OT/IT Network Segmentation at an Automotive Supplier

At an automotive supplier, the production lines and the office network ran on the same flat network. After a phishing incident, a production line stopped briefly and management asked for the OT network to be isolated.

Solution

Four-level segmentation based on the Purdue model was applied at each plant. An industrial firewall and a one-way data gateway (data diode) were placed between the production and corporate networks. PLC and SCADA traffic is passively monitored for anomaly detection.

Results

• External access to the production network only via an approved VPN and jump host
• Automatic inventory of 412 OT devices
• OEE and energy data flow securely to cloud reporting
• Line downtime during installation: 0 hours (carried out between shifts)