OT asset discovery
Which machines, PLCs, HMIs, industrial PCs and other devices are present?
Cisco Cyber Vision
Do you know what is really happening on your industrial network?
Machines, PLCs, sensors, cameras, industrial PCs and remote maintenance systems communicate with each other continuously.
But do you know exactly which devices are connected, how they communicate and where the greatest risks sit?
Cisco Cyber Vision gives IT and OT teams deep insight into their industrial network.
It automatically maps assets and communications, detects vulnerabilities and anomalous or malicious behaviour, and helps you segment the network with purpose.
What you cannot see, you cannot protect.
A working network is not automatically a secure network
A production network is constantly changing. New machines are added, PLCs remain in service for years, external parties gain access and firmware ages.
Everything keeps running, but do you still have visibility into what is really happening?
- Which OT assets are connected?
- Which systems communicate with each other?
- Where are the vulnerabilities?
- Would you notice anomalous behaviour immediately?
- Could an incident spread further?
Cisco Cyber Vision makes that invisible layer visible.
From network traffic to usable OT insight
Cisco Cyber Vision inventories industrial assets and maps their properties, relationships and communication patterns.
The system combines protocol analysis, vulnerability detection, behavioural analysis and intrusion detection, among other capabilities.
For threat detection, Cisco uses Snort IDS and threat intelligence from Cisco Talos, among other sources.
What do you see with Cyber Vision?
Communication patterns
Which systems communicate with each other and via which industrial protocols?
Vulnerabilities and risks
Which assets contain known vulnerabilities and which deserve priority attention?
Anomalous behaviour
Is a device suddenly departing from its normal communications?
Cyber threats
Is there malicious or suspicious network traffic?
Network segmentation
Which assets logically belong together and which communications should be limited?
Cisco also knows highly specific OT information, such as manufacturer, hardware and firmware versions, industrial protocols and asset relationships.
How does Cisco Cyber Vision work?
Cyber Vision analyses industrial network traffic.
On supported Cisco industrial switches and routers, the sensor capability sits directly in the network infrastructure. That gives you deep OT insight without placing separate security appliances everywhere.
Cyber Vision combines industrial protocol analysis with information about manufacturer, hardware, firmware, vulnerabilities and asset relationships. For threat detection, Cisco uses Snort IDS and Cisco Talos threat intelligence, among other sources.
Why OT visibility keeps becoming more important
Traditional IT security does not always look deeply enough into an industrial environment. A PLC is not an ordinary laptop. A production line also must not simply stop because a security measure is applied incorrectly.
OT security therefore requires insight into both network technology and industrial processes. Cyber Vision analyses industrial communication and gives IT security the OT context needed to make better decisions.
From seeing to protecting
1. Discover
2. Understand
3. Assess
4. Protect
Why Cisco Cyber Vision with 4net?
Cyber Vision gives you a great deal of information. The real value appears when you know what to do with that information.
That is why 4net looks beyond the technology. We map your existing OT network and critical processes and review together where more visibility, segmentation or protection is needed.
One partner for network and OT security
- Experience with industrial IT and OT networks
- Strong knowledge of Cisco network infrastructure
- Guidance from analysis and design through to implementation
- Advice on segmentation and further protection
- Direct technical support and follow-up
Frequently asked questions about Cisco Cyber Vision
Cisco Cyber Vision is an OT security solution that provides insight into your industrial network. It maps machines, PLCs, HMIs and industrial PCs, among other assets, and analyses how these systems communicate with each other.
They answer a different question. NAC determines who or what gains access to the network. Cyber Vision looks at what is happening inside the industrial network.
It detects assets, communications, vulnerabilities and anomalous behaviour. The solutions therefore complement each other.
It detects assets, communications, vulnerabilities and anomalous behaviour. The solutions therefore complement each other.
No. Cyber Vision also works in environments with equipment from different manufacturers.
On supported Cisco industrial switches and routers, the sensor functionality does sit directly in the network infrastructure. That is an important advantage of the Cisco solution.
On supported Cisco industrial switches and routers, the sensor functionality does sit directly in the network infrastructure. That is an important advantage of the Cisco solution.
Cyber Vision analyses industrial network traffic with attention to OT environments, where continuity is essential.
This gives you insight into your assets and communications without unnecessarily disrupting your production process.
This gives you insight into your assets and communications without unnecessarily disrupting your production process.
Yes. Cyber Vision collects information about industrial assets, such as manufacturer, type and firmware, and links this to known vulnerabilities.
This way you see not only that a device is present, but also where potential risks sit.
This way you see not only that a device is present, but also where potential risks sit.
Yes. Cyber Vision shows which systems actually communicate with each other.
That information helps determine logical OT zones and limit unwanted communication between, for example, machines, production lines or network segments.
That information helps determine logical OT zones and limit unwanted communication between, for example, machines, production lines or network segments.
You do not need to tackle your entire OT environment at once. 4NET first maps the existing infrastructure and objectives together with you.
From there we determine where Cyber Vision offers the most value and how best to integrate the solution.
From there we determine where Cyber Vision offers the most value and how best to integrate the solution.