12.5. GOOSE

The GOOSE (Generic Object Oriented Substation Event) Loadable Security Module (LSM) which enables Deep Pack Inspection (DPI) firewall capabilities for GOOSE traffic.

The GOOSE traffic is one of the mapped standards of IEC 61850 protocol and is engineered for configuration of Intelligent Electronic Devices for electrical substation automation systems to be able to communicate with each other.

You can find the GOOSE protocol at Firewall → Enforcer → GOOSE.

GOOSE

12.5.1. GOOSE Settings

Enabled

Wheter the GOOSE enforcer is active or not.

Possible values:

  • Enabled

  • Disabled (default setting)

Name

Name of the GOOSE enforcer.

Possible values:

  • Character string with 0..100 characters

Description

Description of the GOOSE enforcer.

Possible values:

  • Character string with 0..250 characters

Sanity Check

Activates/deactivates the plausibility check for the data packets.

Possible values:

  • Enabled (default setting)

    The plausibility check is active.

    The device checks the plausibility of the data packets regarding format and specification.

    The device blocks the data packets that violate the specified profiles.

  • Disabled

    The plausibility check is inactive.

State and Sequence Check

Activates/deactivates the State and Sequence Check.

Possible values:

  • Enabled (default setting)

  • Disabled