Does NetSenX raise a separate anomaly alert for each industrial protocol?

No. NetSenX reads five industrial protocols, Modbus/TCP, DNP3, BACnet/IP, EtherNet/IP and S7comm, but there is no separate anomaly alert per protocol, such as one for unusual Modbus polling or odd BACnet traffic. Its OTOT: operational technology. The computers that run machines, production lines, building systems and utilities. alerts are four kinds that work across what it reads: a write to a controller from a host that is not allowed to write, traffic that crosses levels of the plant network, OT activity outside working hours, and S7comm commands such as a stop or a program download. The general detections watch the same hosts as well: beaconing, scanning, lateral movement and unusual outbound volume. If your risk assessment needs deep, protocol-specific anomaly detection, for example for a utility's telecontrol traffic, ask us what is covered before you rely on it, or run a specialist OT tool beside NetSenX. The OT features are available from the Pro plan.

← All 50 questions on OT and IoTAll topics