Size: 12.3 Mb Download

As access methods to the Industrial network expand, the complexity of managing network access security and controlling unknown risks continues to increase. Industrial Automation and Control System (IACS) networks must be secured by configuration and architecture since unknown contractor computers present challenges to the security of plant-wide operations.

The Deploying Identity Services within a Converged Plantwide Ethernet Architecture Design and Implementation Guide outlines key requirements and design considerations to help in the successful deployment of the Cisco Identity Services Engine (ISE) within IACS plant-wide architectures.

CPwE is the underlying architecture that provides standard network services for control and information disciplines, devices and equipment found in modern IACS applications. Cisco ISE is used in conjunction with the CPwE architecture.

The CPwE architecture provides design and implementation guidance to achieve the real-time communication, reliability, scalability, security and resiliency requirements of the IACS. Cisco ISE builds on top of the defined best practices and network architecture with a centrally managed architectural model where the IT department maintains the management of the Cisco ISE platform that operates in the Industrial Zone.

Learn more about how Cisco ISE helps support secure wired and wireless access and enables organizations to enforce compliance, enhance infrastructure security and streamline their service operations in the full white paper. 

IT Technician