domains / families / security / implementing-ics-firewall-with-tofino

implementing-ics-firewall-with-tofino

separate

'Deploys and configures Tofino industrial firewalls (Belden/Hirschmann)

When to use

• When deploying zone-level firewall protection directly in front of critical PLCs or RTUs
• When requiring deep packet inspection of industrial protocols (Modbus, EtherNet/IP, OPC, S7comm)
• When implementing IEC 62443 zone and conduit boundaries with protocol-aware enforcement
• When protecting legacy PLCs that cannot be patched and need compensating controls
• When segmenting control network zones without disrupting existing industrial communications

When not to use

• enterprise IT firewall deployment
• perimeter firewall between IT and OT
• environments using only IP-based protocols without OT-specific DPI needs

Skill page

Source