SonicALERT
Search

Sonicwall Signatures


Go to All Categories list.
Go to All Applications list.

Category: SCADA-APPS

SCADA-APPS Category Description

This SonicWALL IPS signature category consists of a group of signatures that can detect and prevent legitimate traffic of SCADA systems

SCADA stands for "Supervisory Control And Data Acquisition". It generally refers to industrial control systems: computer systems that monitor and control industrial, infrastructure, or facility-based processes.

  Modbus -- Outbound TCP Request
  Modbus -- Inbound TCP Request
  ICCP -- COTP Connection Request
  ICCP -- Unauthorized Association Request
  ICCP -- Unauthorized MMS Write Request
  ICCP -- Invalid OSI-SSEL
  ICCP -- Invalid OSI PSEL
  DNP3 -- Disable Unsolicited Responses
  DNP3 -- Unsolicited Response Storm
  DNP3 -- Cold Restart From Client
  DNP3 -- Stop Application
  DNP3 -- Warm Restart
  DNP3 -- Broadcast Request from Client
  BACnet Protocol -- UDP Activity
  CODESYS -- UDP Protocol 1
  CODESYS -- UDP Protocol 2
  CODESYS -- UDP Protocol 3
  CODESYS -- TCP Protocol 1
  CODESYS -- TCP Protocol 2
  CODESYS -- TCP Protocol 3
  DNP3 -- Protocol Header
  EtherNet/IP -- Send RR Data
  EtherNet/IP -- Register Session
  EtherNet/IP -- Send Unit Data
  SAIA ETHER S-BUS -- UDP Protocol
  ETHERSIO -- Protocol Traffic
  OMRON-FINS -- UDP Protocol 1
  OMRON-FINS -- UDP Protocol 2
  HART-IP -- UDP Activity 1
  HART-IP -- UDP Activity 2
  IEC 61850 -- TCP Activity 1
  PC_WORX -- TCP Activity 1
  ISO-TSAP -- TCP Activity 1
  ISO-TSAP -- TCP Activity 2
  ISO-TSAP -- TCP Activity 3
  S7comm -- TCP Setup
  S7comm -- TCP Data
  Advantech ICS -- FTP Activity
  Beckhoff ICS -- SCADA Software Download Used by Beckhoff CX1010
  Hirschmann ICS -- Hirchmann SCADA Firewall
  Automationdirect ICS -- Automationdirect Modbus Gateway
  Moxa ICS -- Moxa EDS-508A Switch
  Moxa ICS -- Moxa EDS-508A Switch 2
  Moxa ICS -- Moxa EDS-508A Switch 3
  Phoenix ICS -- Phoenix FL IL 24 BK-PAC
  Phoenix ICS -- Phoenix FL IL 24 BK-PAC 2
  Phoenix ICS -- Phoenix FL IL 24 BK-PAC 3
  Siemens ICS -- RUGGEDCOM RS910
  Siemens ICS -- RUGGEDCOM RS910 2
  Siemens ICS -- RUGGEDCOM RS910 3
  Siemens ICS -- SIMATIC S7-1200
  Westermo ICS -- Digi CM TM 32
  Westermo ICS -- Digi CM TM 32 2
  Westermo ICS -- Digi CM TM 32 3
  NetBurner ICS -- Netburner PK 70
  Inhandnetworks ICS -- M2M Wireless Modem
  Inhandnetworks ICS -- M2M Wireless Modem 2
  Inhandnetworks ICS -- M2M Wireless Modem 3
  Westermo ICS -- Westermo Lynx Device
  Barix ICS -- BARIX Barionet Programmable I/O Device Server


Relevant Information