Security from the front office
to the factory floor
GREYCORTEX is happy to announce that we have released the latest version of our MENDEL network traffic analysis solution. From version 3.3 forward, MENDEL’s detection and visibility capabilities are now available for SCADA/ICS environments. This new capability goes beyond support for several protocols found in earlier versions of MENDEL, and extends it to a whole new module, including the ability to visualize not just devices, but multiple states, like time series in IEC 61850 GOOSE, SNMP, and IEC 60870-5-104 protocols.
MENDEL 3.3 OFFERS:
New SCADA module protects industrial environments like IT networks
A new module for processing and visualization of SCADA protocols, including new dashboards for visualizing time series in IEC 61850 GOOSE, SNMP, and IEC 60870 – 5‑104 protocols. This module includes the capability to identify individual SCADA devices, their communications within the network, and even their internal states. As with MENDEL’S IT network features, MENDEL’s SCADA functionality is passive, so there is no risk that a network will be shutdown by active response measures.
Added support for parsing Kerberos, Enip/CIP, TFTP, CC-link, and IKEv2 protocols
Added support for parsing FTP protocol including parsing FTP data streams
Added detection engine for SSL/TLS client fingerprints JA3
