Manufacturing
Protect one machine at a time without stopping production
Many factories plan to divide their production network into separate parts. But the work is often postponed because production must not stop. With XoT you can start protecting the machines today.
The situation
Why dividing the network gets postponed
A factory grows one machine at a time. Each machine is connected in the way its vendor required at the time. In the end, no one knows for certain which machines need to communicate with each other.
To divide the network, you need to know how the machines communicate. Finding that out takes measurements and time. So the work is often postponed.
A network without division
A compromised office computer can reach the production machines.
Unknown dependencies
No one knows for certain which traffic is needed. A new firewall rule can stop production.
Many vendors
Each machine vendor needs to reach their machine. More vendors mean more ways in.
Little time for stoppages
Changes to the network require production to stop. Stoppages are planned far in advance.
How XoT helps
A Lock lets you divide the network today
Hide and Protect gives a machine, or a group of machines, protection of its own. You do not need to change the network. You only need to decide who may communicate with those particular machines.
You can start with the most exposed machine and then continue at a pace that suits you.
Remote Access gives each machine vendor access to their own machine. So the vendor of the packaging line cannot reach the press.
Standards
IEC 62443 is built on zones
IEC 62443 is a series of standards for security in industrial control systems. It describes how to divide a plant into zones. There should be controlled connections between the zones.
A Lock can form a zone around a machine or a group of machines. The connection to the zone is protected with encryption and certificates. The Lock does not cover the whole standard. But it covers the part that would otherwise require rebuilding the network.
Start with the most exposed machine
For example, choose the machine that has the oldest operating system and that most vendors need to reach.