Page 57: of Offshore Engineer Magazine (Apr/May 2014)

56 58

Production

Ethernet switch, but they actually inspect 1 Transparent (layer 2) frewalls are devices that connect the same network on network messages in great detail.

its inside and outside ports. They are not a The transparent feature allows them to routed hop and thus can be safely installed be dropped into existing systems without in live networks. Layer 3 traffc, such as requiring readdressing of the station

IP traffc, cannot pass through the security devices. This means that organizations can retroft security zones into live envi- appliance unless it is explicitly permitted.

ronments without a shutdown. They also allow the installation of security controls 2 A stateful frewall keeps track of the within a single sub-network. state of network connections and allows The frewall feature provides detailed only packets with a known connection to 2 “stateful” inspection of all network pass through it. protocols so inappropriate traffc can be blocked. For example, rate limits can be Tim Wallaert, set to prevent “traffc storms,” while deep Director – Vertical packet inspection rules can be set to pre- Markets, Energy, vent inappropriate commands from being leads Belden’s sent to IEDs or controllers. expansion into the Overall, there is a huge opportunity power utility and oil for offshore facilities to beneft from and and gas markets. He stay ahead of the competition by laying has spent more than out the proper network infrastructure. 20 years in industrial automation,

Decreased downtime and reduced secu- helping improve production operation rity risks help keep the time and money across a range of industries. Tim’s spent on troubleshooting and fxing current focus is on energy communica-

Using high-quality ruggedized components, issues low. Ultimately, using the latest tion and automation as one of the key including the cable and connectors, greatly networking and communications tech- enablers of the digital oilfeld. He holds a reduces network failures on ofshore plat- nologies can reduce operations costs and BSEE from Michigan State University and forms, such as this fxed, gas and oil process- engineering time and improve the return an MBA from Case Western Reserve ing structure.

on investment. University.

ONSHORE. OFFSHORE. With the majority of incidents originat- ing from secondary points of entry to the network, problems can spread rapidly

EVERY SHORE.

through the network. A perimeter-style defense with a frewall at the edge of the

Certi? cation | Training | Events | Standards | Statistics | Safety network, while necessary, isn’t enough.

Washington, D.C. | Houston | Beijing | Singapore | Dubai | Rio de Janeiro To protect a system from within, a multi-layered defense, such as Defense 877.562.5187 (Toll-free U.S. & Canada) in Depth (DiD), is needed. DiD is built on three core concepts: multiple layers of +1.202.682.8041 (Local & International) defense, differentiated layers of defense [email protected] | www.api.org and threat-specifc layers of defense. A network protected using a DiD strat- egy responds to threats, such as traffc storms or viruses, by limiting the impact to the zone where the problem started.

Alarm messages from the frewalls will pinpoint the zone, and even the source of the problem, making the situation faster and easier to correct.

®

Use transparent industrial frewalls

It’s a tough business. Look to API.

to protect core processes

Copyright 2014 – American Petroleum Institute, all rights reserved. API, the API logo, the “Onshore” slogan and the “Tough” slogan are either service marks, trademarks or registered trademarks of API in the United States and/or other countries.

1

Transparent frewalls are security devices with special features for industrial use. At frst glance, they appear like a traditional

OffshoreEngineering_HalfPageAd2.indd 1 2/10/14 10:36 AM oedigital.com April 2014 | OE 59 000_OE0414_Prodops1_Belden.indd 59 3/22/14 9:59 PM