Brief Product Description

Honeywell CC-PCF901, part number 51405047-175, is the CF9 Control Firewall module for Honeywell Experion PKS C300 controller chassis. It is a dedicated hardware network security card designed to segregate the control network and supervisory network, protecting C300 controllers and Series C I/O nodes from broadcast storms, network flooding and unauthorized non-control traffic. It works with matching CC-TCF901 IOTA termination assembly which provides 9×RJ45 FTE ports. It adopts hardware stateful packet inspection to prioritize real-time control communication and enforce traffic filtering rules. Powered by the C300 chassis backplane without external power supply. It supports redundant C300 controller architecture and hitless failover. Fully tested surplus and refurbished Honeywell CC-PCF901 (51405047-175) modules are available for legacy Experion PKS system maintenance, spare replacement and plant retrofit projects.

Core Product Functions

• Control Firewall (CF9) network security module for Experion PKS C300 Series C rack
• Isolates control FTE network from supervisory network to guarantee deterministic control communication
• Hardware-based stateful packet filtering, blocks broadcast storms and non-essential network packets
• Paired with CC-TCF901 IOTA to provide up to 9 FTE Ethernet ports for cabinet internal network distribution
• Dual FTE control-side interfaces, supports Fault Tolerant Ethernet redundant network architecture
• Backplane-powered, no separate external power source required
• Compatible with redundant C300 controller pairs and supports bumpless network failover
• Built-in network diagnostic functions for monitoring FTE link status and traffic anomalies
• Supports hot-swap operation for online rack maintenance without system shutdown

Application Scenarios

• Legacy Honeywell Experion PKS C300 DCS control network security isolation
• Thermal power plant DCS cabinet FTE network partitioning and protection of control controllers
• Petrochemical, refinery process control network segregation between control domain and supervisory domain
• Oil & gas, pulp & paper critical process control network anti-interference and security protection
• Industrial sites requiring hard isolation to prevent upper network disturbance affecting control loops
• Legacy Experion PKS control firewall module replacement, maintenance and plant retrofits

FAQ (Frequently Asked Questions)

• Q: Network communication failure after installing CC-PCF901?
  A: Verify matched CC-TCF901 IOTA, check FTE cable wiring and port configuration, confirm firewall filter rule settings, inspect backplane connection and grounding.
• Q: Does Honeywell CC-PCF901 support hot-swap replacement?
  A: Yes, hot swap is supported. Risk assessment and LOTO lockout-tagout must be performed before replacement to avoid network interruption and control disturbance.
• Q: What is the difference between CC-PCF901 and C300 V5 built-in control firewall?
  A: CC-PCF901 is a separate single-slot CF9 card for older C300; C300 V5 integrates control firewall onboard, no need for independent CC-PCF901 module.
• Q: What accessories does it need?
  A: It must work with matching CC-TCF901 IOTA terminal assembly for FTE Ethernet port expansion and wiring termination.
• Q: Is Honeywell CC-PCF901 (51405047-175) available for new DCS projects?
  A: This legacy Experion Series C control firewall module is end-of-life for new installations. Only fully tested surplus and refurbished units are supplied for existing DCS system maintenance and retrofits.