Your existing IXrouter3 devices do not need to be replaced because of the CRA. The fact that our SecureEdge line carries an IEC 62443-4-2 certificate, and the IXrouter3 does not, has no bearing on this: that certificate is a voluntary standard, not a legal requirement.

Why?

The CRA's requirements apply to products placed on the EU market from 11 December 2027. Devices already in the field before that date remain in scope only if they are substantially modified afterwards. Your installed base is therefore not affected, and there is no obligation to replace it.

The IXrouter3 going forward

The IXrouter3 is an active product and will remain available beyond 2027. We are committed to ensuring the IXrouter3 meets the essential cybersecurity requirements applicable to it by the date the CRA applies (11 December 2027), based on the current requirements of the CRA and the Machinery Regulation, through ongoing hardening of its software and configuration. This way, both your installed base and new IXrouter3 units are covered. Under our Product Lifecycle Policy, product support continues for at least five years after any End-of-Life notification, with at least six months' notice before production ends. No End-of-Life date is currently set.

Choosing a gateway for new projects

This is not a choice between secure and insecure: both gateways are built to be secure. It comes down to one question: do you need independently certified compliance documentation?

Choose SecureEdge or SecureEdge Pro when you need documented, independently certified conformity: to satisfy your own auditors, an end-customer or tender requirement, or to demonstrate the cybersecurity conformity of machinery you place on the EU market. Its security is independently certified to IEC 62443-4-2 by Bureau Veritas, with the full documentation readily available. Because that certification is independently verified, it is broadly recognised across different regulations, standards, customers and auditors, which makes it the most defensible and future-proof choice where compliance demands vary or are still evolving. It is also our most capable platform, with extra performance and connectivity headroom.

Choose IXrouter3 when certified documentation is not required and you want a proven, cost-effective gateway. It is fully supported and actively maintained, it is the economical option for standard remote-access deployments, and it keeps your installed base consistent if you already run IXrouter3s: one platform to manage, with shared spares and training.

Our compliance documentation is on our Trust Center.