Installing a Server without external sensors

When installing a Server without external sensors, all industrial network traffic must be received by the computer that performs Server functions. You can apply this installation method if the computer has a sufficient number of network interfaces that will receive traffic from all segments of the industrial network. After the application is installed, you need to add monitoring points to these network interfaces. You can use no more than 4 monitoring points on the Server.

The example in the figure below shows deployment of the Server without sensors. The network interfaces of the computer that performs Server functions are connected to the SPAN ports of network switches (SPAN ports and connections are marked in yellow) and receive a copy of traffic from three segments of the industrial network. The dedicated Kaspersky Industrial CyberSecurity network is designated by green lines.

Example deployment of a Server without sensors

Page top