Whether or not you are attempting to scale back delays in your railways operations, improve the steadiness of the ability grid, enhance street security by deploying Clever Transportation Techniques (ITS), or pull knowledge from wind generators to create an optimized restore schedule, you might be dealing with the identical problem – connecting extra OT (operational know-how) belongings whereas making your important infrastructure extra cyber resilient.
Constructing trendy and agile operations throughout a metropolis, a area, or a rustic is just not solely a networking problem, additionally it is a problem for cybersecurity. Throughout industries, rules reminiscent of TSA Mandates, NERC-CIP (North America Reliability Company-Vital Infrastructure Safety), or NIS2 (Community and Data Safety Directive 2) are requiring sturdy cybersecurity measures to be enforced. Within the enterprise, safety has all the time been an element within the design. In operational networks, the foundational components to securing distributed infrastructures are sometimes not in place, and a single breach will be devastating.
As industrial operators are updating their WAN infrastructures to help extra belongings and streamline operations, they’ve a serious alternative to undertake architectures that unify networking and safety and have been used efficiently in Enterprise Markets for many years. For over 20 years, Cisco has been creating rugged routers which are purpose-built for these demanding operational use instances. Our third-generation portfolio of Catalyst Industrial Routers gives essentially the most superior and modular {hardware} and embed superior cybersecurity options and centralized administration to simplify constructing safe distributed operations at scale.
Shield distributed operations with superior built-in community safety capabilities
Guaranteeing methods are stored protected from cyber assaults as soon as related to the WAN infrastructure is important. The TSA safety directives name for safety throughout the IT/OT boundary. NERC CIP requires a deny by default coverage throughout the digital safety perimeter (ESP). ISA/IEC 62443 requires a transparent demarcation between IT and OT domains. To assist operators comply and shield their distributed belongings with out having to put in devoted home equipment, Cisco Catalyst Industrial Routers include complete Subsequent-Technology Firewall (NGFW) options and plenty of extra cybersecurity capabilities to dam trendy threats, reminiscent of:
- Stateful inspection with software consciousness and management permits solely permitted visitors to cross the operational boundary.
- Community segmentation permits each important and non-critical belongings to share the identical bodily infrastructure however to be utterly remoted from impacting one another in case of compromise.
- Built-in intrusion detection and prevention system (IDS/IPS) identifies, and blocks identified threats and malicious actions reminiscent of vulnerability exploits.
- Malware safety and sandboxing stops malicious recordsdata from getting into the system.
- URL filtering ensures solely entry to identified trusted domains is permitted.
- Integration with safe service edge clouds reminiscent of Cisco Safe Entry, which mixes safe net gateway, DNS safety, cloud-delivered firewall, and extra permits shifting superior safety insurance policies off field and right into a centralized enforcement level.
Distributed enforcement, centralized administration
As a result of distributed nature of important infrastructure, there could also be hundreds of microsites that have to be shielded from cyber-attacks. For safety to be efficient, you want a centralized approach to construct, handle, and deploy insurance policies, to keep away from gaps in defence and guarantee all websites and belongings are equally protected.
Cisco Catalyst SD-WAN Supervisor (previously vManage) simplifies community operations and supplies full-stack multilayer safety capabilities on the OT edge. With out the necessity to deploy one more administration console, Cisco Catalyst SD-WAN Supervisor supplies safety directors an intuitive person interface to regulate all of the NGFW options embedded within the Cisco Industrial Routers deployed within the discipline.
Construct a contemporary and safe industrial WAN with Cisco
It’s the mix of superior networking capabilities and trendy safety strategies that retains our important infrastructure operational. We can not sacrifice one to realize the opposite. Cisco Industrial Routers, together with Cisco Catalyst SD-WAN Supervisor, gives purpose-built rugged {hardware} to resist harsh situations, superior community capabilities to make the community resilient, and built-in NGFW options to cease bad-actors from crossing operational boundaries.
As you’re modernizing your distributed operations, take this chance to construct a sturdy infrastructure that unifies connectivity and safety with our modular industrial routers that embed the very best of SD-WAN and superior cyber resilience, so you’ll be able to function extra reliably, safely, and productively.
To study extra, please learn the brand new options overview
Cisco Catalyst Industrial Routers with Cisco Subsequent-Technology Firewall.
Share: