Plant Data on the Business Network: the DMZ, the One-Way Path and What IT Will Ask

Three stacked network zones drawn as bands: the enterprise zone on 10.20.0.0/16, an industrial demilitarised zone holding a broker, a jump host and an NTP server, and the industrial zone on 192.168.10.0 and 192.168.1.0 with two firewalls hatched across the boundaries and a refused direct path crossed out

One firewall rule is usually all a plant data project asks for: TCP 1433 outbound, from a gateway at 192.168.1.40 on the cell network to a SQL Server at 10.20.4.16 on the business network. That rule gets refused, and the refusal is right. What gets approved instead is a broker sitting in a demilitarised zone … Read more

Advertisement