Utility Communications

ABB FOX Firewall AFF650

By introducing Ethernet based communication protocols

cyber security has become a more important issue in
utility communication systems.
ABB offers based on AFS Family a utility grade Ethernet platform. This solution is completed with the AFF650 firewall
solution.
AFF takes the harsh environmental conditions of utilities into
account. Offering easy management (e.g. web-based tools)
as well as easy maintenance (e.g. configuration recovery
adapter CRA), it is a perfect solution for utilities.
AFF offer high performance with HW-based VPN encryption
and Network Address Translation. Redundant power inputs
as well as redundant ring topology (Layer 2) or virtual firewall
interfaces (Layer 3) provide highest service availability.

Insecure

Response
Request

Stateful Inspection with AFF650

Secure

Request

Response

Main Functionality
Operates in Routing or Bridging Mode
Router Functionality
Firewall Functionality
Stateful Inspection
Packet filtering (IP address or protocol)
Packet filtering (MAC address)
Protection against DoS attacks
Network Address Translation - NAT (1:1, 1:n)
VPN Functionality (IPSec)
Router Redundancy
Dynamic DNS

AFF650 Industrial Firewall - Technical data

Stateful Inspection firewall

Multipoint VPN

Management
Diagnostics
Protocols
Other services
Redundancy function
Operation temperature
Storage/transport temperature
Relative humidity
MTBF
Dimensions (WxHxD)
Mounting
Weight
Protection class
Mechanical stability
IEC 60068-2-27 shock
IEC 60068-2-6 vibration
EMC
EN 61000-4-2
EN 61000-4-3
EN 61000-4-4
EN 61000-4-5
EN 61000-4-6
EMC emitted immunity

For more information please contact:

ABB Switzerland Ltd.
Power Systems
Brown Boveri Strasse 6
5400 Baden, Switzerland
Phone: +41 58 589 37 35
or: +41 844 845 845 (Call Center)
Fax: +41 58 585 16 88
E-Mail: utilitycommunications@ch.abb.com
www.abb.com/utilitycommunications

Router, Multi Client Transparent (MCT), PPPoE

1 x untrusted port, 1 x trusted port
10/100BaseTX or 100Base-FX/MM/SC
10/100BaseTX, 100Base-FX/MM/SC or 100Base-FX/SM/SC
1xRJ11 socket, serial interface for device configuration
1xUSB socket to connect Configuration Recovery Adapter (CRA)
9.6 up to 60VDC, 18 up to 30VAC,
power consumption: 9.5W (24VDC, 2x10/100BaseFX)
Firewall rules (incoming/outgoing, modem access, management), IP masquerading,
1-to-1 NAT, DoS limiter, MAC filter, user firewall for external activiation of FW rules
IPSec, IKEv2, DES, 3DES, AES (-128, -192, -256), Pre-Shared Key, X.509v3 certificates,
MD5, SHA-1, NAT-T, Firewall rules for every VPN connection, configuration assistant in
the web interface, remote enable/disable of connections
Command Line Interface (CLI), web interface, configuration recovery adapter (CRA),
DHCP, AFS Finder, AFS View, FOXMAN UN
LEDs (power, link status, data, error, CRA, V.24), signal contact (24VDC/1A), log file,
syslog, configuration check
Serial, HTTPS, SSH, SNMP (v1/v2/v3), LLDP
DHCP server/client, DynDNS, firewall access via V.24 (PPP), SNTP, VLAN
support (IEEE 802.1Q), port forwarding
Use redundant network-/ring coupling, firewall redundancy (layer 4), redundant 24V
power inputs
-40C up to 60C
-40C up to +70C
10% up to 95% (non-condensing)
27.4 years (trusted & untrusted ports based on 10/100BaseTX), 25C
60mm x 145mm x 125mm
DIN rail 35mm
600g (trusted & untrusted ports based on 10/100BaseTX)
IP20
15g, 11ms duration, 18 shocks
1mm, 2-13.2Hz, 90min; 0.7g, 13.2-100Hz, 90min;
3.5mm, 3-9Hz, 10cycles, 1octave/min; 1g, 9-150Hz, 10 cycles, 1 octave/min.
electrostatic discharge (ESD): 6KV contact discharge, 8kV air discharge
electromagnetic field: 10V/m (80-2000 MHz)
fast transient (burst): 2 kV power line, 1 kV line/line
surge voltage: Power line: 2 kV (Line/earth), 1 kV (line/line)
conducted immunity: 3V (10 kHz-150 kHz), 10V (150 kHz-80 MHz)
FCC CFR47 part 15 class A; EN55022 class A

ABB Switzerland Ltd. December 2011. The right to modifications or deviations due to technical progress is reserved.

Modi
Number of ports
Type of trusted ports
Type of untrusted ports
V.24 interface
USB interface
Operating voltage

1KHA - 001206 - SEN - PDF - 12/11 - Printed in Switzerland

Product description