Hirschmann (Belden) · Protocol Gateways
EAGLE40-6M Industrial Security Router / Firewall
Part number EAGLE40-6M-4TX-2SFP
Industrial firewall and router with 4 × Gigabit TX and 2 × SFP, stateful packet inspection, deep packet inspection for Modbus/OPC UA, VPN (IPsec/OpenVPN), NAT, for OT zone segmentation per IEC 62443.
- CE
- UL
- Stateful firewall
- VPN
Overview
The Hirschmann EAGLE40 is an industrial security router that sits between OT zones or between the plant and the enterprise network, implementing the zone-and-conduit model of IEC 62443. The EAGLE40-6M-4TX-2SFP has four Gigabit copper ports and two SFP slots, a stateful firewall with deep packet inspection for Modbus TCP, OPC UA and other industrial protocols, NAT/1:1 NAT for identical machine networks, and IPsec/OpenVPN for secure remote access. It runs HiSecOS with a web interface and integrates into HiVision; redundancy (VRRP) and learning mode for firewall rules simplify deployment. Fanless metal housing, -40…+70 °C and redundant DC supply suit cabinets in utilities, oil and gas and manufacturing.
Key features
- 4 × 10/100/1000 TX + 2 × SFP; routing, NAT, 1:1 NAT, VRRP redundancy
- Stateful firewall with learning mode; deep packet inspection for Modbus TCP, OPC UA, IEC 104, DNP3
- VPN: IPsec and OpenVPN for secure remote maintenance
- HiSecOS with web interface, HiVision integration; IEC 62443-4-2 security features
- Fanless metal housing, -40…+70 °C, redundant 24 V DC; conformal coating option
Typical applications
- Segmenting machine cells and process units into security zones
- Secure remote maintenance access for OEMs
- Connecting identical machines with 1:1 NAT
- Plant-to-enterprise DMZ firewalls
Technical specifications — EAGLE40-6M-4TX-2SFP
| Ports | |
|---|---|
| Ports | 4 × RJ45 Gigabit, 2 × SFP |
| Routing | Static, OSPF, VRRP |
| NAT | NAT, 1:1 NAT, port forwarding |
| Security | |
| Firewall | Stateful packet inspection, learning mode |
| DPI | Modbus TCP, OPC UA, IEC 60870-5-104, DNP3, EtherNet/IP |
| VPN | IPsec, OpenVPN |
| Compliance | IEC 62443-4-2 features, secure boot |
| Electrical | |
| Power | 24 V DC redundant (12–48 V) |
| Consumption | ≤ 15 W |
| Housing | Metal, DIN rail, fanless |
| Environment | |
| Ambient temperature | -40…+70 °C |
| Protection | IP20 |
| Approvals | CE, UL, cUL, Class I Div 2 |
Specifications are summarised from the manufacturer's documentation for selection purposes. Always confirm against the current datasheet before design-in; we send the datasheet and the exact ordering code with every quotation.
Related part numbers and alternatives
| Part number | Relationship | |
|---|---|---|
EAGLE20-0400 | Smaller 4-port Fast Ethernet firewall | Quote |
EAGLE40-03 | Compact 3-port version | Quote |
FL MGUARD | Phoenix Contact mGuard security router alternative | Quote |
Not sure which variant you need? Send us the nameplate photo or the old part number and we will identify the current equivalent.
Supply, documentation and lead time
What you receive
- Genuine Hirschmann (Belden) product in original packaging
- Commercial invoice and packing list; Certificate of Conformance on request
- Datasheet, declaration of conformity and country of origin as issued by the manufacturer
- Manufacturer warranty, period stated on the quotation
How we quote
- Reply within one business day with price, lead time and stock position
- Alternatives proposed when they improve price or delivery
- Incoterms of your choice: EXW Hai Phong, FOB/FCA, CIF/DAP to your site
- Consolidated shipments for multi-line orders; export documentation for buyers outside Vietnam
Indicative HS code 8517.62 — final classification is confirmed on the commercial invoice.
Frequently asked questions
Do I need a firewall between machines and the plant network?
If machines come from different OEMs, need remote access, or if an IEC 62443 assessment requires zones, yes. The EAGLE40 enforces which protocols and addresses may cross the boundary and logs attempts.
Can OEMs access their machine remotely?
Yes. The VPN server/client with user-based access rules gives each OEM a tunnel to its own zone only, with the firewall limiting the reachable devices and protocols.
Is the EAGLE40 available from stock, and what is the lead time?
Typically 2–4 weeks from Belden regional stock. We confirm with the quotation.