Practical standards for IT/OT separation and commonly overlooked points in VLAN and ACL design.
Completely separating the OT network from the IT network is ideal, but it is realistically difficult due to remote support and data collection requirements. The practical standard is "as close to one-way as possible."
| Level | Configuration | Difficulty |
|---|---|---|
| Physical separation | Separate switch and cable | High (maintenance cost) |
| Logical separation (VLAN) | VLAN + ACL | Middle |
| data diode | unidirectional transmission equipment | High (cost) |
The most common hole is not technology but operations. A single laptop in the field can nullify the separation design.
If you tell us your site conditions, we will review a configuration that can be applied.
Technical Inquiry →