https://live.paloaltonetworks.com/t5/next-generation-firewall/enhancing-ot-network-security-with-a-2-5-dmz/m-p/615924#M4932 <P>In our OT network, we're considering adding a Level 2.5 DMZ to bolster security. This would serve as an additional layer of protection between the control systems (Level 2) and the enterprise network (Level 4).</P><P><STRONG>Specific Design:</STRONG></P><UL><LI><STRONG>Level 2.5 DMZ:</STRONG> Host third-party servers and Engineering Workstations (EWS).</LI><LI><STRONG>Level 3.5 DMZ:</STRONG> Maintain existing role as a DMZ for the control center and processing systems.</LI></UL><P><STRONG>Key Questions:</STRONG></P><OL><LI><P><STRONG>Benefits and Challenges:</STRONG></P><UL><LI>What are the potential advantages and drawbacks of this design?</LI><LI>How does it impact network complexity, security, and operational efficiency?</LI></UL></LI><LI><P><STRONG>Best Practices for DMZ and Remote Access:</STRONG></P><UL><LI>What are the recommended security practices for DMZs in OT environments?</LI><LI>How can we securely enable remote access for third-party vendors to service and configure their packages within the DMZ?</LI><LI>What are the best practices for segmenting traffic within the DMZ to further isolate critical systems?</LI></UL></LI></OL><P>We're eager to hear from OT security experts to gain insights into the best practices and potential pitfalls of this approach.<BR />#operationtechnology #DMZ #purdue</P> Fri, 01 Nov 2024 07:39:57 GMT Norkk87 2024-11-01T07:39:57Z https://live.paloaltonetworks.com/t5/next-generation-firewall/enhancing-ot-network-security-with-a-2-5-dmz/m-p/615924#M4932 <P>In our OT network, we're considering adding a Level 2.5 DMZ to bolster security. This would serve as an additional layer of protection between the control systems (Level 2) and the enterprise network (Level 4).</P><P><STRONG>Specific Design:</STRONG></P><UL><LI><STRONG>Level 2.5 DMZ:</STRONG> Host third-party servers and Engineering Workstations (EWS).</LI><LI><STRONG>Level 3.5 DMZ:</STRONG> Maintain existing role as a DMZ for the control center and processing systems.</LI></UL><P><STRONG>Key Questions:</STRONG></P><OL><LI><P><STRONG>Benefits and Challenges:</STRONG></P><UL><LI>What are the potential advantages and drawbacks of this design?</LI><LI>How does it impact network complexity, security, and operational efficiency?</LI></UL></LI><LI><P><STRONG>Best Practices for DMZ and Remote Access:</STRONG></P><UL><LI>What are the recommended security practices for DMZs in OT environments?</LI><LI>How can we securely enable remote access for third-party vendors to service and configure their packages within the DMZ?</LI><LI>What are the best practices for segmenting traffic within the DMZ to further isolate critical systems?</LI></UL></LI></OL><P>We're eager to hear from OT security experts to gain insights into the best practices and potential pitfalls of this approach.<BR />#operationtechnology #DMZ #purdue</P> Fri, 01 Nov 2024 07:39:57 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/enhancing-ot-network-security-with-a-2-5-dmz/m-p/615924#M4932 Norkk87 2024-11-01T07:39:57Z