01
Establish identity and scope
Identify industrial applications, production security zones, engineering workstations, approved partner or remote access; validate participating Endlets before admission.
Manufacturing
Connected factory segmentation · Architecture
Map the service path for connected factory segmentation.
Apply least-privilege policy across industrial automation and control system security zones and conduits.
Primary capability
Zero Trust
How it works
Trace the protected service path from admission to evidence.
Limit lateral movement while preserving required production and support workflows.
02
Build the protected service path
validated identity and machine state → fabric admission → approved service policy → enforcement across a workload or zone conduit
03
Capture decision evidence
Review identity evidence, policy decisions, allowed and denied flows, service reachability, session state with the responsible teams.
Architecture flow
Trace the protected service path and its control points.
validated identity and machine state
fabric admission
approved service policy
enforcement across a workload or zone conduit
Inputs
industrial applications, production security zones, engineering workstations, approved partner or remote access, identity services, Endlets
Path
validated identity and machine state → fabric admission → approved service policy → enforcement across a workload or zone conduit
Evidence
identity evidence, policy decisions, allowed and denied flows, service reachability, session state, and revocation
Quick answers
Connected factory segmentation FAQs
Which technical path should the team review?+
validated identity and machine state → fabric admission → approved service policy → enforcement across a workload or zone conduit
Which evidence should reviewers collect?+
identity evidence, policy decisions, allowed and denied flows, service reachability, session state, and revocation
Who should review the architecture?+
OT security, plant operations, network security, application owners
Continue the evaluation path
Evaluate connected factory segmentation with a representative scope.
Determine whether each approved role and workload receives only the service access permitted through the defined zone conduits.
Continue to Evaluation
