cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
351
Views
0
Helpful
1
Replies

Cyber Vision & Remote Access of OT equipment's

tyagi.v
Level 1
Level 1

Hi,

Can someone please share a document to refer to detailed packet flow in case of Cyber vision?

As the OT sensors are transmitting over non-IP protocols, how does Cyber Vision decode & understand there non IP protocols ? 

Also, do we have a solution to tracking connections & record the changes made on OT infra from the outside(Internet) users / 3rd party vendors?

Vijay 

 

1 Reply 1

Albert Mitchell
Cisco Employee
Cisco Employee

Vijay,

CyberVision sensor application runs on the IE switch.  the front panel Ethernet interfaces forward copies of all Ethernet packets to the CV sensor using a Monitor session.  It doens't matter what the L3 payload consists of.  it doesn't have to be IP.  It can be a non IP payload such as Profinet. 

the CV Sensor understands many industrial protocols. (see datasheet for list of supported protocols.)  The CV sensor does DPI into payload of the ethernet frame to understand which protocol and between which two devices is  the communication happening.

Does this help?