Whether or not you are attempting to cut back delays in your railways operations, improve the steadiness of the facility grid, enhance highway security by deploying Clever Transportation Programs (ITS), or pull knowledge from wind generators to create an optimized restore schedule, you might be dealing with the identical problem – connecting extra OT (operational know-how) belongings whereas making your important infrastructure extra cyber resilient.
Constructing fashionable and agile operations throughout a metropolis, a area, or a rustic shouldn’t be solely a networking problem, additionally it is a problem for cybersecurity. Throughout industries, laws equivalent to TSA Mandates, NERC-CIP (North America Reliability Company-Crucial Infrastructure Safety), or NIS2 (Community and Info Safety Directive 2) are requiring sturdy cybersecurity measures to be enforced. Within the enterprise, safety has all the time been an element within the design. In operational networks, the foundational parts to securing distributed infrastructures are sometimes not in place, and a single breach may be devastating.
As industrial operators are updating their WAN infrastructures to assist extra belongings and streamline operations, they’ve a serious alternative to undertake architectures that unify networking and safety and have been used efficiently in Enterprise Markets for many years. For over 20 years, Cisco has been growing rugged routers which can be purpose-built for these demanding operational use instances. Our third-generation portfolio of Catalyst Industrial Routers provides essentially the most superior and modular {hardware} and embed superior cybersecurity options and centralized administration to simplify constructing safe distributed operations at scale.
Shield distributed operations with superior built-in community safety capabilities
Making certain techniques are saved secure from cyber assaults as soon as linked to the WAN infrastructure is important. The TSA safety directives name for safety throughout the IT/OT boundary. NERC CIP requires a deny by default coverage throughout the digital safety perimeter (ESP). ISA/IEC 62443 requires a transparent demarcation between IT and OT domains. To assist operators comply and shield their distributed belongings with out having to put in devoted home equipment, Cisco Catalyst Industrial Routers include complete Subsequent-Era Firewall (NGFW) options and plenty of extra cybersecurity capabilities to dam fashionable threats, equivalent to:
- Stateful inspection with utility consciousness and management permits solely permitted visitors to cross the operational boundary.
- Community segmentation permits each important and non-critical belongings to share the identical bodily infrastructure however to be fully remoted from impacting one another in case of compromise.
- Built-in intrusion detection and prevention system (IDS/IPS) identifies, and blocks identified threats and malicious actions equivalent to vulnerability exploits.
- Malware safety and sandboxing stops malicious recordsdata from getting into the system.
- URL filtering ensures solely entry to identified trusted domains is permitted.
- Integration with safe service edge clouds equivalent to Cisco Safe Entry, which mixes safe internet gateway, DNS safety, cloud-delivered firewall, and extra permits shifting superior safety insurance policies off field and right into a centralized enforcement level.
Distributed enforcement, centralized administration
Because of the distributed nature of important infrastructure, there could also be 1000’s of microsites that have to be shielded from cyber-attacks. For safety to be efficient, you want a centralized technique to construct, handle, and deploy insurance policies, to keep away from gaps in defence and guarantee all websites and belongings are equally protected.
Cisco Catalyst SD-WAN Supervisor (previously vManage) simplifies community operations and gives full-stack multilayer safety capabilities on the OT edge. With out the necessity to deploy one more administration console, Cisco Catalyst SD-WAN Supervisor gives safety directors an intuitive person interface to manage all of the NGFW options embedded within the Cisco Industrial Routers deployed within the area.
Construct a contemporary and safe industrial WAN with Cisco
It’s the mix of superior networking capabilities and fashionable safety methods that retains our important infrastructure operational. We can’t sacrifice one to achieve the opposite. Cisco Industrial Routers, together with Cisco Catalyst SD-WAN Supervisor, provides purpose-built rugged {hardware} to resist harsh circumstances, superior community capabilities to make the community resilient, and built-in NGFW options to cease bad-actors from crossing operational boundaries.
As you’re modernizing your distributed operations, take this chance to construct a sturdy infrastructure that unifies connectivity and safety with our modular industrial routers that embed the very best of SD-WAN and superior cyber resilience, so you possibly can function extra reliably, safely, and productively.
To study extra, please learn the brand new options overview
Cisco Catalyst Industrial Routers with Cisco Subsequent-Era Firewall.
Share:
