Tofino Xenon is an industrial security appliance designed to segment industrial environments into distinct security zones. The appliance operates at the data link layer without requiring an IP address or network architecture changes. It provides deep packet inspection capability for industrial protocols including DNP3, Modbus/TCP, GOOSE, and OPC DA, enabling filtering based on protocol-specific parameters such as register access in Modbus traffic. The device can be deployed behind switches or routers and in front of PLCs, DCS, RTU, or IED devices. It uses loadable security modules for application layer filtering, allowing specification of permitted device communications and protocols. The appliance includes a test mode to facilitate installation without disrupting production operations and features configuration change detection capabilities.
