Whether or not you are attempting to cut back delays in your railways operations, improve the soundness of the facility grid, enhance street security by deploying Clever Transportation Programs (ITS), or pull information from wind generators to create an optimized restore schedule, you might be dealing with the identical problem – connecting extra OT (operational know-how) belongings whereas making your important infrastructure extra cyber resilient.
Constructing fashionable and agile operations throughout a metropolis, a area, or a rustic will not be solely a networking problem, additionally it is a problem for cybersecurity. Throughout industries, laws reminiscent of TSA Mandates, NERC-CIP (North America Reliability Company-Essential Infrastructure Safety), or NIS2 (Community and Data Safety Directive 2) are requiring robust cybersecurity measures to be enforced. Within the enterprise, safety has all the time been an element within the design. In operational networks, the foundational parts to securing distributed infrastructures are sometimes not in place, and a single breach could be devastating.
As industrial operators are updating their WAN infrastructures to assist extra belongings and streamline operations, they’ve a serious alternative to undertake architectures that unify networking and safety and have been used efficiently in Enterprise Markets for many years. For over 20 years, Cisco has been growing rugged routers which might be purpose-built for these demanding operational use instances. Our third-generation portfolio of Catalyst Industrial Routers affords essentially the most superior and modular {hardware} and embed superior cybersecurity options and centralized administration to simplify constructing safe distributed operations at scale.
Shield distributed operations with superior built-in community safety capabilities
Guaranteeing methods are saved secure from cyber assaults as soon as related to the WAN infrastructure is important. The TSA safety directives name for safety throughout the IT/OT boundary. NERC CIP requires a deny by default coverage throughout the digital safety perimeter (ESP). ISA/IEC 62443 requires a transparent demarcation between IT and OT domains. To assist operators comply and shield their distributed belongings with out having to put in devoted home equipment, Cisco Catalyst Industrial Routers include complete Subsequent-Technology Firewall (NGFW) options and plenty of extra cybersecurity capabilities to dam fashionable threats, reminiscent of:
- Stateful inspection with utility consciousness and management permits solely permitted visitors to cross the operational boundary.
- Community segmentation permits each important and non-critical belongings to share the identical bodily infrastructure however to be utterly remoted from impacting one another in case of compromise.
- Built-in intrusion detection and prevention system (IDS/IPS) identifies, and blocks identified threats and malicious actions reminiscent of vulnerability exploits.
- Malware safety and sandboxing stops malicious information from getting into the system.
- URL filtering ensures solely entry to identified trusted domains is permitted.
- Integration with safe service edge clouds reminiscent of Cisco Safe Entry, which mixes safe net gateway, DNS safety, cloud-delivered firewall, and extra allows shifting superior safety insurance policies off field and right into a centralized enforcement level.
Distributed enforcement, centralized administration
As a result of distributed nature of important infrastructure, there could also be hundreds of microsites that have to be shielded from cyber-attacks. For safety to be efficient, you want a centralized approach to construct, handle, and deploy insurance policies, to keep away from gaps in defence and guarantee all websites and belongings are equally protected.
Cisco Catalyst SD-WAN Supervisor (previously vManage) simplifies community operations and supplies full-stack multilayer safety capabilities on the OT edge. With out the necessity to deploy yet one more administration console, Cisco Catalyst SD-WAN Supervisor supplies safety directors an intuitive person interface to manage all of the NGFW options embedded within the Cisco Industrial Routers deployed within the subject.
Construct a contemporary and safe industrial WAN with Cisco
It’s the mix of superior networking capabilities and fashionable safety methods that retains our important infrastructure operational. We can’t sacrifice one to realize the opposite. Cisco Industrial Routers, together with Cisco Catalyst SD-WAN Supervisor, affords purpose-built rugged {hardware} to resist harsh situations, superior community capabilities to make the community resilient, and built-in NGFW options to cease bad-actors from crossing operational boundaries.
As you’re modernizing your distributed operations, take this chance to construct a sturdy infrastructure that unifies connectivity and safety with our modular industrial routers that embed one of the best of SD-WAN and superior cyber resilience, so you’ll be able to function extra reliably, safely, and productively.
To be taught extra, please learn the brand new options overview
Cisco Catalyst Industrial Routers with Cisco Subsequent-Technology Firewall.
Share: