Securing critical infrastructure without additional sensors

A key component of the solution is the new cloud-delivered Industrial OT Security service, which can be easily enabled — without the need to install additional sensors — by any of the 61,000+ active customers of Palo Alto Networks network security products: hardware and software Next-Generation Firewalls (NGFW) and Prisma SASE. Built on an AI-powered foundation with ease of deployment in mind, the new solution enables customers to secure their OT environments from the most sophisticated threats while simplifying their operations. 

OT devices can be hard to secure because many lack built-in security and were not designed to be patched. In addition, high uptime requirements limit the ability to do regular security maintenance. OT environments are also at risk as organizations adopt new technologies like 5G, which enable mass connectivity, and open up remote access. 

“Most OT security solutions in the market fall short because they can’t identify all the assets and can only alert but don’t prevent threats. This leads to a patchwork of siloed security technologies, which can lead to security gaps,” said Anand Oswal, SVP, network security at Palo Alto Networks. “Our OT Security solution is designed to help organizations stay secure through granular visibility and effective inline security while meeting their availability and uptime requirements.”

Using the industry’s first ML-powered OT visibility engine, the Industrial OT Security service recognizes hundreds of unique OT device profiles, over 1,000 OT/Industrial Control System (ICS) applications, and has hundreds of distinct OT threat signatures to help protect these hard-to-secure assets. A notable feature of the service is its ability to help security teams proactively understand risk and apply controls. It continuously observes, categorizes and visualizes asset behavior so anomalies can be discovered immediately and addressed with firewall policy.

“As industrial OT systems and IT systems become more interconnected, so does the size of the attack surface available to the adversary. Defending against increasingly sophisticated threats requires expanded security strategies that can provide visibility, context, and Zero Trust capabilities across both OT and IT networks, devices, applications, and users,” said Dave Gruber, principal analyst, Enterprise Strategy Group. “The Palo Alto Networks solution embraces this unified security model, promising to help protect complex OT environments.” 

“Manufacturing has come into the crosshairs of many recent cyberattacks. Palo Alto Networks Industrial OT Security is a must have to ensure security best practices are in place,” said Jared Mendenhall, director, Information Security, Impossible Foods. “We look forward to Palo Alto Networks’ dedicated OT Security solution to help us further secure our manufacturing plant, remote operations, and realize our broader Zero Trust vision.”