Whether or not you are attempting to scale back delays in your railways operations, improve the steadiness of the facility grid, enhance street security by deploying Clever Transportation Methods (ITS), or pull knowledge from wind generators to create an optimized restore schedule, you might be dealing with the identical problem – connecting extra OT (operational expertise) belongings whereas making your crucial infrastructure extra cyber resilient.
Constructing fashionable and agile operations throughout a metropolis, a area, or a rustic shouldn’t be solely a networking problem, it’s also a problem for cybersecurity. Throughout industries, laws akin to TSA Mandates, NERC-CIP (North America Reliability Company-Crucial Infrastructure Safety), or NIS2 (Community and Info Safety Directive 2) are requiring robust cybersecurity measures to be enforced. Within the enterprise, safety has at all times been an element within the design. In operational networks, the foundational components to securing distributed infrastructures are sometimes not in place, and a single breach will be devastating.
As industrial operators are updating their WAN infrastructures to assist extra belongings and streamline operations, they’ve a significant alternative to undertake architectures that unify networking and safety and have been used efficiently in Enterprise Markets for many years. For over 20 years, Cisco has been creating rugged routers which are purpose-built for these demanding operational use circumstances. Our third-generation portfolio of Catalyst Industrial Routers presents probably the most superior and modular {hardware} and embed superior cybersecurity options and centralized administration to simplify constructing safe distributed operations at scale.
Defend distributed operations with superior built-in community safety capabilities
Making certain programs are stored secure from cyber assaults as soon as linked to the WAN infrastructure is crucial. The TSA safety directives name for safety throughout the IT/OT boundary. NERC CIP requires a deny by default coverage throughout the digital safety perimeter (ESP). ISA/IEC 62443 requires a transparent demarcation between IT and OT domains. To assist operators comply and defend their distributed belongings with out having to put in devoted home equipment, Cisco Catalyst Industrial Routers include complete Subsequent-Technology Firewall (NGFW) options and plenty of extra cybersecurity capabilities to dam fashionable threats, akin to:
- Stateful inspection with utility consciousness and management permits solely permitted visitors to cross the operational boundary.
- Community segmentation permits each crucial and non-critical belongings to share the identical bodily infrastructure however to be utterly remoted from impacting one another in case of compromise.
- Built-in intrusion detection and prevention system (IDS/IPS) identifies, and blocks identified threats and malicious actions akin to vulnerability exploits.
- Malware safety and sandboxing stops malicious information from coming into the system.
- URL filtering ensures solely entry to identified trusted domains is permitted.
- Integration with safe service edge clouds akin to Cisco Safe Entry, which mixes safe internet gateway, DNS safety, cloud-delivered firewall, and extra permits shifting superior safety insurance policies off field and right into a centralized enforcement level.
Distributed enforcement, centralized administration
Because of the distributed nature of crucial infrastructure, there could also be 1000’s of microsites that should be protected against cyber-attacks. For safety to be efficient, you want a centralized option to construct, handle, and deploy insurance policies, to keep away from gaps in defence and guarantee all websites and belongings are equally protected.
Cisco Catalyst SD-WAN Supervisor (previously vManage) simplifies community operations and offers full-stack multilayer safety capabilities on the OT edge. With out the necessity to deploy one more administration console, Cisco Catalyst SD-WAN Supervisor offers safety directors an intuitive person interface to regulate all of the NGFW options embedded within the Cisco Industrial Routers deployed within the discipline.
Construct a contemporary and safe industrial WAN with Cisco
It’s the mix of superior networking capabilities and fashionable safety methods that retains our crucial infrastructure operational. We can’t sacrifice one to achieve the opposite. Cisco Industrial Routers, together with Cisco Catalyst SD-WAN Supervisor, presents purpose-built rugged {hardware} to face up to harsh situations, superior community capabilities to make the community resilient, and built-in NGFW options to cease bad-actors from crossing operational boundaries.
As you’re modernizing your distributed operations, take this chance to construct a sturdy infrastructure that unifies connectivity and safety with our modular industrial routers that embed the very best of SD-WAN and superior cyber resilience, so you may function extra reliably, safely, and productively.
To be taught extra, please learn the brand new options overview:
Cisco Catalyst Industrial Routers with Cisco Subsequent-Technology Firewall.
Share:
