Whether or not you are attempting to scale back delays in your railways operations, improve the soundness of the facility grid, enhance highway security by deploying Clever Transportation Techniques (ITS), or pull information from wind generators to create an optimized restore schedule, you’re going through the identical problem – connecting extra OT (operational know-how) belongings whereas making your vital infrastructure extra cyber resilient.
Constructing fashionable and agile operations throughout a metropolis, a area, or a rustic isn’t solely a networking problem, it’s also a problem for cybersecurity. Throughout industries, rules akin to TSA Mandates, NERC-CIP (North America Reliability Company-Vital Infrastructure Safety), or NIS2 (Community and Info Safety Directive 2) are requiring sturdy cybersecurity measures to be enforced. Within the enterprise, safety has all the time been an element within the design. In operational networks, the foundational components to securing distributed infrastructures are sometimes not in place, and a single breach could be devastating.
As industrial operators are updating their WAN infrastructures to help extra belongings and streamline operations, they’ve a serious alternative to undertake architectures that unify networking and safety and have been used efficiently in Enterprise Markets for many years. For over 20 years, Cisco has been creating rugged routers which are purpose-built for these demanding operational use instances. Our third-generation portfolio of Catalyst Industrial Routers provides essentially the most superior and modular {hardware} and embed superior cybersecurity options and centralized administration to simplify constructing safe distributed operations at scale.
Defend distributed operations with superior built-in community safety capabilities
Guaranteeing techniques are saved secure from cyber assaults as soon as related to the WAN infrastructure is vital. The TSA safety directives name for safety throughout the IT/OT boundary. NERC CIP requires a deny by default coverage throughout the digital safety perimeter (ESP). ISA/IEC 62443 requires a transparent demarcation between IT and OT domains. To assist operators comply and defend their distributed belongings with out having to put in devoted home equipment, Cisco Catalyst Industrial Routers include complete Subsequent-Technology Firewall (NGFW) options and lots of extra cybersecurity capabilities to dam fashionable threats, akin to:
- Stateful inspection with utility consciousness and management permits solely permitted site visitors to cross the operational boundary.
- Community segmentation permits each vital and non-critical belongings to share the identical bodily infrastructure however to be fully remoted from impacting one another in case of compromise.
- Built-in intrusion detection and prevention system (IDS/IPS) identifies, and blocks identified threats and malicious actions akin to vulnerability exploits.
- Malware safety and sandboxing stops malicious recordsdata from getting into the system.
- URL filtering ensures solely entry to identified trusted domains is permitted.
- Integration with safe service edge clouds akin to Cisco Safe Entry, which mixes safe internet gateway, DNS safety, cloud-delivered firewall, and extra allows shifting superior safety insurance policies off field and right into a centralized enforcement level.
Distributed enforcement, centralized administration
Because of the distributed nature of vital infrastructure, there could also be hundreds of microsites that should be protected against cyber-attacks. For safety to be efficient, you want a centralized method to construct, handle, and deploy insurance policies, to keep away from gaps in defence and guarantee all websites and belongings are equally protected.
Cisco Catalyst SD-WAN Supervisor (previously vManage) simplifies community operations and gives full-stack multilayer safety capabilities on the OT edge. With out the necessity to deploy yet one more administration console, Cisco Catalyst SD-WAN Supervisor gives safety directors an intuitive consumer interface to manage all of the NGFW options embedded within the Cisco Industrial Routers deployed within the discipline.
Construct a contemporary and safe industrial WAN with Cisco
It’s the mixture of superior networking capabilities and fashionable safety strategies that retains our vital infrastructure operational. We can not sacrifice one to achieve the opposite. Cisco Industrial Routers, together with Cisco Catalyst SD-WAN Supervisor, provides purpose-built rugged {hardware} to resist harsh situations, superior community capabilities to make the community resilient, and built-in NGFW options to cease bad-actors from crossing operational boundaries.
As you’re modernizing your distributed operations, take this chance to construct a strong infrastructure that unifies connectivity and safety with our modular industrial routers that embed the most effective of SD-WAN and superior cyber resilience, so you may function extra reliably, safely, and productively.
To study extra, please learn the brand new options overview:
Cisco Catalyst Industrial Routers with Cisco Subsequent-Technology Firewall.
Share:
