard
CategorySpecification
Supported PLC PlatformsSiemens S7, Allen-Bradley, Schneider Electric and others
Power Supply9–24V DC
InstallationDirect or adjacent mounting

Technical Specifications — Rugged Appliance​

First Watch PLC Guard (Rugged)

The rugged variant is designed for harsh and outdoor environments:

  • IP67-rating for outdoor use
  • Intel Atom E3845 processor onboard
  • 4 N-jack antenna openings with waterproof design
  • -30°C to +60°C operating temperature range
  • Features M12 lockable I/Os
  • Trusted Platform Module 1.2 (TPM 1.2)
CategorySpecification
Supported PLC PlatformsSiemens S7, Allen-Bradley, Schneider Electric and others
Ethernet/PoE2 x 10/100/1000 Mbps Ethernet (Intel i210-IT, M12)
USB2 x USB 2.0 (M12)
Power Supply9 to 36 VDC
Operating Temperature-30°C to +60°C (-22°F to +140°F) (with E3845, W.T. SSD/DRAM)
Dimensions (W x D x H)210 x 166.83 x 83 mm (8.27" x 14.44" x 3.27")
MountingWall mount/VESA mount
InstallationDirect or adjacent mounting

Deployment​

Deployment flexibility — the First Watch platform is built as a modular, containerised system. Designed to support diverse network architectures across industrial environments. Each deployment instance can run ControlGuard, PLC Guard, and the Controller in any combination.