What does an MSP need to monitor a client's PLCs passively?
A copy of the production network's traffic, a host for the sensor, the plant's permission, and a plan that does not touch the controllers. Find a managed switch in the production network that supports port mirroring, or use a network TAPTAP: test access point. A small device that copies the traffic on a network cable for a sensor to watch. on the link between the controllers and their engineering station or HMI. Connect a Linux host running the NetSenX agent to that mirror port, on a client tenant with the Pro plan or higher. Agree a maintenance window with the plant manager, even though passive monitoring sends nothing to the PLCs. Record which segments are covered and which are not. Then review the first weeks of OTOT: operational technology. The computers that run machines, production lines, building systems and utilities. alerts with the client's engineers, who know which writes and commands are expected.
Read next
Related questions
- What happens to a client's security data when they change MSP, and can they export or delete it?
- What is the difference between an MSP and an MSSP?
- Can an MSP use NetSenX for several customers?
- Can an MSP manage many client networks in one NetSenX account?
- How are MSP clients kept separate in a multi-tenant security tool?
Terms used here
- TAP (test access point)
- A small device that copies the traffic on a network cable for a sensor to watch.
- OT (operational technology)
- The computers that run machines, production lines, building systems and utilities.