Architecture
Summary: OT/ICS › Security
High-Level Architecture
ConnexGate consist many software modules, that are working together to create a single system. All core modules are same for any connexGate models:
- Web Management Interface: Browser-based UI for configuration, monitoring, and management
- Backend Services: Protocol handlers and API connectors
- Network Stack: Complete networking stack for optimized traffic management and protocol control. There are two type of physical interfaces:
- OT Side Interface: Connects to the Operational Technology network
- PLC/IoT Side Interface: Connects to PLC, RTU and IoT device networks
- Deployment Model Handlers: There are two deployment models, enabled based on the device specific licenses. Current models are:
- Proxy Model: Protocol-aware proxy with device shadowing and command filtering
- Forwarding Model: Address translation with port forwarding and routing
- Protocol Support: As of last version (1.0.4 – February 2026), protocols enabled to for data collections are Modbus TCP and Profinet (S7)
- Security Features: Command filtering, IP access control, firewall logging, request logging
- Remote Logging: Syslog and MQTT support for centralized log management
Supported Browsers
- Google Chrome (latest version recommended) (Other Chromium based browsers are not actively supported as they may use proprietary features that may interrupt UI operations)
- Mozilla Firefox (latest version)
- Microsoft Edge (latest version)
- Safari (latest version)
