
Technologies
OT Security
See, Segment and Protect the Systems That Run Your Operations
OT Security
Protect the Systems That Keep Your Operations Running
Operational technology (OT) runs the physical world: PLCs, SCADA, building management systems, pumps, conveyors and cranes. Much of it was installed long before today's threats, and it is now connected to corporate networks, cloud platforms and remote vendors. The Australian Signals Directorate describes critical infrastructure and OT as attractive targets for state-sponsored actors, criminals and hacktivists.
IPTel helps Australian utilities, ports, mines, manufacturers, hospitals and building owners see every OT asset, separate OT from IT, control remote access and watch for threats, using Cisco Cyber Vision, Cisco industrial networking and Cisco security, without disrupting production.
- Cisco Cyber Vision
- Zones and Conduits (IEC 62443)
- Secure Remote Access
- Aligned to ASD Guidance
What We Deploy
OT Security Building Blocks
Asset Visibility With Cisco Cyber Vision
Cyber Vision sensors run on Cisco industrial switches and routers, passively identifying PLCs, HMIs and controllers, mapping who talks to whom and flagging known vulnerabilities.
Segmentation: Zones and Conduits
Separate OT from IT and split the plant into zones with an industrial DMZ, Cisco Secure Firewall and TrustSec policy, so one compromised device can't reach everything.
Secure Remote Access
Replace always-on vendor VPNs and shared passwords with controlled, logged, time-limited access to specific assets, using Cisco Secure Equipment Access or Secure Firewall with ISE.
Identity and Access Control
Cisco ISE uses Cyber Vision asset data, shared over pxGrid, to profile OT devices and apply the right access policy automatically.
Learn more →Threat Detection and Monitoring
Cyber Vision alerts on unusual traffic and control-system changes, such as PLC program downloads, and can feed Cisco XDR or Splunk so threats are seen and acted on.
Rugged Industrial Networking
Cisco Catalyst IE switches and IR routers built for heat, dust and vibration, with resilient ring designs and secure configurations from day one.
Learn more →OT Security Assessment
A structured review of your OT assets, connectivity, remote access, backups and incident response against ASD guidance, with a prioritised roadmap.
Backup and Isolation Planning
Configuration backups for switches, routers and firewalls, plus a tested plan to isolate OT from IT quickly if the corporate network is compromised.
Learn more →How IPTel Helps
From Visibility to Managed Protection
Assess
Passive asset discovery with Cisco Cyber Vision, a connectivity and remote access review, and a prioritised roadmap aligned to ASD guidance.
Design and Deploy
Zones, industrial DMZ, firewalls, secure remote access and Cyber Vision sensors, staged in agreed change windows with your operations and safety teams.
Monitor and Manage
Ongoing monitoring, alert triage, and patch and vulnerability planning through IPTel managed services, so your team isn't doing it alone.
OT Security: FAQs
What Is OT Security?
Operational technology security protects the systems that monitor and control physical processes, such as PLCs, SCADA, building management and industrial control systems. Unlike IT, availability and safety come first, so controls have to be designed around production, not just data.
What Is Cisco Cyber Vision?
Cisco Cyber Vision is Cisco's OT visibility and security platform. Sensors running on Cisco industrial switches and routers inspect industrial protocols to build an asset inventory, map communications, identify vulnerabilities and detect unusual activity, all managed from a central Cyber Vision Center.
Do We Need to Replace Our Plant Network to Use It?
Not necessarily. Cyber Vision sensors run on current Cisco Catalyst IE switches and IR routers and on Catalyst 9300 and 9400 switches, and a software sensor on a server or virtual machine can monitor mirrored traffic where the existing switches aren't Cisco. We'll check what you have and recommend the least disruptive option.
How Does This Relate to ASD Guidance and the SOCI Act?
The Australian Signals Directorate has co-authored guidance on OT cyber security, including the Principles of Operational Technology Cyber Security and secure connectivity principles for OT. Critical infrastructure owners may also have obligations under the Security of Critical Infrastructure (SOCI) Act. Our designs follow this guidance; we don't give legal advice on your obligations.
Can You Work Around Production?
Yes. Passive visibility can start with no change to the control network, and changes such as segmentation are planned with your operations and safety teams and made in agreed maintenance windows.
Need Rugged Network Hardware?
Industrial switches, outdoor access points and Cisco URWB radios, supplied and specified for your site.
From the Blog
OT and Industrial Security Insights From the IPTel Blog
Guides, explainers and case studies from IPTel's engineers.
IPTel BlogIndustrial IoTRugged networking for industrial sites and connected machines.
IPTel BlogManaged Services for UtilitiesKeeping water, power and gas networks running and secure.
IPTel BlogMicro-Segmentation ExplainedHow Cisco segmentation limits what a compromised device can reach.
IPTel BlogZero Trust ArchitectureThe principles behind never trust, always verify.
IPTel BlogSplunk in ManufacturingEnd-to-end visibility of operations on the production line.
IPTel BlogASD Essentials at the Network EdgeWhat ASD Essentials means for your network, and where to start.
Talk to an IPTel OT Security Engineer
Not sure what is connected to your plant network? Start with the free ASD Essentials Network Readiness Assessment, or ask us about an OT visibility assessment with Cisco Cyber Vision.
.png?width=200&height=59&name=IPTellogo-byline-2020-dark-v2-pnd-optimised-500%20(1).png)