SEL-2740S

Managed OT SDN Switch

The SEL-2740S is the industry's first field-proven OT SDN-specific switch, designed to perform reliably even in the harshest electrical and industrial conditions. Unlike traditional Ethernet switches, it utilizes Software-Defined Networking technology to provide complete control and visualization of network traffic. Compliant with IEEE 1613 and IEC 61850-3 standards, it delivers the high-speed performance and robust cybersecurity required for real-time control systems (PCS, DCS, SCADA) and protective relay networks.

Key Features

Zero-Trust and Deny-by-Default

Every communication flow must be pre-approved by the central controller (SEL-5056) to pass through the switch. Since all unauthorized traffic is blocked by default, it fundamentally prevents "lateral movement," where threats that have compromised the internal network attempt to spread to other devices.
Reduced Attack Surface by Eliminating Vulnerable Protocols

The switch does not use traditional switching methods that act as security vulnerabilities, such as MAC address learning, broadcast traffic, and RSTP. This eliminates common network attack vectors like MAC flooding, ARP spoofing, and loop-induction attacks.
Flow-Based Micro-segmentation

Beyond simple VLAN segmentation, the switch can isolate communication paths at a granular level based on specific services (ports/protocols) between specific devices. This provides powerful isolation, allowing only specific paths to be blocked or protected in the event of an incident.
Deterministic Traffic Engineering

By pre-calculating and specifying traffic paths, security policies are applied consistently even during network congestion or the use of backup paths, maintaining communication latency at predictable levels.

Centralized Situational Awareness

Through the SEL-5056 SDN Flow Controller, operators can view the entire network's communication status, backup paths, and operational statistics at a glance. It enhances response speed by immediately visualizing unauthorized access attempts or network anomalies.
Disruptionless Change Management

Security policies can be changed or updated without disrupting traffic or dropping packets while the network is in operation. This allows for the constant modernization of security without compromising the availability of critical infrastructure.
Hot-Swappable Modular Design

Ethernet interface modules can be replaced or expanded while the equipment is running. This facilitates physical availability and security management by allowing hardware maintenance without system downtime.
Automated Provisioning and Commissioning

Entire network configurations can be deployed within minutes via the central management system. This prevents the omission of security settings caused by human error during manual configuration.

List