Tripwire® Industrial Sentinel is a non-intrusive network monitoring and situational awareness platform that provides in-depth visibility and cyber resilience for industrial control systems (ICS) and SCADA networks, providing visibility to and protection from events that threaten safety, productivity, and quality.
It combines patented anomaly detection and deep packet inspection (DPI) with a library of over 2,400+ ICS-specific threat indicators and a continuously growing library of 3,500+ indicators of compromise to protect asset owners from advanced cyberattacks, network misconfigurations, and operational errors.
Download this protocol support datasheet for a complete list of protocols, including:
Standard OT Protocols
- BACnet
- CC-Link (Field, FieldBasic, Control)
- DLMS/COSEM
- DNP3
- EtherCAT / EtherCAT Routable
- EtherNet/IP - CIP - PCCC
- Foundation Fieldbus HSE
- GOOSE
- HART
- IEC 60870-5-101
- IEC 60870-5-104
- MMS - ICCP TASE.2
- MMS - IEC61850
- Modbus ASCII
- CentOS
- Modbus RTU
- Modbus TCP
- MQTT
- OPC_CLASSIC (DCOM)
- OPC_UA
- PROFINET (RPC, RTC, RTA, DCP and PTCP)
- RTPS
- SES_92
- SLMP
- SYNCHROPHASOR (IEEE C37.118)
- Sox
- UTMC (based on SNMP)
Proprietary OT Systems/Protocols
- ABB_CNCP (ABB 800xA DCS)
- ABB_IAC_MMS (ABB 800xA DCS)
- ABB_NIS (ABB 800xA DCS)
- ABB_RNRP (ABB 800xA DCS)
- ABBDMS (ABB 800F / Freelance DCS)
- ABB Melody (ABB AC870P DCS)
- ADE (Phoenix Contact)
- AMS (Beckhoff)
- APC PowerChute (Schneider Electric)
- Atop Technologies gateways
- AUTOMATIONDIRECT_SYSTEM (AutomationDirect)
- BN_SYSTEM_1 (Bently Nevada System-1)
- BSAP / BSAP_IP (Bristol Babcock)
- BSAP_IP_TIMESYNC (Bristol Babcock)
- Centum ODEQ (Yokogawa Centum / ProSafe DCS)
- Centum CAMS (Yokogawa Centum / ProSafe DCS)
- Centum TREND (Yokogawa Centum /
- C-NET (Mitsubishi Wind Turbines)
- Citect (Schneider Electric)
- CMP-Link (Toyoda / Toyopuc / Jtekt)
- CodeSys (used by Wago, ABB, Schneider, and other vendors small PLCs)
- COGNEX_DISCOVERY (Cognex)
- COGNEX_MASTERSLAVE (Cognex)
- COMEX (Schneder Electric Foxboro)
- CP2179 (Cooper / PG&E)
- CSLib (ABB 800xA DCS)
- CSP - PCCC (Rockwell)
- CygNet SCADA (CygNet)
- DELTAV_IO (Emerson DeltaV DCS)
- DELTAV_MGMT (Emerson DeltaV DCS)
- DELTAV_UPGD (Emerson DeltaV DCS)
- DELTAV_WGP (Emerson DeltaV DCS)
- DEMATIC
- Desigo (Siemens)
- EATON_IPP (Eaton UPSes)
- Experion CDA, CDAPortMap, DSA, HMI, PointBuilder, SafetyManager, SRP, SrvDiscovery, SrvHeartbeat, SrvRDT (Honeywell Experion DCS)
- Experion PHD (Honeywell Experion Historian)
- FANUC C4 (Fanuc Robotics America)
- Fox (Honeywell Niagara / Tridium)
- Fox (Honeywell Niagara / Tridium)
- GE_EGD / GE_CMP (GE)
- GE_GSM (GE MarkVI and MarkVIe)
- GE_SDB (GE Mark VI and MarkVIe)
- GE_SDI (GE MarkVI and MarkVIe)
- GE_WorkstationST_IntercomPeer (GE MarkVIe)
- GE_iFIX_N2N (GE iFix)
- GE_iFIX_PDB_SYNC (GE iFix)
- GE_SRTP (GE PACSystem / Fanuc)
- GE_HISTORIAN_API (GE Proficy Historian)
- H1 / S5 (Siemens / Sinec)
- HONEYWELL_ICW (Honewyell InControlWare WCS)
- HONEYWELL_MERCURY
- ICONICS_GENBROKER
- ION (Schneider Electric, Siemens)
- ISaGRAF IXL (Yokogawa ProSafe & others)
Proprietary OT Systems/Protocols
- Kongsberg NET_IO (Kongsberg K-Pos, K-Bridge DCS)
- Lantronix gateways
- LonTalk (LonWorks)
- MELSOFT (Mitsubishi Electric)
- MMS (ABB 800xA)
- Modbus/TCP Unity (Schneider Electric)
- Modbus/TCP Concept (Schneider Electric)
- Modbus/TCP Modicon (Schneider Electric)
- Modbus/TCP SoMachine Basic (Schneider Electric)
- Monarch (OSI)
- MSP (Mercury Security)
- Nexthink (Nexthink Analytics)
- NovaTech Orion
- OASyS, OASyS PubSub (Schneider Electric)
- OMRON_FINS
- OSISOFT_PI (OsisoftPI)
- Ovation IO, LOG, REM_IO, RT, ALARM_IO, CD, DB_XMIT, PE, PQ, PR, REDUND, SL, SOE, SYS_REG (Emerson Ovation DCS)
- PAKBUS (Campbell Scientific)
- PANASONIC_BOOTP (Panasonic)
- Philips HUE
- PN800 (ABB Harmony)
- PROSOFT_DISCOVERY (Prosoft Technology)
- PVSS (Siemens)
- QNAP_DISCOVERY (QNAP)
- Raymond iWarehouse
- ROC / ROC Plus (Emerson)
- SADP (Hikvision)
- SCHNEIDER_SYSAP (Schneider)
- SAIA_SBUS (Saia Burgess)
- SEL_FM (SEL)
- SEL_RTAC_ONLINE (SEL)
- SICK_DISCOVERY (Sick)
- S7COMM+/OMS+ (Siemens)
- SPlus, SPlusPortMap (ABB SymphonyPlus)
- Step7 (Siemens)
- Trend Controls IQ/IC
- TriStation (Schneider Electric / Invensys / Triconex)
- UCA2_GOOSE
- UNI_TE (Schneider Uni-TE)
- URMS 2070
- VESTAS_FIRECREST, VESTAS_ ROADRUNNER (Vestas Wind Turbines)
- Vnet/IP (Yokogawa)
- VNET_IP_WAN / VNET_IP_WAN_ HEARTBEAT (Yokogawa)
- Wartsila NACOS Platinum
- Wonderware Historian (HCAL)
- Wonderware SuiteLink (WWIOTALK)
- Wonderware System Platform (ARCHESTRA_NMXSVC)
- ZENON_NETSRV (COPA-DATA)
IT Protocols
- AFP
- BGP
- BJNP
- CAPWAP_CONTROL
- CAPWAP_DATA
- CCP (CheckPoint cluster protocol)
- CDP
- Cisco_Auto_RP
- Cisco_HSRP
- Cisco_SMI
- DCOM
- DHCP
- DNS
- DTP
- FTP
- FTPDATA
- GLBP
- HTTP
- IMAP
- ISAKMP
- Kerberos
- LDAP
- LDP
- LLDP
- MCAFEE_RELAY_SRV_DISCOVERY
- MDNP
- MS-SQL
- MySQL
- NetSupport
- NFS
- NTP
- NMF (.Net Messaging Framework)
- NRTP
- NetBIOS
- OpenRDA
- Oracle TNS
- OSPF
- POP3
- PostgreSQL
- Radius
- RDP
- RFB/VNC
- RIP
- RTCP
- RTP
- RTSP
- SDDP
- Sentinel_LDK
- SLP / SRVLOC
- SMB
- SMTP
- SNMP
- SSDP / UPNP
- SSH
- SSL / TLS
- STP
- SunRPC
- Telnet
- TFTP
- Windows IOT protocols (Sirep_ Broadcast, Sirep_WPCon, WIOT_ DISCOVERY)
Active Queries
- Ethernet/IP
- Siemens Step 7
- SEL (Ethernet)
- SEL (RTAC)
- Windows (req. WMI/WinRM) HARDWARE BIOS VERSION SOFTWARE PATCHES
- OS fingerprinting
- Open ports/services
- Custom port scans