RF Lightning Protectors for Industrial IIoT: Selection, Specs, and Installation Guide

By Dustin Guttadauro, Product Line Manager - Telecom & Fiber, Infinite Electronics

Key Takeaway 

•   An outdoor antenna feed without an RF lightning protector is a direct conductive path from the outdoor environment into the radio equipment inside the enclosure. A nearby lightning strike follows that path and typically destroys the radio's RF input, the connected switch port, and often additional equipment downstream — total loss, not degraded performance. 

•   Three surge mechanisms reach outdoor wireless equipment through the antenna feed: direct lightning strike energy on the antenna or mast, electromagnetically induced transients on the coax run from nearby strikes, and ground potential rise during fault events that drives destructive voltage onto the coax center conductor. 

•   An inline RF lightning protector interrupts that path by clamping the surge voltage and conducting the energy to ground at the building or enclosure entry point — but only if the protector's ground lug is properly bonded to earth. An ungrounded protector provides negligible protection. 

•   DC pass capability is the most common RF protector selection error for IIoT applications: GPS/GNSS receivers, active antenna amplifiers, and certain cellular antennas require DC voltage on the coaxial center conductor — a non-DC-pass protector silences these devices completely.  

Why is the antenna feed the primary lightning ingress path for wireless IIoT equipment? 

An outdoor antenna is an intentionally designed RF collector — a metallic structure positioned for maximum exposure to the electromagnetic environment. That exposure is exactly what makes it effective at receiving radio signals. It also makes it an effective collector of lightning energy. 

The coaxial cable connecting the antenna to the radio equipment is a direct conductive path from the antenna to the indoor electronics. The cable outer conductor (shield) and centre conductor both provide paths for surge energy to travel from the antenna environment into the enclosure. Unlike power cable entries, where SPDs are widely understood as a requirement, the coaxial antenna feed is frequently left unprotected — because the RF connection isn't thought of as an electrical hazard path. 

The radio equipment at the other end of that path has essentially no surge tolerance. An LTE radio module's RF input is designed to handle signal levels measured in milliwatts. A lightning transient carries kilojoules. The energy delivered by even an indirect nearby strike is enough to destroy the RF front end of any radio equipment — the field effect transistors and diodes in the receive path fail instantly. 

The consequence of that failure is not just the radio. The destroyed radio generates fault current that can travel back through the Ethernet port into the connected switch, damaging that port. In enclosures with multiple radios or gateways, a single surge event on one antenna feed can cascade through shared power supplies and ground connections to damage all equipment in the enclosure. 

 What are the three surge mechanisms that threaten outdoor IIoT wireless equipment? 

1. Direct lightning strike 

A direct strike on the antenna structure, mast, or immediately adjacent building delivers the full lightning channel current through the coaxial feed path. Peak currents in lightning channels are typically 20–200 kA; the portion of that current that flows through the antenna feed depends on the impedance of the path but is always destructive to unprotected electronics. 

Direct strikes are relatively rare in any given location, but the probability is not zero — particularly for antenna structures on exposed rooftops, towers, or rural outdoor structures. A building lightning protection system (air terminals, down conductors, and ground ring) reduces the probability of a direct strike reaching the antenna structure but doesn't eliminate the risk to the antenna feed. The protector addresses the energy that follows the coaxial path regardless of whether a direct strike or a partial strike is the source. 

2. Electromagnetically induced transients 

An indirect strike — lightning hitting the ground or a nearby structure rather than the antenna directly — generates a strong electromagnetic pulse around the strike point. Any conductor within the electromagnetic field of that pulse has a voltage induced on it proportional to the rate of change of the magnetic flux through the circuit formed by the conductor and its return path. 

A coaxial antenna feed cable routed from an outdoor antenna to an indoor enclosure forms exactly such a circuit. The longer the coax run, the larger the circuit area, and the higher the induced voltage. A 30-metre coax run from a rooftop antenna to ground-floor equipment, with a lightning strike hitting the parking lot 50 metres away, can experience induced transients of hundreds of volts — enough to destroy an unprotected RF front end even though the strike never touched the antenna. 

This is the most common mechanism for radio equipment damage from lightning in urban and suburban industrial environments where direct strikes to the antenna are infrequent but nearby ground strikes are regular summer occurrences. 

3. Ground potential rise 

When lightning strikes a grounded structure — a building, a utility pole, a substation ground grid — the structure's ground potential rises abruptly relative to remote earth. The rise is temporary (microseconds to milliseconds) but can be hundreds to thousands of volts depending on the soil resistivity and the peak strike current. 

Equipment connected by coaxial cable to an antenna on that structure while being grounded through a separate path (power cable, Ethernet cable, enclosure mounting) experiences the ground potential difference as a voltage stress on all conductors between the two ground references. Even if the antenna cable has a surge protector installed, if the protector is bonded to the same ground that is experiencing the rise, both ends of the protector are at the same elevated potential — the protector cannot discharge the energy because there's no lower-potential reference to discharge to.  

 How do inline RF lightning protectors work? 

An RF lightning protector is an inline coaxial device installed in the antenna feed line at the building or enclosure entry point. Under normal operating conditions, it passes the RF signal from the antenna to the radio with minimal insertion loss — typically less than 0.3 dB in a quality device. When a surge event occurs and the voltage on the coaxial conductor exceeds the protector's clamping threshold, the protection element conducts the surplus energy to ground through the protector's ground lug. 

Three protection technologies are used in RF coaxial surge protectors: 

• Gas Discharge Tubes (GDTs): a gas-filled tube that breaks down and conducts current when the voltage across it exceeds the ionization threshold — typically 90–230V for RF protectors. GDTs can handle very high peak currents (20–40kA) and have very low parasitic capacitance, which is important for RF applications because high capacitance shunts high-frequency signals to ground and increases insertion loss. GDTs respond in microseconds — slower than solid-state devices, but adequate for lightning transients whose rise times are typically measured in microseconds. 
• TVS diodes (Transient Voltage Suppressor): solid-state devices that clamp voltage precisely and respond in picoseconds. TVS diodes have lower peak current capacity than GDTs but respond faster. The parasitic capacitance of TVS diodes is higher than GDTs, which can affect insertion loss at higher frequencies. TVS diodes are used in data-line RF protectors and in hybrid designs. 
• Hybrid (GDT + TVS): the most effective approach for broadband RF applications. The GDT handles the bulk surge current; the TVS diode provides the fast initial response and precise voltage clamping that the slower GDT can't match. The result is a device with the current-handling capacity of a GDT and the response speed and clamping precision of a TVS diode, with the parasitic capacitance profile optimized for the operating frequency range. 

The bandwidth of the protection element determines what frequencies the protector can pass without degradation. A GDT alone has very low capacitance and can provide protection to 3+ GHz with minimal insertion loss. Adding a TVS diode increases capacitance, which limits the upper frequency at which the device maintains its insertion loss specification. Protectors for Wi-Fi 6E (which uses 6 GHz) and 5G NR sub-6 GHz bands require specifically designed elements to maintain <0.3 dB insertion loss across the band. 

What specifications matter when selecting an RF lightning protector for IIoT? 

RF protector selection requires matching more parameters than Ethernet surge protector selection because RF performance — not just protection — is affected by the device. An Ethernet surge protector that introduces 1 dB of insertion loss degrades signal marginally. An RF protector that introduces 1 dB of insertion loss reduces received signal strength by 1 dB, which can be the difference between a reliable link and a marginal one. 

The interaction between frequency range and protection technology is the most important specification relationship. A protector specified for 2.4 GHz Wi-Fi may show acceptable insertion loss at 2.4 GHz while being completely inadequate at 5 GHz — if the installation also supports Wi-Fi 5 or Wi-Fi 6 on 5 GHz, the protector is degrading the 5 GHz band. Always verify insertion loss at the highest operating frequency, not just the nominal frequency. 

 Which connector type do you need for your outdoor IIoT application? 

RF connector mismatch is the most common protector procurement error — and it's also the hardest to catch without physically inspecting the installation. The right protector with the wrong connector requires an adapter that adds insertion loss and introduces a weatherproofing challenge at the connection point. 

The N-type connector is the standard for all outdoor industrial wireless applications. Its threaded coupling mechanism is vibration-resistant, its weatherproof interface is robust, and its frequency performance to 11 GHz covers all current IIoT wireless protocols. For installations where existing equipment uses TNC or SMA connectors, the correct solution is an N-type protector with a short N-to-TNC or N-to-SMA adapter pigtail — not an SMA or TNC protector with marginal outdoor weatherproofing. 

Which RF lightning protector is right for your wireless IIoT scenario? 

The table below matches eight common outdoor IIoT wireless scenarios to protector specifications. Verify the frequency range column against the specific frequency band of your radio before ordering — particularly for 5G and Wi-Fi 6E applications, where the 6 GHz band requires a protector rated beyond the 3 GHz ceiling of many standard protectors. 

L-com's RF lightning protectors are available in N-type, TNC, and SMA configurations, with and without DC pass, covering frequency ranges from DC to 3 GHz, DC to 6 GHz, and DC to 18 GHz. Filter by connector type, frequency range, and DC pass requirement to identify the correct device for your application. 

What is a DC pass, and when do you need it? 

DC pass describes the ability of an RF coaxial device to pass direct current on the coaxial center conductor in addition to the RF signal. In most wireless IIoT applications, the coax carries only RF signal — DC pass is not needed. 

The applications that require a DC pass are specific: 

• Active GPS/GNSS antennas: GPS and GNSS receivers power their antenna through the coax to operate a low-noise amplifier (LNA) mounted at the antenna. The DC voltage — typically 3.3V to 5V, sometimes 12V — must pass through any inline device (including the surge protector) for the active antenna to function. A non-DC-pass protector blocks this voltage; the active antenna receives no power and produces no output. The receiver sees silence and reports loss of signal. This is a common field installation mistake: the protector is installed correctly in all other respects, but the GPS system stops working without any obvious indication why. 
• Mast-head amplifiers: some antenna installations use a preamplifier mounted at the antenna mast to overcome the signal loss in a long coax run. The amplifier is powered by DC on the coax from the indoor unit. A non-DC-pass protector between the amplifier and the indoor unit blocks the power supply. 
• Active antenna splitters: in some distributed antenna system configurations, active components mounted at the antenna end require DC power through the coax feed. 

The rule is simple: if any device on the antenna side of the protector requires DC on the coax, specify a DC pass protector. If in doubt, check the antenna and any inline component datasheets for DC power requirements before specifying the protector. 

Mounting and grounding best practices for outdoor IIoT RF protectors 

Correct installation is the difference between a protector that works and one that provides no meaningful protection. The single most common failure in RF protector installations is inadequate grounding — the device is installed in the signal path, the ground lug is connected to a convenient screw or mounting surface that isn't properly bonded to earth, and the protector has no viable path to discharge surge energy. The equipment is destroyed on the first significant surge event as if the protector weren't there. 

Two points from this checklist deserve emphasis because they're the most frequently skipped. 

Ground conductor length and gauge: inductance in the ground path is the hidden variable that limits protector performance. A long, thin ground conductor has high inductance; high inductance resists rapid current changes; lightning transients are extremely rapid changes. A protector with a 3-metre ground conductor will discharge slower than the same protector with a 30-centimetre ground conductor, even if the resistance in both cases is negligible. Keep the ground conductor as short as physically possible; use 6 AWG minimum for outdoor installations. 

All metalwork to the same ground – antenna mast, enclosure, protector ground, and equipment chassis – must all bond to the same earth ground reference. If the mast is at a different potential than the enclosure during a surge event, current flows between them through whatever path connects them — including through the equipment inside the enclosure. Bonding everything to a common reference ensures that during a surge, all metalwork rises together and no potential difference drives current through equipment. 

 How do you verify that an RF lightning protector installation is correct? 

Three checks confirm that the installation is properly executed: 

• Ground resistance measurement: an earth resistance tester (three-point or clamp-on type) measures the resistance from the protector ground lug to true earth. The result should be <10 ohm for standard industrial installations; <1 ohm for high-exposure outdoor sites in areas with frequent lightning activity. Conduct this measurement before commissioning and annually thereafter. Seasonal soil moisture changes affect ground resistance. 
• RF performance verification: measure the insertion loss of the installed protector at the operating frequency using a vector network analyzer (VNA) or spectrum analyser with signal source. Compare to the protector's published specification — an installed device with higher insertion loss than specified may have been damaged in shipping, have a contaminated or mismatched connector, or have been specified for the wrong frequency range. Confirm the radio links at expected signal levels after protector installation. 
• Post-event inspection: after any confirmed nearby lightning event, visually inspect the protector for physical damage (discoloration, burn marks, cracked connectors) and measure insertion loss again. GDTs in particular can degrade after absorbing a significant surge — a GDT that has triggered multiple times may have a reduced breakdown voltage and may not withstand the next surge. Replace any protector showing physical evidence of surge absorption. 

Special considerations for remote industrial sites 

Remote industrial sites — pipeline compressor stations, water treatment outstations, renewable energy monitoring infrastructure, and agricultural sensors — present the highest lightning exposure of any IIoT wireless deployment. They're located in open terrain without adjacent structures to intercept strikes; they typically have simpler grounding systems than urban buildings, and they're often in areas with high lightning frequency. 

At remote sites, the antenna installation is often the tallest metallic structure in the vicinity — which means it functions as a lightning attraction point regardless of whether it has a formal lightning protection system. The grounding system for remote site wireless infrastructure must be designed with this in mind: a ground rod driven to depth, preferably multiple rods in a ring configuration, bonded to the antenna mast, the enclosure, and all equipment chassis. 

For remote sites with cellular or LoRaWAN connectivity for IIoT monitoring, the complete outdoor wireless security program is covered in thesecure remote industrial sites guide. The key principle: at a remote site, a destroyed gateway means lost SCADA visibility for the duration of the repair cycle — days to weeks if the site requires an engineer visit. The cost of that outage, in lost monitoring and production visibility, typically exceeds the cost of a complete outdoor wireless protection installation by a large multiple. 

Every outdoor antenna cable needs a protector — without exception 

There is no outdoor antenna installation where lightning protection is optional. The question is not whether a surge event will eventually reach the antenna — it's whether the protector will be in the path when it does. An RF protector costs less than the cable to replace a destroyed gateway. The gateway costs less than the production downtime while it's being shipped and installed. The downtime costs less than the security exposure created when a remote monitoring connection goes dark. 

L-com'sRF lightning protectors are available in N-type, TNC, and SMA in a full frequency range matrix — DC to 3 GHz, DC to 6 GHz, and DC to 18 GHz — with and without DC pass, in IP67-rated outdoor configurations. Specify the protector before the antenna cable is pulled. Retrofitting surge protection after installation is possible but more expensive than including it in the original design — and the first lightning season without it is a risk that doesn't need to be accepted. 

Frequently Asked Questions 

Q1: What is an RF lightning protector? 

A: An RF lightning protector (also called a coaxial lightning arrester or RF surge protector) is an inline coaxial device installed in an antenna feed line to protect connected radio equipment from lightning-induced surge voltages. It contains a surge protection element — typically a gas discharge tube, a TVS diode, or a hybrid combination — that conducts surge energy to ground when the voltage on the coaxial conductor exceeds a threshold, while passing normal RF signals with minimal insertion loss. It is installed at the point where the outdoor antenna cable enters the building or equipment enclosure, and its ground lug must be bonded to a low-impedance earth ground to function. 

Q2: Do I need an RF lightning protector for indoor wireless equipment? 

A: For equipment with antennas mounted entirely indoors and coaxial cables that never leave the building, the surge exposure is low enough that an RF lightning protector is not typically required. The requirement becomes mandatory for any installation where the antenna is outdoors, the coaxial cable exits the building through a wall or roof penetration, or the antenna is mounted on an outdoor structure (rooftop, mast, utility pole). The practical rule: if the antenna or any part of the coaxial run is exposed to the outdoor environment, the protector is required at the indoor end of that run. 

Q3: What happens if an RF protector doesn't have a proper ground connection? 

A: Without a proper ground connection, the protector cannot discharge surge energy. When a surge event occurs and the protection element (GDT or TVS diode) begins to conduct, it needs a low-impedance path to earth to carry the energy away. If the ground lug is disconnected, bonded to a high-impedance path (long thin wire, floating metalwork, corroded connection), or connected to a ground that is itself rising in potential during the surge event, the energy has no effective exit.  

Q4: What is insertion loss, and why does it matter for RF protectors? 

A: Insertion loss is the reduction in signal power caused by installing the protector in the signal path, measured in decibels. A protector with 0.3 dB insertion loss passes 93% of the signal power; a protector with 1.0 dB insertion loss passes 79%.