3 ms·
Generally the controls are firewalled from the administrative/business systems, not air-gapped. Production data (like gallons per minute of flow through the pi
by rckoepke 5y ago
Generally the controls are firewalled from the administrative/business systems, not air-gapped.
Production data (like gallons per minute of flow through the pipeline) must be sent from the controls to the business analytics software. That's generally done through a firewall over TCP/IP.
- DrPhish 5y agoOften that kind of reporting data is delivered back via a “data diode” unidirectional network. That said, there is usually just a dmz between biz and prod to enable remote support of the controls system (ala the Purdue model), and not any real air gap.
- mysterydip 5y agoI've seen systems where data is sent via UDP and the physical connection was transmit-only (for example, only the transmit fiber plugged in to the port) to avoid potential firewall exploitation.
- daniellarusso 5y ago…and the controls still have internet access, but it is NAT’ed, and it still has a fresh copy of Internet Explorer 9. I have only witnessed this once, at a wastewater treatment plant, so very anecdotal.