Typical deployments

Kaspersky Industrial CyberSecurity for Nodes is a part of Kaspersky Industrial CyberSecurity solution.

Kaspersky Industrial CyberSecurity solution includes the following utility and applications:

• Kaspersky Security Gateway.
• Kaspersky Industrial CyberSecurity for Nodes.
• Kaspersky Industrial CyberSecurity for Networks.
• Kaspersky Security Center.

Kaspersky Industrial CyberSecurity for Networks and Kaspersky Industrial CyberSecurity for Nodes work at different levels of a dedicated network. A dedicated Kaspersky Industrial CyberSecurity network is part of an industrial network that includes computers designed to run Kaspersky Industrial CyberSecurity applications to protect industrial systems and auxiliary hardware (for example, switches).

Kaspersky Industrial CyberSecurity for Networks monitors and analyzes industrial network traffic. Kaspersky Industrial CyberSecurity for Nodes, which is installed on an industrial network node, protects the computer from known computer security threats and monitors the integrity of PLC projects included in the scan scope.

You can control Kaspersky Industrial CyberSecurity for Networks and Kaspersky Industrial CyberSecurity for Nodes deployed on the same dedicated network using a single Kaspersky Security Center Administration Console. You can also configure the diagnostic information received from Kaspersky Industrial CyberSecurity for Networks and Kaspersky Industrial CyberSecurity for Nodes to be sent from Kaspersky Security Center to the SCADA system using Kaspersky Security Gateway.

Kaspersky Industrial CyberSecurity for Nodes includes:

• Functional module – records information about the state of industrial network nodes and protects nodes from data threats.
• Console – is the local graphical user interface. You can use the Kaspersky Industrial CyberSecurity for Nodes Console to control the application on industrial network nodes. The Console may be installed on a computer with Kaspersky Industrial CyberSecurity for Nodes installed or any other computer on the protected network. In this case, the Console is used to control the application remotely. You can also use one Console to control several computers protected by Kaspersky Industrial CyberSecurity for Nodes.

Kaspersky Industrial CyberSecurity for Nodes records security events on the protected nodes and sends the events to the Application Console and the Kaspersky Security Center Administration Console. The local Application Console and the Kaspersky Security Center Administration Console are accessed from the workstation of the specialist monitoring the industrial process at the enterprise, and from the workstation of the information security specialist.

In the example of the deployment of Kaspersky Industrial CyberSecurity for Nodes as part of the Kaspersky Industrial CyberSecurity solution (see the figure below), the dedicated network is shown in blue and the industrial network components are shown in red. The deployment scheme depends on the particulars of the industrial network in which the applications of the Kaspersky Industrial CyberSecurity solution are planned to be installed.

Kaspersky Industrial CyberSecurity for Nodes deployment scheme