{"id":49529,"date":"2025-09-17T18:25:19","date_gmt":"2025-09-17T18:25:19","guid":{"rendered":"https:\/\/becolve.com\/blog\/5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii\/"},"modified":"2025-09-17T18:25:19","modified_gmt":"2025-09-17T18:25:19","slug":"5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii","status":"publish","type":"blog","link":"https:\/\/becolve.com\/pt-pt\/blog\/5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii\/","title":{"rendered":"5 recomenda\u00e7\u00f5es para a implementa\u00e7\u00e3o de Redes OT seguras (Parte II)"},"content":{"rendered":"<p>Dando seguimento a esta <a href=\"http:\/\/www.ciberseguridadlogitek.com\/5-recomendaciones-para-el-despliegue-de-redes-ot-seguras\/\" target=\"_blank\" rel=\"noopener\">publica\u00e7\u00e3o<\/a>, propomos as duas \u00faltimas recomenda\u00e7\u00f5es:<\/p>\n<h4>4. Crie uma DMZ (zona desmilitarizada) se for necess\u00e1rio que utilizadores acedam ao servidor SCADA WEB a partir da Internet e\/ou da rede OT.<\/h4>\n<p>Uma zona desmilitarizada ou DMZ \u00e9 uma rede interm\u00e9dia que \u00e9 criada entre outras duas redes <strong>atrav\u00e9s de duas firewalls<\/strong>. A finalidade desta rede interm\u00e9dia \u00e9 que a informa\u00e7\u00e3o\/aplica\u00e7\u00e3o que pretenda ser partilhada pelos utilizadores das redes principais se localize nessa rede interm\u00e9dia, permitindo, por um lado, esse acesso, mas <strong>evitando o tr\u00e1fego e o acesso direto<\/strong> entre as duas redes principais. <\/p>\n<p>Na figura, observa-se como entre a rede A ou IT (192.168.1.X) e a rede B ou OT (193.167.1.X), foi criada uma rede interm\u00e9dia, a <strong>DMZ<\/strong>, com o seu pr\u00f3prio intervalo de endere\u00e7os IP (202.168.1.Y). Nesta rede interm\u00e9dia, localizam-se as aplica\u00e7\u00f5es e\/ou informa\u00e7\u00f5es que \u00e9 necess\u00e1rio que sejam partilhadas pelos utilizadores das redes IT e OT (<strong>as solu\u00e7\u00f5es MES ou um Historian-Replicado<\/strong> para que os dados de processo sejam acess\u00edveis a partir de IT) ou os servidores que devem estar acess\u00edveis a partir do exterior (SCADA Web Server). <\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter\" src=\"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/image003.jpg\" alt=\"  Crie uma DMZ (zona desmilitarizada)\" width=\"401\" height=\"275\"><\/p>\n<p>&nbsp;<\/p>\n<h4>5. Incorpore <a href=\"http:\/\/www.ciberseguridadlogitek.com\/wp-content\/uploads\/Firewalls-industriales_Hirschmann_Tofino_DPI.pdf\" target=\"_blank\" rel=\"noopener\">firewalls industriais DPI (Deep Packet Inspection)<\/a> entre os servidores SCADA e os PLCs para garantir a seguran\u00e7a do processo perante poss\u00edveis amea\u00e7as e a\u00e7\u00f5es maliciosas.<\/h4>\n<p>As firewalls industriais <strong>DPI<\/strong> localizam-se entre os sistemas <strong>SCADA e os PLCs<\/strong>, garantindo a sua seguran\u00e7a e, por conseguinte, a do processo. O facto de realizarem DPI implica que bloqueiam malware constru\u00eddo sobre protocolos tipicamente IT. Ou seja, a maioria do malware n\u00e3o \u00e9 constru\u00edda sobre protocolos industriais. Ao poder definir regras de segmenta\u00e7\u00e3o espec\u00edficas por protocolo industrial (<strong>Modbus, Profinet, OPC, Ethernet\/IP, DNP3<\/strong>), este tr\u00e1fego n\u00e3o seria permitido.   <\/p>\n<p>Al\u00e9m disso, permite realizar segmenta\u00e7\u00e3o de tr\u00e1fego que n\u00e3o est\u00e1 em conformidade com o \u201cpadr\u00e3o\u201d do protocolo industrial selecionado e, inclusive, definir regras de segmenta\u00e7\u00e3o por <strong>Function Codes espec\u00edficas de protocolos como Modbus ou Ethernet IP<\/strong>. Por exemplo, se o protocolo utilizado for Modbus TCP\/IP, \u00e9 poss\u00edvel definir uma regra que n\u00e3o permita a um mestre executar as \u201cfunction codes\u201d 05 \u201cwrite cole\u201d e 06 \u201cwrite register\u201d sobre um escravo. <\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter\" src=\"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/image0031.jpg\" alt=\"  firewalls industriais DPI (Deep Packet Inspection)\" width=\"401\" height=\"275\"><\/p>\n<p>&nbsp;<\/p>\n<p>Esperamos que estas recomenda\u00e7\u00f5es para a <strong>implementa\u00e7\u00e3o de Redes OT seguras<\/strong> vos tenham sido \u00fateis.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Dando seguimento a esta publica\u00e7\u00e3o, propomos as duas \u00faltimas recomenda\u00e7\u00f5es: 4. Crie uma DMZ (zona desmilitarizada) se for necess\u00e1rio que utilizadores acedam ao servidor SCADA WEB a partir da Internet e\/ou da rede OT. Uma zona desmilitarizada ou DMZ \u00e9 uma rede interm\u00e9dia que \u00e9 criada entre outras duas redes atrav\u00e9s de duas firewalls. A [&hellip;]<\/p>\n","protected":false},"author":31,"featured_media":49530,"menu_order":0,"template":"","categories":[969],"tags":[],"arquitectura":[1838],"area":[],"sector":[],"experto":[203],"weborigen":[157],"productos-tax":[],"soluciones-tax":[],"marcas-tax":[],"coauthors":[],"class_list":["post-49529","blog","type-blog","status-publish","has-post-thumbnail","hentry","category-ciberseguranca","arquitectura-ciberseguranca-industrial","experto-ciberseguranca-industrial-disponibilidade-total","weborigen-ciberseguridadlogitek-com"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>5 recomenda\u00e7\u00f5es para a implementa\u00e7\u00e3o de Redes OT seguras (Parte II) | Becolve Digital<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/becolve.com\/pt-pt\/blog\/5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii\/\" \/>\n<meta property=\"og:locale\" content=\"pt_PT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"5 recomenda\u00e7\u00f5es para a implementa\u00e7\u00e3o de Redes OT seguras (Parte II) | Becolve Digital\" \/>\n<meta property=\"og:description\" content=\"Dando seguimento a esta publica\u00e7\u00e3o, propomos as duas \u00faltimas recomenda\u00e7\u00f5es: 4. Crie uma DMZ (zona desmilitarizada) se for necess\u00e1rio que utilizadores acedam ao servidor SCADA WEB a partir da Internet e\/ou da rede OT. Uma zona desmilitarizada ou DMZ \u00e9 uma rede interm\u00e9dia que \u00e9 criada entre outras duas redes atrav\u00e9s de duas firewalls. A [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/becolve.com\/pt-pt\/blog\/5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii\/\" \/>\n<meta property=\"og:site_name\" content=\"Becolve Digital\" \/>\n<meta property=\"og:image\" content=\"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/image003.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"401\" \/>\n\t<meta property=\"og:image:height\" content=\"275\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@Logitek_es\" \/>\n<meta name=\"twitter:label1\" content=\"Tempo estimado de leitura\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutos\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"Becolve Digital\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii\\\/\",\"url\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii\\\/\",\"name\":\"5 recomenda\u00e7\u00f5es para a implementa\u00e7\u00e3o de Redes OT seguras (Parte II) | Becolve Digital\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/image003.jpg\",\"datePublished\":\"2025-09-17T18:25:19+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii\\\/#breadcrumb\"},\"inLanguage\":\"pt-PT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-PT\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii\\\/#primaryimage\",\"url\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/image003.jpg\",\"contentUrl\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/image003.jpg\",\"width\":401,\"height\":275},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blog Items\",\"item\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"5 recomenda\u00e7\u00f5es para a implementa\u00e7\u00e3o de Redes OT seguras (Parte II)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#website\",\"url\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/\",\"name\":\"Becolve Digital\",\"description\":\"Impulsamos la transformaci\u00f3n digital en la industria e infraestructuras\",\"publisher\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-PT\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#organization\",\"name\":\"Becolve Digital\",\"url\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-PT\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/becolve-logo-h-black_200.png\",\"contentUrl\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/becolve-logo-h-black_200.png\",\"width\":200,\"height\":64,\"caption\":\"Becolve Digital\"},\"image\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Logitek_es\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/becolve-digital\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"5 recomenda\u00e7\u00f5es para a implementa\u00e7\u00e3o de Redes OT seguras (Parte II) | Becolve Digital","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/becolve.com\/pt-pt\/blog\/5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii\/","og_locale":"pt_PT","og_type":"article","og_title":"5 recomenda\u00e7\u00f5es para a implementa\u00e7\u00e3o de Redes OT seguras (Parte II) | Becolve Digital","og_description":"Dando seguimento a esta publica\u00e7\u00e3o, propomos as duas \u00faltimas recomenda\u00e7\u00f5es: 4. Crie uma DMZ (zona desmilitarizada) se for necess\u00e1rio que utilizadores acedam ao servidor SCADA WEB a partir da Internet e\/ou da rede OT. Uma zona desmilitarizada ou DMZ \u00e9 uma rede interm\u00e9dia que \u00e9 criada entre outras duas redes atrav\u00e9s de duas firewalls. A [&hellip;]","og_url":"https:\/\/becolve.com\/pt-pt\/blog\/5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii\/","og_site_name":"Becolve Digital","og_image":[{"width":401,"height":275,"url":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/image003.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_site":"@Logitek_es","twitter_misc":{"Tempo estimado de leitura":"2 minutos","Written by":"Becolve Digital"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/becolve.com\/pt-pt\/blog\/5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii\/","url":"https:\/\/becolve.com\/pt-pt\/blog\/5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii\/","name":"5 recomenda\u00e7\u00f5es para a implementa\u00e7\u00e3o de Redes OT seguras (Parte II) | Becolve Digital","isPartOf":{"@id":"https:\/\/becolve.com\/pt-pt\/#website"},"primaryImageOfPage":{"@id":"https:\/\/becolve.com\/pt-pt\/blog\/5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii\/#primaryimage"},"image":{"@id":"https:\/\/becolve.com\/pt-pt\/blog\/5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii\/#primaryimage"},"thumbnailUrl":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/image003.jpg","datePublished":"2025-09-17T18:25:19+00:00","breadcrumb":{"@id":"https:\/\/becolve.com\/pt-pt\/blog\/5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii\/#breadcrumb"},"inLanguage":"pt-PT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/becolve.com\/pt-pt\/blog\/5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii\/"]}]},{"@type":"ImageObject","inLanguage":"pt-PT","@id":"https:\/\/becolve.com\/pt-pt\/blog\/5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii\/#primaryimage","url":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/image003.jpg","contentUrl":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/image003.jpg","width":401,"height":275},{"@type":"BreadcrumbList","@id":"https:\/\/becolve.com\/pt-pt\/blog\/5-recomendacoes-para-a-implementacao-de-redes-ot-seguras-parte-ii\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/becolve.com\/pt-pt\/"},{"@type":"ListItem","position":2,"name":"Blog Items","item":"https:\/\/becolve.com\/pt-pt\/blog\/"},{"@type":"ListItem","position":3,"name":"5 recomenda\u00e7\u00f5es para a implementa\u00e7\u00e3o de Redes OT seguras (Parte II)"}]},{"@type":"WebSite","@id":"https:\/\/becolve.com\/pt-pt\/#website","url":"https:\/\/becolve.com\/pt-pt\/","name":"Becolve Digital","description":"Impulsamos la transformaci\u00f3n digital en la industria e infraestructuras","publisher":{"@id":"https:\/\/becolve.com\/pt-pt\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/becolve.com\/pt-pt\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-PT"},{"@type":"Organization","@id":"https:\/\/becolve.com\/pt-pt\/#organization","name":"Becolve Digital","url":"https:\/\/becolve.com\/pt-pt\/","logo":{"@type":"ImageObject","inLanguage":"pt-PT","@id":"https:\/\/becolve.com\/pt-pt\/#\/schema\/logo\/image\/","url":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/becolve-logo-h-black_200.png","contentUrl":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/becolve-logo-h-black_200.png","width":200,"height":64,"caption":"Becolve Digital"},"image":{"@id":"https:\/\/becolve.com\/pt-pt\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Logitek_es","https:\/\/www.linkedin.com\/company\/becolve-digital\/"]}]}},"_links":{"self":[{"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/blog\/49529","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/blog"}],"about":[{"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/types\/blog"}],"author":[{"embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/users\/31"}],"version-history":[{"count":0,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/blog\/49529\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/media\/49530"}],"wp:attachment":[{"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/media?parent=49529"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/categories?post=49529"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/tags?post=49529"},{"taxonomy":"arquitectura","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/arquitectura?post=49529"},{"taxonomy":"area","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/area?post=49529"},{"taxonomy":"sector","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/sector?post=49529"},{"taxonomy":"experto","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/experto?post=49529"},{"taxonomy":"weborigen","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/weborigen?post=49529"},{"taxonomy":"productos-tax","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/productos-tax?post=49529"},{"taxonomy":"soluciones-tax","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/soluciones-tax?post=49529"},{"taxonomy":"marcas-tax","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/marcas-tax?post=49529"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/coauthors?post=49529"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}