Topic

network segmentation

All articles on network segmentation.

Flat industrial OT network without segmentation, with heterogeneous devices and undocumented connections

Cybersecurity

Flat OT Networks: Why Most Factories Don't Know What's on Their Network

In Italian manufacturing SMEs the OT network is often a flat network with no up-to-date inventory. Unknown devices, undocumented expansions, knowledge held only in the technician's head: any industrial security project starts with understanding what's on the network.

6 min read

Architectural diagram of an Industrial DMZ with a dual-homed firewall, historian replica and jump server between the IT network and the OT network

Cybersecurity

Industrial DMZ: How to Design the Boundary Zone Between IT and OT Networks

The industrial DMZ is the architectural layer that separates IT and OT and manages data flows between the two worlds. Designing it well is the difference between a secure connection and a direct path to the heart of the production network.

5 min read

OT network diagram with a passive sensor on a TAP and an out-of-band monitoring architecture

Cybersecurity OT

NDR for OT Environments: Why Passive Monitoring Is the Only Safe Architecture

Placing an inline monitoring system between SCADA and PLC introduces latency that industrial systems cannot tolerate. The right answer is passive out-of-band monitoring, with isolation and network changes as the response tool.

5 min read

OT network segmentation with zones, conduits and an IT-OT DMZ

Cybersecurity

OT Network Segmentation: from the Purdue Model to IEC 62443 Zones in Production

Network segmentation is the OT security control with the best cost/effectiveness ratio. From the Purdue model to IEC 62443 zones, how to implement it in production without stopping the plant.

4 min read

SCADA historian server in an industrial server room with connections between the corporate IT network and the OT process network

Cybersecurity

The SCADA Historian as a Lateral Attack Vector from IT to OT

Industrial process historians collect data from PLCs and expose it to business systems. This makes them a natural bridge between IT and OT, and a prime vector for lateral movement.

6 min read

Technical diagram of hardware TAP and SPAN port on an industrial switch in an OT Purdue network

Cybersecurity

TAP vs SPAN Port in OT Environments: How to Choose Where to Place Sensors

Passive OT traffic monitoring depends on where and how traffic is captured. Hardware TAPs and SPAN ports have very different characteristics in industrial environments: a wrong choice means incomplete data or operational risks.

6 min read