OT cyber security for industrial production

Minimise the risk of downtime and ensure a rapid resumption of production

OT cyber security protects production networks, PLCs, HMIs, industrial computers and other control systems. An effective solution combines Restriction of unauthorised communication with regular backups of programmes and configurations.

IT and OT Networks Department Checking permitted communication Automatic PLC backups Faster resumption of production

Two key areas of protection for manufacturing technologies

Prevention Network segmentation and industrial firewalls

Isolate machines and production lines from the corporate network and only allow devices, services and data flows that are genuinely necessary for production.

Show firewalls, bridges and NAT
Restore Automatic backup of PLCs and machines

Save control system programmes, configurations and documentation regularly so that you have the necessary materials ready to get production back up and running more quickly.

View PLC Auto Backup
Not sure where to start with production security?

We will examine network architecture, the integration of IT and OT, remote access, critical equipment and current backup methods.

Discuss production security

Secure remote access via Ewon

See examples of network separation using Ewon routers and W&T firewalls. A brief overview of Talk2M deployment is available for network administrators.

In detail: how to get started with OT cyber security

Start with an overview of devices, communication and recovery options

Securing production involves more than simply installing a single firewall. First, it is necessary to understand the devices in use, network connections, remote access points, permitted communication and the availability of up-to-date backups of control systems.

1 Map devices and network connections

Connect PLCs, HMIs, robots, industrial computers, switches and the links between production, IT networks and the internet.

2 Divide the network into smaller segments

Separate individual machines, production lines and process units according to their function, significance and level of risk.

3 Limit communication and remote access

Enable only the necessary protocols, services and connections, and remove any unnecessarily open communication channels.

4 Automate backups and verify restores

Keep both current and previous versions of programmes and regularly check that they can actually be restored.

Why is a standard office firewall not enough?

Industrial networks use specific protocols, devices and operational requirements. The chosen solution must correspond to the production topology, device availability and the required method of servicing.

Why is backup an integral part of cyber security?

Even preventative measures cannot eliminate all risks. An up-to-date and verified backup reduces recovery time following a failure, an erroneous programme change or a security incident.

Frequently asked questions on cyber security

What is the difference between IT and OT cyber security?

IT security primarily protects information systems and business data. OT security focuses on the equipment and communications that directly control physical production.

Do we need to change the PLC programmes during segmentation?

Not always. It depends on the current topology, IP addresses, protocols used and the method of communication between devices and higher-level systems.

What do you need for your first consultation?

All that is required is a basic network topology, a list of critical devices, information on remote access, and a description of the current method of backing up PLCs and machines.

Since 2006, FOXON has been a trusted partner in industrial automation. We supply spare parts, industrial products and solutions for data collection, industrial network diagnostics and the digitalization of manufacturing plants. We also provide professional training, technical support and complete project implementation – from initial design through commissioning.