The mbNET.pro industrial router is the ideal foundation for securely connecting your machines and systems to the Internet.

for direct access or via the (my)mbCONNECT24 Remote Service Portal.

OT-GATEWAY / Universal Security Router

MADE FOR PROFESSIONALS

 

Designed for demanding OT environments and industrial connectivity.
 

  • Certified to IEC 62443-4-1 Security Level 3: MB Connect Line is targeting IEC 62443-4-2 Security Level 3 certification in Q4 2026 to support compliance with the requirements of the Cyber Resilience Act (CRA).
  • Optimised data throughput: 4 × 1 Gbit/s LAN ports and 1 × 1 Gbit/s WAN port, with an optional 1 Gbit/s DMZ port.
  • Additional DMZ port: Maximum control and clear network separation. The router provides secure, separate data paths to the external network and the production network.
  • Integrated failover: Ensures uninterrupted connectivity and maximum availability.
  • Full IT compatibility – seamless integration into modern IT and OT infrastructures:
    • SNMPv3, MQTT API, MQTT Bridge and REST API for secure remote monitoring and router management.
    • Two-factor authentication (TOTP, passkeys) for secure access to the GUI.
    • Network segmentation using port-based VLANs.
    • 802.1X client and server authentication for controlled network access.
    • The device therefore meets key requirements for security, transparency and professional network segmentation.

 

As an industrial-grade VPN router, the device delivers comprehensive, modern protection mechanisms—an innovative solution designed for maximum security in interconnected machinery and plant environments.

Controlled Remote Access

  • You stay in control: Using a digital signal from the PLC, you define precisely when the router connects to the service portal—only then are the components behind it accessible.

 

Onboard Security Chip

  • A non-readable, hardware-based secure element safeguards key material and processes, and handles the encryption of passwords and data.

 

Active Session Warning

  • Via a digital output, you can trigger a local audible or visual alert to inform on-site personnel of an active remote-access session.

 

Unique Device Password

  • Every unit leaves the factory with its own individual, one-time password—no default credentials, no shared secrets.

 

Secure Boot Concept

  • The startup process is protected: the router boots exclusively with signed and verified firmware.

 

Support for SIMPLY.connect

  • MB Connect Line enables intuitive integration of new devices into the mbCONNECT24 Remote Service Portal via smartphone – making device onboarding easier than ever.