L1NE: Secure networking for legacy CNC machines | Logiphys
AMB 2026 We're exhibiting Stuttgart · 15–19 Sept · Booth 2B54
L1NE · Legacy integration for CNC machines

Your machine works.
Only the connection is missing.

Secure network connectivity for older CNC machines with SMB1, NFSv2 or FTP. The machine stays as it is.

How it works ↓ Request a demo →
Jump to: I run production → I'm in IT →
Made in THE LÄND · Baden-Württemberg
L1NE Appliance – Gateway für die sichere Netzwerkanbindung älterer CNC-Maschinen
L1NE Appliance – Gateway für die sichere Netzwerkanbindung älterer CNC-Maschinen
No Retrofit
Control and operation stay unchanged, only IP and share are adjusted.
1 device per machine
Decentralised and autonomous, no single point of failure in the production line.
SMB1 SMB3
Open legacy protocols are encrypted towards the company network, NFSv2 → NFSv4 too.
L1NE Appliance: zwei Netzwerkanschlüsse, 12 V DC, COM-Port
L1NE ONLINE · SMB3 ACTIVE
The appliance

One device. Between machine and network.

Industrial hardware in an aluminium housing, mounted right at the machine. Two network ports separate the worlds: one to the control, one to the company network.

1 · 2Two network ports: machine and company network, physically separated
COMService port for commissioning and on-site diagnostics
12 V12 V DC supply, from the control cabinet or a plug-in adapter
We're exhibiting
Experience L1NE live at AMB Stuttgart
Legacy connectivity hands-on: real appliance, real data flow, and answers to your questions right at the booth.
AMB, Internationale Ausstellung für Metallbearbeitung
15.–19.09.2026 HALL 2 · BOOTH 2B54
Claim show discount →
Fundamentals

Why replacing your CNC machine is the wrong answer

Your machine constantly exchanges programs and jobs with the company network; older controls do so via protocols now considered insecure. The problem is never the machine, only this connection. That is exactly what L1NE takes over, without changing anything about the operation.

No replacement needed, a technically sound machine should not go just because it can no longer exchange data.
No conversion or retrofit project, just a short, planned stop; no open-ended outcome, no warranty questions on the machine itself.
No loss of control, nothing is changed on the proven machine you have relied on for years.

“L1NE sits between machine and corporate network like a digital bodyguard.”

For operations

Continuity instead of changeover

Your machine runs exactly as before, no relearning for operators
Files & programs are transferred automatically in the background and securely
No training effort, no change process in day-to-day operations
The investment in the machine is preserved, with no follow-up project
Your benefit

One device, one point of contact

Logiphys supplies and installs L1NE: no separate IT project, just one short planned stop. Ongoing support and updates can be added optionally.

Talk to us ↓
For IT

SMB1 and NFSv2 securely isolated

Standard industrial hardware instead of a black box, audit-friendly, no proprietary firmware dependency. Each device sits decentralised right at its machine, no central single point of failure, no cloud dependency in daily operation.

CNC machine

SMB1 · NFSv2 · FTP
insecure legacy zone

L1NE Gateway

Industrial hardware · isolated legacy environment
Separated network zones

Company network

SMB3 · NFSv4 (encrypted)
modern, secure zone
Questions about zones, firewall rules or EDR integration? Our engineers will walk through the architecture with you. Request a technical call →
Core features

Everything centrally in the browser

No proprietary Windows tool required, WebConfig runs on Mac, Linux, Windows and mobile.

/01

Protocol gateway

SMB1/2/3, NFS v2–v4 and FTP, configurable separately for the legacy and modern side.

/02

WebConfig

Browser-based, platform-independent, not a Windows-only tool.

/03

Data Sync

Bidirectional sync between host and legacy VM, configurable interval.

/04

SMB-Bridges

External shares (NAS, Windows servers) mirrored automatically with zone separation.

/05

Trash Browser

30-day retention of overwritten or deleted files.

/06

USB-Bridging

Network down? Plug in a USB stick, the machine keeps working directly with the data on it.

/07

Vendor-independent

Works with controls from any manufacturer that has a network interface, no vendor lock-in.

L1NE WebConfig – Anmeldung im Browser
WebConfig, sign in via browser, no extra software
L1NE Dashboard – Status von Host, VM, Sync und Netzwerk
Dashboard, host, VM, sync and network status at a glance
Security

True isolation. Decentralised and fail-safe.

Isolation

KVM virtualisation

Host (SMB3/NFSv4) and legacy VM (SMB1/2, NFSv2/v3, FTP) are separated by real process, kernel, file-system and network isolation.

Network

Default-deny firewall

No routing between the machine network and the intranet, every cross-zone access runs exclusively through defined, controlled paths.

Updates

Signed firmware & OS bundles

No phone-home to vendor servers; firmware and OS updates exclusively via signed, verified bundles.

Key advantage

Decentralised = resilient

Every L1NE is an autonomous appliance right at its machine. If one device fails it affects only that machine, never the whole production line.

How rollout works

Four steps. Not a project.

Step 1

Enquiry & alignment

A brief conversation: which machines are affected, what does your network look like? Logiphys handles the rest.

Step 2

Installation

L1NE is placed between machine and network, one small adjustment, minimal downtime.

Step 3

Operation

Runs in the background, operators notice nothing. Support and updates can be added optionally.

Step 4

Updates

Signed firmware and OS bundles via WebConfig or USB stick. Snapshot before every update, automatic rollback on errors, usually without a reboot.

Roadmap · growth path

From a single gateway to a centrally managed platform

L1NE Appliance is the entry point, security and legacy connectivity are built in from the start, not optional. A clear growth path builds on it, bookable individually or combined. Update and support plans with defined SLAs complete the offer.

Cloud / Hub

L1NE Cloud / L1NE Hub

Central configuration, log & backup management, licence management and automated update distribution for the entire fleet, as SaaS or on-prem.

Add-on module

Modern Connect

Modern machine protocols (cloud or local MQTT, OPC UA) plus SharePoint/OneDrive connectivity, as an extension of Cloud or Hub.

Subscription

Security plan

Requires an internet connection: SOC/EDR connectivity straight from the device, available independently of Cloud/Hub, full visibility combined with fleet management.

In development, planned for Q4 2026 / Q1 2027. Prices on request.

Downloads

The L1NE brochure to take away

All information in one compact PDF, in six languages.

🇩🇪 Deutsch PDF · DE 🇬🇧 English PDF · EN 🇫🇷 Français PDF · FR 🇪🇸 Español PDF · ES 🇮🇹 Italiano PDF · IT 🇵🇱 Polski PDF · PL
White paper for IT managers

Switching off SMB1 without stopping production

Four options compared, IEC 62443 architecture, five steps, audit checklist, PDF, in German.

Request free copy →
Frequently asked questions

Frequently asked questions about CNC networking

How does the protocol switch work with L1NE?+

The L1NE gateway converts insecure connections such as SMB1 or NFSv2 into encrypted, modern standards (SMB3, NFSv4). The upgrade is transparent and requires no changes to the machine control.

Which machines and controls are supported?+

L1NE works with controls from all manufacturers that have a network interface, no vendor lock-in on the machine side. Typical examples: Siemens Sinumerik, Heidenhain, Fanuc, Mazak, Haas, Okuma and older Windows-based controls.

Is installation complex?+

No. L1NE is placed between machine and network; only the IP and share are adjusted on the machine, no retrofit, no conversion. The machine stops only briefly.

Can L1NE be integrated into existing IT security concepts?+

Yes. The gateway is Linux-based, EDR-capable and offers monitoring interfaces, seamless integration into your existing security concept.

What happens if the network goes down?+

The machine keeps working: with USB bridging you plug a USB stick into L1NE: the machine accesses the data on the stick directly. Once the network is back, synchronisation resumes.

What happens if an L1NE device fails?+

Only that one machine is affected, never the whole line. Every L1NE is an autonomous appliance; a replacement is set up quickly, and the machine bridges the gap via USB if needed.

What does L1NE cost?+

L1NE is purchased once as an appliance, security and legacy connectivity are included. Update, support and security plans are optional. We are happy to quote prices on request.

Does L1NE help with NIS2, ISO 27001 and OT security requirements?+

Yes. L1NE separates the machine network from the company network (zone concept per IEC 62443), keeps SMB1 and NFSv2 out of the intranet and provides signed updates plus EDR and monitoring integration, key building blocks for NIS2, ISO 27001 and TISAX.

“IT switched off the old protocols. We found a solution: we simply put a little black box in between, and everything runs again.”

Production manager · machining company, Baden-Württemberg

Questions? Let’s talk.

Enquire without obligation, after a short conversation you will know whether L1NE fits your machines.

Location
Göppingen
Phone
Email
Web
You can find more information about L1NE and CNC networking on the Logiphys website. logiphys.de →