SPS 2025: Moxa Presents a Broad Product Portfolio for Future-Proof, Secure and Reliable OT Networks

Moxa Europe GmbH, a leader in industrial communications and networking, will present solutions for building future-proof, safe and reliable machines, systems and OT networks at SPS 2025 (November 25-27, 2025 in Nuremberg) in Hall 5, Booth 419.

Under the motto “Manufacturing connected. Securely. Since 1987’’, Moxa will be showcasing its comprehensive portfolio of switches, next-gen firewalls, intrusion prevention systems and serial-to-Ethernet gateways that comply with IEC 62443-4-2. This allows industrial cybersecurity requirements such as NIS-2 and the Cyber Resilience Act (CRA) to be implemented in a practical way. With support for numerous protocols (e.g. PROFINET, MRP, EtherCAT, OPC UA FX), the Moxa portfolio stands for interoperability, scalability and flexibility. With an expanded Serial-To-Ethernet gateway portfolio, Moxa creates the possibility of integrating brownfield into modern OT networks in retrofitting projects. Moxa responds to the growing demand for real-time performance with gateways and junction boxes for EtherCAT.

OT Cybersecurity in Focus

With the NAT (Address Translation & Access Control) devices of the NAT-102/108 series, Moxa resolves IP conflicts in production. Even if several machines have the same IP, they can be integrated into the OT network securely with little effort. The series accelerates machine onboarding and supports role-based access control. The hardened design in accordance with IEC 62443-4-2 Security Level 2 (SL2) includes e.g. secure boot, signed firmware updates, traffic logging and MAC/IP/port filtering and supports key requirements from CRA Annex I Part I.

The industrial IPS (Intrusion Prevention System) EDF-G1002-BP-Series combines Deep Packet Inspection (DPI) and virtual patching with up to 500 Mbps and 45,000 packets/s for real-time protection in machine or plant networks. It strengthens network security through hardened access control, defense against known threats, and comprehensive logging for complete traceability, and helps machine builders implement key requirements from the CRA. Whether in passive detection mode or active prevention, the firewall increases the visibility of threats.
The device works in transparent mode, so it can be integrated directly into the network topology without changing existing IP addresses. The management interface can be operated in a separate VLAN and thus enables the segmentation of access and monitoring without affecting production. The EDF-G1002-BP series is certified according to IEC 62443-4-2 SL2, EN 50121-4, NEMA TS2 and IECEx and is also suitable for use in railway, traffic and explosive environments.

CRA Alignment over the Product Lifecycle

In addition to secure-by-default devices that cover CRA Annex I Part I, Moxa also supports CRA Annex I Part II with an IEC 62443-4-1 aligned Secure Development Lifecycle (SDL). This includes systematic, portfolio-wide threat modeling, secure coding, and continuous testing. Moxa’s Product Security Incident Response Team (PSIRT) coordinates responsible vulnerability reporting in accordance with international standards. As an official CVE Numbering Authority (CNA), Moxa assigns CVE identifiers to its own products and consistently publishes entries for high traceability. Security advisories and SBOMs (Software Bill of Materials) ensure transparency. In addition, Moxa supports the fulfillment of CRA documentation requirements for third-party components and the implementation of secure OT networks in accordance with the IEC 62443 and NIS-2 frameworks with solutions for zoning and network segmentation, access control, auditability and long-term resilience.

Transparency in the Network: Live Demo MXview One

With a live demo of the Network Management Platform MXview One, visitors will experience real-time monitoring and diagnostics in industrial networks. The software automatically detects and visualizes network and SNMP/IP devices in subnets. Administration and configuration are carried out centrally via the web browser. A dynamic topology view shows the connection and redundancy status at a glance: Comprehensive reports and notifications of events, detailed device information, complete visibility of redundant LAN connections and numerous other functions ensure end-to-end transparency at all times.