{"id":61384,"date":"2025-09-26T11:19:45","date_gmt":"2025-09-26T11:19:45","guid":{"rendered":"https:\/\/becolve.com\/blog\/5-recommendations-for-the-deployment-of-secure-ot-networks-part-i\/"},"modified":"2025-09-26T11:19:45","modified_gmt":"2025-09-26T11:19:45","slug":"5-recommendations-for-the-deployment-of-secure-ot-networks-part-i","status":"publish","type":"blog","link":"https:\/\/becolve.com\/en\/blog\/5-recommendations-for-the-deployment-of-secure-ot-networks-part-i\/","title":{"rendered":"5 Recommendations for the Deployment of Secure OT Networks (Part I)"},"content":{"rendered":"

The emergence of different forms of cyberterrorism and cybercrime<\/strong>, the proliferation of web access to SCADA<\/strong> systems, the standardization of IT technologies<\/strong> in the industrial field, and the adoption of cloud, mobile, and BYOD<\/strong> paradigms make it necessary to pay special attention to the secure deployment in the OT networks<\/strong> (Operation Technology) of the technologies provided by the main manufacturers of PLCs and SCADA (Wonderware<\/strong>, Siemens, Rockwell, Schneider, etc.).<\/p>\n

Although many of these technologies are \u201csecure by design<\/a><\/strong>\u201d, this does not guarantee protection against the large number of threats that currently arise in industrial and infrastructure environments.<\/p>\n

In a series of entries, we want to propose up to five recommendations<\/strong> that will allow you to provide greater security to an OT network<\/strong>:<\/p>\n

1. Always use manageable industrial switches whenever possible.<\/h4>\n

The MTBF<\/strong> of these switches is much higher than transactional switches, the fact that they are manageable will allow greater flexibility in their configuration and can be provided with special characteristics for specific environments<\/strong> (DIN rail, IP20, IP67, high availability, redundancy, specific approvals such as IEC61850, industrial protocols such as Profibus or EhternetIP, etc.).<\/p>\n

2. Physically segment the IT network and the OT network where real-time technologies (PLCs, SCADA, HMI, etc.) have been installed using industrial firewalls\/routers.<\/h4>\n

The figure shows how the Firewall\/Router device separates two network segments<\/strong> (network A or IT with IP address range 192.168.1.X and network B or OT with IP address range 193.167.1.X). In addition to separating both networks, the device acts as a firewall blocking unauthorized traffic<\/strong> between both network segments.
\nNormally, this type of segmentation mechanism can be configured to perform NAT<\/strong> (Network Address Translation) 1:1, that is, the equipment located in the IT network only sees the IP address<\/strong> of the router’s network card that communicates with the equipment located in the OT network, thus increasing security in the transit of information between both networks. <\/p>\n

\"Secure<\/p>\n

3. Avoid using VLANs to separate IT and OT.<\/h4>\n

If you do it within the OT environment itself, do not perform \u201ctruncking\u201d<\/strong> between switches to communicate server and client equipment. If you have to do it for very specific needs, filter the traffic between switches\/VLANs<\/strong> using industrial firewalls compatible with the IEEE 802.1Q standard <\/p>\n

\"5<\/p>\n

In the next entry, we will propose another two recommendations<\/strong>.<\/p>\n","protected":false},"excerpt":{"rendered":"

The emergence of different forms of cyberterrorism and cybercrime, the proliferation of web access to SCADA systems, the standardization of IT technologies in the industrial field, and the adoption of cloud, mobile, and BYOD paradigms make it necessary to pay special attention to the secure deployment in the OT networks (Operation Technology) of the technologies […]<\/p>\n","protected":false},"author":31,"featured_media":61387,"menu_order":0,"template":"","categories":[1371],"tags":[],"arquitectura":[1839],"area":[],"sector":[],"experto":[1396],"weborigen":[157],"productos-tax":[],"soluciones-tax":[],"marcas-tax":[],"coauthors":[],"class_list":["post-61384","blog","type-blog","status-publish","has-post-thumbnail","hentry","category-cybersecurity","arquitectura-industrial-cybersecurity","experto-industrial-cybersecurity-total-availability","weborigen-ciberseguridadlogitek-com"],"acf":[],"yoast_head":"\n5 Recommendations for the Deployment of Secure OT Networks (Part I) | Becolve Digital<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/becolve.com\/en\/blog\/5-recommendations-for-the-deployment-of-secure-ot-networks-part-i\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"5 Recommendations for the Deployment of Secure OT Networks (Part I) | Becolve Digital\" \/>\n<meta property=\"og:description\" content=\"The emergence of different forms of cyberterrorism and cybercrime, the proliferation of web access to SCADA systems, the standardization of IT technologies in the industrial field, and the adoption of cloud, mobile, and BYOD paradigms make it necessary to pay special attention to the secure deployment in the OT networks (Operation Technology) of the technologies […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/becolve.com\/en\/blog\/5-recommendations-for-the-deployment-of-secure-ot-networks-part-i\/\" \/>\n<meta property=\"og:site_name\" content=\"Becolve Digital\" \/>\n<meta property=\"og:image\" content=\"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/redes-OT.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"620\" \/>\n\t<meta property=\"og:image:height\" content=\"250\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@Logitek_es\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"Becolve Digital\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/blog\\\/5-recommendations-for-the-deployment-of-secure-ot-networks-part-i\\\/\",\"url\":\"https:\\\/\\\/becolve.com\\\/en\\\/blog\\\/5-recommendations-for-the-deployment-of-secure-ot-networks-part-i\\\/\",\"name\":\"5 Recommendations for the Deployment of Secure OT Networks (Part I) | Becolve Digital\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/blog\\\/5-recommendations-for-the-deployment-of-secure-ot-networks-part-i\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/blog\\\/5-recommendations-for-the-deployment-of-secure-ot-networks-part-i\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/redes-OT.jpg\",\"datePublished\":\"2025-09-26T11:19:45+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/blog\\\/5-recommendations-for-the-deployment-of-secure-ot-networks-part-i\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/becolve.com\\\/en\\\/blog\\\/5-recommendations-for-the-deployment-of-secure-ot-networks-part-i\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/blog\\\/5-recommendations-for-the-deployment-of-secure-ot-networks-part-i\\\/#primaryimage\",\"url\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/redes-OT.jpg\",\"contentUrl\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/redes-OT.jpg\",\"width\":620,\"height\":250},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/blog\\\/5-recommendations-for-the-deployment-of-secure-ot-networks-part-i\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/becolve.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blog Items\",\"item\":\"https:\\\/\\\/becolve.com\\\/en\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"5 Recommendations for the Deployment of Secure OT Networks (Part I)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/becolve.com\\\/en\\\/\",\"name\":\"Becolve Digital\",\"description\":\"Transformaci\u00f3n digital en industria e infraestructuras\",\"publisher\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/becolve.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/#organization\",\"name\":\"Becolve Digital\",\"url\":\"https:\\\/\\\/becolve.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/becolve-logo-h-black_200.png\",\"contentUrl\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/becolve-logo-h-black_200.png\",\"width\":200,\"height\":64,\"caption\":\"Becolve Digital\"},\"image\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Logitek_es\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/becolve-digital\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"5 Recommendations for the Deployment of Secure OT Networks (Part I) | Becolve Digital","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/becolve.com\/en\/blog\/5-recommendations-for-the-deployment-of-secure-ot-networks-part-i\/","og_locale":"en_US","og_type":"article","og_title":"5 Recommendations for the Deployment of Secure OT Networks (Part I) | Becolve Digital","og_description":"The emergence of different forms of cyberterrorism and cybercrime, the proliferation of web access to SCADA systems, the standardization of IT technologies in the industrial field, and the adoption of cloud, mobile, and BYOD paradigms make it necessary to pay special attention to the secure deployment in the OT networks (Operation Technology) of the technologies […]","og_url":"https:\/\/becolve.com\/en\/blog\/5-recommendations-for-the-deployment-of-secure-ot-networks-part-i\/","og_site_name":"Becolve Digital","og_image":[{"width":620,"height":250,"url":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/redes-OT.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_site":"@Logitek_es","twitter_misc":{"Est. reading time":"2 minutes","Written by":"Becolve Digital"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/becolve.com\/en\/blog\/5-recommendations-for-the-deployment-of-secure-ot-networks-part-i\/","url":"https:\/\/becolve.com\/en\/blog\/5-recommendations-for-the-deployment-of-secure-ot-networks-part-i\/","name":"5 Recommendations for the Deployment of Secure OT Networks (Part I) | Becolve Digital","isPartOf":{"@id":"https:\/\/becolve.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/becolve.com\/en\/blog\/5-recommendations-for-the-deployment-of-secure-ot-networks-part-i\/#primaryimage"},"image":{"@id":"https:\/\/becolve.com\/en\/blog\/5-recommendations-for-the-deployment-of-secure-ot-networks-part-i\/#primaryimage"},"thumbnailUrl":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/redes-OT.jpg","datePublished":"2025-09-26T11:19:45+00:00","breadcrumb":{"@id":"https:\/\/becolve.com\/en\/blog\/5-recommendations-for-the-deployment-of-secure-ot-networks-part-i\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/becolve.com\/en\/blog\/5-recommendations-for-the-deployment-of-secure-ot-networks-part-i\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/becolve.com\/en\/blog\/5-recommendations-for-the-deployment-of-secure-ot-networks-part-i\/#primaryimage","url":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/redes-OT.jpg","contentUrl":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/redes-OT.jpg","width":620,"height":250},{"@type":"BreadcrumbList","@id":"https:\/\/becolve.com\/en\/blog\/5-recommendations-for-the-deployment-of-secure-ot-networks-part-i\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/becolve.com\/en\/"},{"@type":"ListItem","position":2,"name":"Blog Items","item":"https:\/\/becolve.com\/en\/blog\/"},{"@type":"ListItem","position":3,"name":"5 Recommendations for the Deployment of Secure OT Networks (Part I)"}]},{"@type":"WebSite","@id":"https:\/\/becolve.com\/en\/#website","url":"https:\/\/becolve.com\/en\/","name":"Becolve Digital","description":"Transformaci\u00f3n digital en industria e infraestructuras","publisher":{"@id":"https:\/\/becolve.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/becolve.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/becolve.com\/en\/#organization","name":"Becolve Digital","url":"https:\/\/becolve.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/becolve.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/becolve-logo-h-black_200.png","contentUrl":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/becolve-logo-h-black_200.png","width":200,"height":64,"caption":"Becolve Digital"},"image":{"@id":"https:\/\/becolve.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Logitek_es","https:\/\/www.linkedin.com\/company\/becolve-digital\/"]}]}},"_links":{"self":[{"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/blog\/61384","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/blog"}],"about":[{"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/types\/blog"}],"author":[{"embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/users\/31"}],"version-history":[{"count":0,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/blog\/61384\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/media\/61387"}],"wp:attachment":[{"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/media?parent=61384"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/categories?post=61384"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/tags?post=61384"},{"taxonomy":"arquitectura","embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/arquitectura?post=61384"},{"taxonomy":"area","embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/area?post=61384"},{"taxonomy":"sector","embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/sector?post=61384"},{"taxonomy":"experto","embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/experto?post=61384"},{"taxonomy":"weborigen","embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/weborigen?post=61384"},{"taxonomy":"productos-tax","embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/productos-tax?post=61384"},{"taxonomy":"soluciones-tax","embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/soluciones-tax?post=61384"},{"taxonomy":"marcas-tax","embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/marcas-tax?post=61384"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/becolve.com\/en\/wp-json\/wp\/v2\/coauthors?post=61384"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}