Product Core Brief

• Model: CC-PCF901 (OEM PN: 51308371-175)
• Brand: Honeywell
• Series: Experion PKS C300 Series-C FTE Control Firewall (CF9)
• Core Function: 9-port fault-tolerant Ethernet switch with industrial firewall to segment cabinet-level control network traffic between C300 controllers and field I/O modules
• Product Type: Cabinet-Mount FTE Network Firewall/Switch Module
• Key Specs: 8 downstream FTE ports + 1 uplink port | IEC 62443 compliant | Dual redundant FTE ring support | G3 conformal coated PCBNote: Discontinued end-of-life hardware, stocked exclusively as unopened New Surplus inventory.

Key Technical Specifications

• Matching IOTA Base: CC-TCF901 (CF9 dedicated redundant termination assembly)
• Port Configuration: 8×10/100Mbps FTE downstream RJ45, 1×10/100Mbps uplink RJ45
• Supported Network Topologies: FTE dual-ring, star, linear bus; zero packet loss during single cable failure
• Industrial Security Compliance: IEC 62443-4-2, NERC CIP, CE RoHS
• Functional Safety Rating: SIL2 capable; SIL3 when deployed in 1:1 redundant module pairs
• Supported Protocols: FTE proprietary control protocol, Modbus TCP, OPC UA, DNP3
• Integrated Firewall Functions: Port mirroring, traffic whitelisting, anomaly packet filtering, broadcast storm suppression
• Backplane Operating Voltage: 18VDC to 36VDC nominal 24VDC rack supply
• Typical Module Power Draw: 10W under full 9-port active load
• Ambient Operating Temperature: -40°C minimum to +70°C maximum cabinet ambient
• Hazardous Location Approval: FM Class I Div 2 Groups A/B/C/D cabinet mounting certified
• Environmental Coating: Full PCB conformal coating for offshore/refinery corrosive atmospheres
• Physical Dimensions: 190mm H × 69mm W × 23mm D; net weight 0.45kg

Product Introduction

This unit delivers localized FTE network switching and traffic isolation inside control cabinets, eliminating unfiltered broadcast traffic that disrupts closed-loop controller scan timing. Hardened firewall rules block unauthorized cross-segment communication between process control and auxiliary equipment networks.Dual-path FTE ring logic maintains uninterrupted controller-I/O communication if one Ethernet trunk fails, eliminating single-point network outages for continuous production loops.

QA & Testing SOP (Transparency Building)

1. Incoming Inspection: Cross-reference serial barcodes against Honeywell OEM batch manifests; inspect PCB for cracked traces, bent backplane edge connectors, and RJ45 port pin damage; verify factory anti-static bag seal integrity.
2. Live Testing: Mated with matching CC-TCF901 IOTA on a bench C300 rack powered by a Fluke 115 regulated 24VDC supply; run 24-hour continuous FTE ring traffic cycling with simulated cable break fault injection on all 9 ports.
3. Electrical Testing: Megger insulation test >10MΩ between each RJ45 signal pair and rack backplane; confirm firewall rule enforcement blocks unapproved TCP/UDP traffic per factory baseline configuration.
4. Firmware/Config Backup: Capture factory default security rule sets and port VLAN assignments via high-resolution screen captures for field service reference before bench testing.
5. Final QC & Packaging: Attach serialized printed test pass tag; seal unit in foam-lined static-shielded bag to protect backplane edge pins and RJ45 ports during warehouse storage and transit.

Installation Pitfalls & Guide (Engineer to Engineer)

❗ Firmware Rev Compatibility Risk: Experion PKS R400 and older controller firmware lacks full anomaly detection firewall logic; upgrade C300 firmware to R410 or newer before module swap to avoid unreported network broadcast flooding faults.❗ Jumper Configuration Loss: Photograph FTE ring mode jumpers on the removed old unit; misconfigured single/dual ring jumpers break redundant network failover and trigger constant controller communication timeouts.❗ Wiring Incompatibility: This hardware’s backplane pinout does not interchange with analog/digital IOM modules; cross-substitution without full CC-TCF901 IOTA rework creates unrecognized backplane bus devices.❗ Bandwidth Miscalculation: Overloading downstream ports with more than 16 FIM I/O modules per card saturates 100Mbps links and stretches control scan cycles beyond 500µs design limits.❗ ESD Component Damage Risk: Ungrounded technicians have destroyed Ethernet PHY chips during hot-swap attempts; latent damage creates intermittent link flapping that surfaces after 2–3 weeks of continuous runtime.

4-step replacement guide:

1. Pre-install: Activate cabinet LOTO on 24VDC rack power; secure grounded anti-static wrist strap to DIN rail ground lug.
2. Removal: Document FTE ring jumper positions via photo; unlatch the unit from its CC-TCF901 IOTA base, disconnect all RJ45 Ethernet patch cables sequentially, extract the module from the rack slot.
3. Install: Seat new hardware fully onto matching CC-TCF901 termination base, replicate all ring-mode jumper settings from reference photos, reterminate Ethernet patch cables to matching port positions, lock the module’s backplane connector until audible engagement click.
4. Power-on Test: Restore rack power; access Control Builder network diagnostic screens to confirm stable dual FTE ring status, zero port error counters, and active firewall traffic filtering across all downstream I/O segments.

FAQ (Frequently Asked Questions)

Q: Can this firewall module operate in redundant cabinet network configurations?A: Yes. Deploy two identical units paired to separate CC- IOTAs for 1oo2 redundant network segmentation. Single-module simplex deployments do not meet SIL3 fault tolerance requirements for critical ESD and reactor control racks.Q: Does the module support hot-swapping while the C300 rack remains energized?A: The module can be extracted from the live CC- IOTA, but all downstream Ethernet patch cables must be disconnected first. Live port disconnection induces voltage transients that damage the onboard Ethernet PHY circuits on the PCB.Q: What warranty coverage applies to bench-tested surplus stocked units?A: All inventory units carry a 12-month functional warranty covering factory PCB, Ethernet switching, and firewall logic defects. Damage from field network surge overload, misconfigured ring jumpers, or ungrounded ESD handling is excluded from all coverage terms.Q: Is there a direct drop-in modern replacement for this discontinued hardware?A: Honeywell’s current-generation FTE switch modules offer equivalent segmentation, but full Ethernet cable retermination and Control Builder network security rule revalidation is mandatory; backplane communication handshake timing and firewall default rule sets do not match for unmodified direct swap.Q: What fault isolation do the dual FTE ring paths provide during Ethernet cable failures?A: Separate transmit/receive paths for each ring leg isolate single cable breaks to one network segment; downstream I/O modules maintain continuous PV and discrete status communication via the secondary ring without closed-loop PID interruption.Q: Can non-FTE standard Ethernet devices (PC, printer) connect directly to downstream ports?A: Permitted only via explicit firewall whitelist rules. Unregistered non-FTE devices plugged into downstream ports trigger permanent port lockdown and system minor fault alarms to prevent unapproved external network intrusion into the control domain.Q: Can this CF9 module be paired with non- generic Series-C IOTAs?A: Not supported. Generic analog/digital IOTAs lack dedicated backplane signal routing for FTE switch communication; mating the module to mismatched bases results in unrecognized rack bus devices and complete loss of cabinet network switching functionality.