Honeywell CC-PCF901 | Series C Control Firewall Module

Description

Honeywell CC-PCF901 Control Firewall Module

Product Overview

The Honeywell CC-PCF901 is the Control Firewall module used in the Experion PKS Series C architecture. Honeywell identifies this hardware as the CF9, a nine-port Control Firewall that serves as the Fault Tolerant Ethernet communications center for a Series C control network. Eight ports provide FTE connections to in-cabinet C300 controllers, Series C Fieldbus Interface Modules, and applicable FTE Bridge modules. The ninth port provides the uplink toward the supervisory FTE network and Level 2 control area.

Unlike a conventional Ethernet switch, the Honeywell CC-PCF901 performs an application-specific network boundary function. Honeywell states that the CF9 rejects Ethernet messages that are not required for control, prioritizes downlink traffic over uplink ingress traffic when the fabric is saturated, and permits valid C300-compliant messages to pass into the C300 domain. The module mounts directly on the associated CF9 I/O Termination Assembly rather than operating as a standalone rack switch.

For maintenance planning, the host IOTA is just as important as the module itself. Honeywell identifies CC-TCF901 as the Series C CF9 IOTA and DC-TCF901 for the Series C Mark II architecture. Optional optical interfaces include CC-FSMX01 for single-mode fiber and CC-FMMX01 for multi-mode fiber. The CC prefix also identifies a coated PCB version intended to provide additional environmental protection compared with the corresponding CU-designated hardware.

Product Introduction

When a Series C cabinet begins losing FTE connectivity, replacing a generic Ethernet switch is not the same repair as replacing the Honeywell CC-PCF901. The CF9 sits at a defined control-network boundary and applies Honeywell-specific traffic handling to the C300 domain.

For a legacy system replacement, check the CF9 hardware revision, firmware, IOTA, port arrangement, and existing FTE topology together. Honeywell documented firmware revisions PP, RR, and TT for CC-PCF901 hardware revision D and later, which is a useful reminder that the part number alone does not capture every field configuration.

Key Technical Specifications

Honeywell’s installation documentation specifies that the CF9 module is seated into the designated IOTA connector and mechanically secured with screws tightened to 1.3 N·m. The module receives its system connection through the IOTA rather than being wired like a conventional standalone network appliance.

CC‑PCF901

Major Features and Practical Advantages

1. Nine-port CF9 architecture

The defining hardware arrangement is eight downlink ports plus one uplink. The eight downlinks connect the CF9 to applicable Series C control-network nodes inside the cabinet, while the ninth port provides the connection toward the supervisory FTE network and Level 2 control area.

This port structure is important when troubleshooting. A loss of one downlink should not automatically be diagnosed as a general FTE backbone failure. Check the individual port LED, cable, connected controller or FIM, and the CF9 status before replacing the firewall module.

2. Control-specific traffic filtering

The CF9 is more than a physical Ethernet distribution point. Honeywell describes three important traffic-handling behaviors: rejecting Ethernet messages not needed for control, prioritizing downlink traffic if the fabric becomes saturated, and allowing valid -compliant messages into the domain.

That distinction matters during system modifications. Replacing the CF9 with an ordinary managed switch may reproduce the physical port count while changing the network behavior that the Series C control architecture expects.

3. Dedicated Series C IOTA mounting

The CC- installs on the associated CF9 IOTA. Honeywell’s documentation identifies CC-TCF901 as the Series C CF9 IOTA and describes the IOTA as the physical connection point for the Control Firewall module and FTE cables.

For procurement, therefore, the correct question is not simply “Does the replacement have the same connector?” The complete combination of CF9 module + IOTA + cabinet generation + FTE topology needs to be checked.

4. Series C Mark II compatibility considerations

Honeywell documentation also identifies DC-TCF901 as the CF9 IOTA for Series C Mark II cabinets. Current system documentation continues to reference CC- as the CF9 component, but the cabinet/IOTA generation still needs to be verified before a replacement is installed.

This is especially important during modernization work where an older Series C cabinet and a Mark II cabinet may appear similar at the system level while using different termination hardware.

5. Optional fiber connectivity

The CF9 architecture supports optional fiber modules. Honeywell identifies CC-FSMX01 as the single-mode fiber module and CC-FMMX01 as the multi-mode fiber module. These modules plug into the appropriate IOTA interface rather than turning the CC- into a generic SFP-equipped Ethernet switch.

The single-mode option is particularly relevant where the supervisory network or cabinet-to-cabinet link requires longer fiber runs.

6. Firmware is revision-sensitive

This is an area where procurement teams should not rely solely on the model number. Honeywell’s 2021 system notice specifically references CC- / Control Firewall CF9 and firmware revisions PP, RR, and TT, applicable to hardware revision D and later.

That does not mean every CC- should be loaded with one of those revisions. The installed hardware revision and Experion release must be checked first. Firmware should be treated as part of the system compatibility assessment.

7. Coated PCB construction

Honeywell’s Control Firewall documentation explains that the CC prefix identifies a printed wiring board with coating intended to provide additional environmental protection, while CU indicates an uncoated board. This makes the exact prefix relevant when replacing an installed module in a controlled industrial environment.

Related Products

• — CF9 I/O Termination Assembly for the Series C cabinet; provides the physical interface between the CF9 Control Firewall, FTE cabling, and cabinet infrastructure.
• — CF9 IOTA associated with Series C Mark II cabinet architecture; verify cabinet generation before selecting the termination assembly.
• CC-FSMX01 — FTE single-mode fiber module for the CF9 IOTA.
• CC-FMMX01 — FTE multi-mode fiber module for the CF9 IOTA.
• CC-HCN911 — Horizontal nine-port FTE Control Firewall IOTA used for applicable Series C installations.
• CC-PCNT01 — Series C controller module; unlike the CC-, it performs controller functions rather than network firewall functions.
• CC-TCNT01 — controller IOTA providing the physical termination interface for the applicable controller architecture.
• CC-PFB401 — Series C Fieldbus Interface Module; operates within the wider Series C control architecture but serves a different network/interface role.

FAQ

What exactly does the Honeywell CC- do?

It is the CF9 Control Firewall for an Experion PKS Series C control network. It provides eight FTE downlink ports and one supervisory FTE uplink while applying Honeywell-specific traffic filtering and prioritization between the control domain and supervisory network.

Is CC- a PLC or DCS CPU?

No. It should not be described as a process controller or conventional DCS CPU. Its primary role is network security, FTE communications distribution, and control-domain traffic handling.

Can I replace CC- with a standard managed Ethernet switch?

That would not be a like-for-like replacement. A standard switch may provide nine physical Ethernet ports, but it does not inherently reproduce the CF9’s Honeywell-specific control-message filtering and -domain behavior. The CF9 should be treated as an architecture-specific component.

Which IOTA does CC- use?

Honeywell identifies as the Series C CF9 IOTA. is identified for Series C Mark II installations. Verify the cabinet generation and installed IOTA before ordering.

Can I hot-swap the CC-?

Do not assume generic hot-swap capability. Honeywell’s installation documentation gives a specific module-removal/installation procedure and warns against connecting or disconnecting components while energized where the hazardous-area status is unknown. Follow the approved site maintenance procedure and the applicable Experion documentation.

Does CC- have firmware?

Yes. The CF9 is firmware-dependent. Honeywell’s system notices specifically identify CC- hardware revision D and later with firmware revisions including PP, RR, and TT. The correct firmware depends on hardware revision and system release; do not assume a particular firmware version from the part number alone.

Does CC- support fiber?

The CF9 architecture supports optional fiber modules installed at the IOTA. Honeywell identifies CC-FSMX01 for single-mode fiber and CC-FMMX01 for multi-mode fiber. The optical module should be selected according to the installed fiber architecture rather than treated as a generic network transceiver.

What should I check before buying a replacement CC-?

At minimum, compare:

1. Complete model number and associated part number.
2. Hardware revision.
3. Firmware revision.
4. Existing CF9 IOTA model.
5. Series C versus Series C Mark II cabinet.
6. Eight-downlink/one-uplink network arrangement.
7. Fiber module, if installed.
8. Existing Experion release and FTE configuration.

A visually identical module is not automatically configuration-identical.

Procurement Note

The Honeywell CC- is a system-specific Series C network component. For a maintenance replacement, the module’s physical condition is only one part of the inspection. Check the nameplate, hardware revision, firmware information, connector condition, mounting hardware, and associated IOTA.

For New Surplus inventory, do not interpret unopened packaging as proof that the hardware matches the installed system revision. Honeywell’s own documentation confirms that CF9 firmware is revision-dependent, and system notices specifically distinguish firmware revisions by hardware revision.

When replacing a failed CF9, preserve the existing FTE topology and configuration records. Record which port is the supervisory uplink and which ports serve individual Series C nodes before removing the old module. If an optical interface is installed, document the exact fiber module and connector arrangement at the same time.

The safest procurement description is therefore Honeywell CC- / 51405047-175, Series C CF9 Control Firewall Module, with the installed hardware revision and firmware verified before deployment. Honeywell’s documentation clearly establishes the CF9’s nine-port FTE role and its dedicated IOTA installation.