CTD Version 4.7 | Edge 1.

CLAROTY PROTOCOL SUPPORT LIST

The Claroty Platform: A Complete Industrial Cybersecurity Solution with Unmatched Protocol Coverage
The Claroty Platform supports the industry’s most comprehensive list of protocols found in industrial environments; these include an
unmatched range of both proprietary and standard OT, IoT, IIoT, BMS, and IT protocols. This support is backed by Claroty’s
interdisciplinary team of researchers that collaborate closely with leading industrial manufacturers, vendors, and stakeholders to
ensure that we not only maintain the most extensive protocol coverage and leading research lab in industrial cybersecurity, but also
that we continue to support the protocols, research, and products that our customers and community need most. The following
protocols are supported across all Claroty deployments:
Passive - continuous, real-time monitoring of industrial networks Vendor | Protocol Name
BACNET OPC-DA Alspa (Multicast messages)
Alstom
CAPWAP OPC-UA E-Terra

Citect HMI POP3 Altus Altus ALnet

AVIVA
Cotp Profinet DCP ClearSCADA ViewX
(Schneider)

Cspv4 Profinet I/O B&R B&R INA2000

DHCP Profinet Real-Time AMS (ADS)

Beckhoff
Digi real port Prosoft Discovery EtherCAT

DLMS COSEM PRP Bristol BSAP

DNP3 PTP Buffalo NASNavigator

E-Terra Workstation Radius Caterpillar Caterpillar AHS

Ethernet POWERLINK Standard RTCP CC Link SLMP (CC Link IE Field Basic)

ETHERNET/IP Sattbus CC Link IE CC Link IE - Field

FactoryTalk RNA SECSGEM Checkpoint CPHA (Checkpoint High Availability)

Foundation Fieldbus (FF) SIP Discovery Protocol (CDP)

HART-IP SNMP Cisco Skinny (SCCP)

Standard
Hot Standby Router Protocol (HSRP) SSH UDLD

HTTP Synchrophasor Codesys V2

Codesys
HTTP-XML (specific schemes) TFTP CodesysV3

IEC101 TTSAC (Sistema Avanzado de Control) Cognex Cognex Discovery

IEC103 VNC Comtrol Comtrol NS Link

IEC104 X-Pact Data CTI Control Technologies Inc. (CTI)

ITEPM - Endpoint Mapper ABB DMS system Cygnet Cygnet SCADA

LLDP ABB HC800 (Infinet) Dropbox Dropbox LAN-sync

MMS (IEC-61850/ICCP/TASE.2) ABB Melody Eltec Modbus Eltec

Modbus Bailey DeltaV

Modbus Execload ABB MasterBus 300 Ovation

Modbus Xinje RNRP Ovation ADMD

Emerson
MQTT Spirit Ovation Alarm

NetBIOS Browser (UDP 138) Symphony Plus Ovation DBXmit

NetBIOS Datagram Service Totalflow Ovation PTEdit

Copyright @ 2023 Claroty Ltd. All rights reserved. claroty.com

Passive - continuous, real-time monitoring of industrial networks (continued)

OvationRPC CIFS (SMB) Modbus Schneider

Emerson ROC Plus DCE RPC PowerLogic Discovery

Telnet - DeltaV DCE RPC - ABB DCS Service Manager Schneider NetManage

Enedis B32 Microsoft RDP Schneider Schneider EGX UDP 59

Microsoft
Foxboro Foxboro LLC NTLMSSP (Auth protocol) Schneider ION

Foxboro Foxboro RTV SAMR Triconex Tristation

Fuji Electric FI-net- Fuji TDS Triconex TSAA

GE Bentley Nevada (BNC3500) Windows Update Delivery FTP - SEL

Optimization
Schweitzer
GE PAC8000 (AXE) Mikrotik MNDP Telnet - SEL

GE QuickPanel (TRAPI+HTTP) MELSEC SICK CoLa-A

Mitsubishi
GE SDI (MarkVie) MELSOFT Digsi4 (Siprotec 4)

GE SDI Classic (MarkVie) MDLC data Digsi5

Motorola
GE GE SRTP MDLC management P2

GE-ALM Moxa Telnet - Moxa S7Comm

GE-EGD Niagara Tridium Siemens S7Comm Plus

Siemens FWL LOAD
GE-EGD-CMP NMEA NMEA-0183
(firmware upload)

GE-iFix Nortel NDP Siemens IEM

Modbus GE Enervista Omniflow Flow Computer Sinaut FW8

Omniflow
Hikvision Hikvision Discovery Protocols Telnet - Omniflow T3000 Protocols

HiDiscovery Omron FINS SMA Sunny WEBBOX

Hirschmann
Telnet - Hirschmann OPTO X-Pact Diagnostics
SMS Group
Honeywell C200 - Ftebcip OPTO OPTO MMP X-Pact Discovery

Honeywell EpicMo (C300 management) OPTO SoftPAC Agent Spotify Spotify P2P
Honeywell
Honeywell Experion - CeeNTComm
OSISoft PI1, PI3 TCNOpen TRDP Process Data
(C300,EHPM)

Honeywell Firewall CF9 Pepperl+ P+F DCP Themis Enhanced Modbus

Fuchs
HP HP Switch Phoenix ProConoS (TCP 20547) Toyoda PCWin
Contact
IEC Goose (IEC-61850) Plum Gaz Modem Toyota FI-net Toyoda

JEMA FL-net - All Portwell Portwell Trend IQ3

Keyence Host-Link Communication Red Lion Crimson Twinsoft Modbus Twinsoft

Red Lion
Keyence Keyence KV Studio Red Lion NView-2 Discovery MaxDNA (maxNET)

Keyence Logger CIP Valmet DNA Alarms

Knapp Knapp DPI (over PCCC) Valmet Valmet DNA Damatic configuration, data
Rockwell
Kongsberg Kongsberg EN/IP Valmet DNA Data

Koyo Koyo (HEI/K-Sequence/DirectNet) PCCC Valmet DNA Frontend

Lantronix Lantronix Serial GW Ruggedcomm RCDP Trend WAGO

Linux Linux High Availability SAIAS SBUS Willowglen DACP

Wonderware SuiteLink
LS Electric XG5000 Discovery ScadaPack Modbus ScadaPack Wonderware
IOTalk

Matrikon Matrikon OPC Tunneller Modbus Modsoft Odeq

Schneider Yokogawa
Modbus Concept VNET (VHF)

Copyright @ 2023 Claroty Ltd. All rights reserved. claroty.com

Active – precise, periodic queries of industrial networks Vendor | Protocol Name

BACnet Discovery Atlas Copco Open Protocol Query Beijer HMI Query
Mitsubishi
BACnet Query B&R HTTP Mitsubishi GOT Query

DB Enumeration Query B&R B&R Profile Broadcast Scan

Moxa
(mssql, mysql, mongo) B&R Query Unicast Scan

DNP3 Beckhoff Beckhoff Query Niagara Tridium Fox Query

EN/IP Query CODESYS codesysV3 Omron FINS Query

EN/IP Scan Cisco Profile Opto22 Opto22 Query

Cisco
HTTP Query CTI Query Ovarro TBox Query

IoT Query Cognex Cognex Query DCP Query

Pepperl+-
Fuchs
mDNS Query CrowdStrike CrowdStrike Query Pepperl+Fuchs

Modbus Information Object GE-SRTP CIP Query

GE
MMS Query GE Station Manager Query Rockwell PCCC

NetBIOS Fanuc Focas Query Rockwell Profile

PCCC Hirschmann Discovery Query Modicon Discovery

Standard
Ping Sweep Hirschmann Hirschmann Discovery Scan Schneider Schneider TSX Query

Profinet-DCP Query Hirschmann Profile Schneider Unity Query

Profinet-DCP Scan Unicast Query CTI Query

Lantronix
Reverse DNS Broadcast Discovery S7Comm Query

SNMP Network Layout Query MS SQL Siemens S7CommPlus Query

SNMP Query Windows Profile Siemens Profile

SNMP Scan WinRM Query Siprotec 5 Profile

Microsoft
SNMP Siprotec 5 WMI Query SMA Speedwire Query

SSDP WSD Discovery Ubiquity Ubiquiti Query

SSH Discovery WSD Query Unitronics Unitronics Query

TCP Port Discovery Mitsubishi Melsoft VMware VMware ESX Discovery

Mitsubishi
TCP Port Scan Mitsubishi Profile WAGO WAGO Query

Telnet Westermo WeConfig

Copyright @ 2023 Claroty Ltd. All rights reserved. claroty.com

AppDB – targeted, periodic enrichment of network asset data Vendor | Protocol Name

Standard SCL Motorola ACE, MOSCAD ACE3600 GP-3000 GP-Pro EX

800xA Omron CX-One GP-4000 GP-Pro EX

AC800M Red Lion Red Lion HMIs Crimson v3.0/3.1 LT-3000 GP-Pro EX
Schneider
ABB Advant AAdvance Log Collection LT-4000 GP-Pro EX

Composer AssetCentre SP-5000 GP-Pro EX

Totalflow PCCU FactoryTalkView / RSView ST-3000 IPC (PC/AT) GP-Pro EX

B&R Automation Studio v3/v4 ICSTriplex Log Collection SEL SEL AcSELerator

CODESYS CodesysV3 Rockwell ISaGRAF (multiple) LOGO!Soft Comfort

Emerson DeltaV MicroLogix Factory View PCS7

rx3i,9030 Proficy Machine MicroLogix RS System Ferret Proneta

rx3i,9030 PacsAnalyzer RSLogix 5000 / 500 / 5 Siemens S7 TiaPortal

(v13/v14/v15/v16)
GE
Bently Nevada 3500 System Configuration RSLinx S7/T3000 Step7

MarkVI ToolBoxST Concept Simatic Softshop 505

EHPM EcoStruxure Building Ops Siprotec Digsi4 / Digsi5

Honeywell
Tricon/Trident/TriGP
Experion Ctools / SIT M221 SoMachine Triconex
TriStation 1131

Kepware Kepware OPC Schneider Modicon/Quantum Xinje Xinje PLCs XDPPro

Mitsubishi Melsoft (R) GX Works3 SCADAPack 32 Centum VP/CS3000

Yokogawa
Melsec GX Developer TSX Micro, Premium PL7 ProsafeRS

DIASYS Netmation TwidoSuite

Copyright @ 2023 Claroty Ltd. All rights reserved. claroty.com

Claroty Edge – lightweight, safe-active data collection Vendor | Protocol Name

BROADCAST UNICAST UNICAST

BACNET MMS EN/IP
ABB Omron
EN/IP Modbus FINS

ICMP Broadcast Andover SNMP Opto-22 OPTO

Standard MDNS Atlas Copco Atlas Open Protocol Philips HTTP

SSDP Axis FTP Phoenix HTTP

Profinet DCP HTTP Polycom HTTP

B&R
WSD SNMP Prosoft CIP

Codesys/Standard Codesys Discovery Beckhoff Red Lion HTTP

Beckhoff
GE GE Station Manager Discovery NBNS Ricoh SNMP

Hirschman HiDiscovery Beijer (Mitsubishi) Beijer E1000 HMI Rockwell CIP

Lantronix Lantronix Broadcast Discovery Brother HTTP RouterBOARD HTTP

(MikroTik)
LS XG5000 Discovery Cognex Cognex RS CIP

Melsoft Discovery CTI CTI UMAS (Schneider Modbus)

Mitsubishi
Mitsubishi GOT Discovery Dallmeier HTTP Schneider HTTP

Moxa Moxa Broadcast Scan Danfoss Modbus Modbus

Omron FINS Discovery Digiboard HTTP SEW CIP

Red Lion Sixnet Discovery Enterasys SNMP (v1) SICK EN/IP

Schneider Schneider Netmanage Discovery CIP MMS

Fanuc
SMA Speedwire Discovery FOCAS S7 - SNMP
Siemens
Ubiquiti Ubiquiti Broadcast Scan Fisher-Rosemount Telnet Siprotec5 (HTTP)

Fuji-Xerox HTTP SNMP

GE GESRTP Sierra Monitor EN/IP

Grandstram HTTP Sigmatek BACnet

Hikvision HTTP SMA Solar Technology Speedwire

Hirschmann Telnet Square D Modbus

HMS EN/IP Synology HTTP

HTTP TAC-AB SNMP

HP
NBNS Teltonika SNMP

Keyence CIP Terasaki Modbus

Lantronix TP-Link HTTP

Lantronix
Telnet Tridium Tridium Fox

Lexmark FTP Ubiquity Ubiquity

Microsoft NBNS Universal Global Moxa Unicast Scan

Scientific
Melsoft Industrial Telnet
Mitsubishi
Mitsubishi GOT EN/IP
WAGO
Mobotix HTTP WAGO

Moxa Unicast Scan SNMP

MOXA Westermo
Telnet Telnet

Zebra SNMP

Copyright @ 2023 Claroty Ltd. All rights reserved. claroty.com

 About Claroty
Claroty empowers organizations to secure cyber-physical systems across industrial (OT), healthcare (IoMT), and
enterprise (IoT) environments: the Extended Internet of Things (XIoT). The company’s unified platform integrates
with customers’ existing infrastructure to provide a full range of controls for visibility, risk and vulnerability
management, threat detection, and secure remote access. Backed by the world’s largest investment firms and
industrial automation vendors, Claroty is deployed by hundreds of organizations at thousands of sites globally. The
company is headquartered in New York City and has a presence in Europe, Asia-Pacific, and Latin America.

To learn more, visit www.claroty.com

CONTACT US
[email protected]

Copyright @ 2023 Claroty Ltd. All rights reserved. claroty.com