Network & Security Services. Because Infrastructure Matters

Transcription

1 Network & Security Services Because Infrastructure Matters

2 Network & Security Services Manufacturing Convergence merging IT and manufacturing systems has created the need for coexistence and interoperability between what were traditionally separate functions and systems. With people, processes and technology in unison, you can achieve higher levels of business performance and discover unique opportunities for competitiveness. Manufacturing convergence provides you the capability to be successful in today s business environment, helping you to address the following realities: Integration of business and manufacturing systems across the enterprise to enable globalization Real-time information flow for innovative business models Migration to one network from many proprietary aged or over-burdened infrastructure Remote access to alleviate skill shortages, enabling smaller support staffs to focus on production, not technology Migration provides you with long range plans to replace overburdened networks while maintaining production requirements.

3 Real Challenges As manufacturers move toward convergence, challenges can present themselves if not managed properly, such as: Security risks internal and external, malicious (worms and viruses) or accidental (users with inappropriate access rites) Unsecure remote access - open access, no limitations One network, multiple owners blurred ownership and differing goals To help you manage these challenges, Rockwell Automation Network and Security Services offers a knowledgeable team, expertly trained in both manufacturing and IT. Our converged team has the domain expertise to provide you with the appropriate services your industrial control and information networks require. Real Solutions Understanding how your network and security infrastructure, policies and procedures affects your plant, and the personnel who use them everyday, is our job. Rockwell Automation field engineers and consultants are trained and equipped to assess, design, implement, audit and manage your network and security infrastructure. Our complete portfolio of network and security services are delivered globally, structured to augment your staff or manage turnkey network/security solutions with our partners providing cost effective methods to help attain the highest return on your investment. Our converged Network and Security team has: Knowledge of manufacturing applications their dependency on the infrastructure and possible impact on the overall manufacturing process Awareness of manufacturing security consequences Latency: Understanding the differences between bandwidth and latency The time it takes for a packet to cross Knowledge of how each layer of the OSI model affects the a network connection, from sender performance of your system to receiver Experience with all types of manufacturing networks The period of time that a frame is EtherNet/IP, ControlNet, DeviceNet, DH+, Remote IO, Fieldbus, held by a network devise before it and other automation industry networks is forwarded Involvement in, and awareness of, national and global standards Two of the most important parameters committees (e.g., Department of Homeland Security, of a communications channel are its Idaho National Labs, ISA 99 and NIST ) latency, which should be low, and its Awareness of traditional IT policies and the impact they can bandwidth, which should be high. have on the plant floor Latency is particularly important for a Capabilities to provide wired and wireless network solutions synchronous protocol where each packet must be acknowledged before the next can be transmitted. Enhanced with Cisco Systems Rockwell Automation is a Cisco Strategic Technology Integrator (STI). As a STI partner, we can provide you with a combined solution, incorporating both Rockwell Automation and Cisco Systems hardware and services. Our Network & Security Services global team of principal consultants, field consultants and field service professionals are Cisco certified. Certifications include, but are not limited to: CCENT, CCNA, CCNP, CISSP, CISM

4 Rockwell Automation Network & Security Services At-a-Glance Assess Assess the current state of the security program, design, policy Assess the current state of the network design, implementation Design/Plan Design & plan a network infrastructure Design & plan security program, policy, infrastructure, business continuity plan Implement Installation & configuration of a network Implementation of a security program, infrastructure design, policy training Audit Audit current architecture compared to governing body (ODVA, CNI, IEEE, TIA/EIA) Audit security program compared to governing body (NERC CIP, ISA 99, NIST , NIST Manage/Monitor Manage, maintain & monitor uptime and issues on the network Managed Security Services (Incident response, disaster recovery, monitoring) ASSESS Your Current State PLAN & DESIGN Your Foundation Assessments help to eliminate the guessing game when it comes to evaluating when issues arise and what is causing them, or before they occur. Network and security assessments evaluate the current condition of a designed or implemented network and your security design, program and policies. From your network infrastructure to your security programs, good planning and design is the foundation upon which performance and reliability are built - without it, you may never meet your operational requirements needed to achieve your business and production goals. Network assessments evaluate your current state with documentation reviews or on-site network analysis to help you determine if your network is able to meet your functional requirements. We will provide you with suggested resolutions to prevent or remediate these issues, as well as learn about potential problems that could result in future unplanned downtime. The network design process begins with collaboration with you to assess the network design expectations, business objectives and identifying functional and informational requirements. Once the specific expectations and requirements are determined, a detailed specification is created - basis for the network topology design. This will help to ensure that the network design best meets the needs for your system. Security assessments evaluate the current state of your security policies, procedures and technologies with documentation reviews or on-site interviews and analysis to help you determine if your security status is where it needs to be. Rockwell Automation can help reduce risks to your business by focusing on identifying potential threats and developing cost-effective countermeasures to protect the production process. Security design and planning can help you to avoid negative impacts caused by a poorly designed system. While manufacturing convergence has many benefits, it can cause negative impacts due to environmental, architectural, maintenance and consequence of failure differences between manufacturing and IT enterprises.

5 IMPLEMENT Your Infrastructure When network and security infrastructure is implemented according to industry standards and your needs, you can realize the true value of manufacturing convergence and can negate negative impacts that can occur to your business otherwise. Network infrastructure implementation ranges from assisting with configurations to providing turnkey solutions with our partners to deliver guaranteed network installation. Proper implementation creates a highly operational network and includes not only the media that transmits the traffic, but also the hardware that controls the flow of traffic and the software that sends, receives and manages the traffic. Security implementation services help to foster manufacturing convergence by enabling secure conduct and help to reduce associated risks. These services apply security appliances, such as firewalls and implement security programs. Our security consultants will also train employees on security policy and awareness throughout the organization. AUDIT Your Standards Network and security audits are performed according to a set of standards provided by a governing body and your own business and production standards and needs. Audits focus on your current state and potential threats to your automation assets. After completion, you will receive the appropriate documentation and we will offer remediation plans to meet standards that are not currently met so you can protect your production process. Network audits confirm proper network installation and operation. Rockwell Automation uses the latest network diagnostic tools to conduct installation and operational tests to validate system implementation and ensure performance is within standards. The standards are outlined by ANSI/TIA, ODVA or appropriate governing body. Security audits verify security program implementation. Our security audit program is compared to multiple governing bodies NERC CIP, ISA-99, NIST , NIST Audits are essential because your industrial automation and control assets, similar to traditional IT systems, are vulnerable to many security issues and any compromise of these systems can impact production, quality, regulatory compliance and even safety. MANAGE & MONITOR Your Investment Manage and monitor services are a group of offerings that help you maintain your network and plant floor security to achieve expected production and business goals. Offerings range from continuous monitoring or ad hoc diagnostic monitoring to periodic visits or emergency response. These offerings can help improve uptime when you do not have the internal resources, tools and technical knowledge. Manage, maintain and monitor with the following services: Remote Monitoring ranges from continuous surveillance to ad hoc, non real-time fashion to diagnostic monitoring of your network infrastructure, activity and to diagnose long term potential network and security issues. Network Incident Response includes network troubleshooting, repair and/or analysis. Security Incident Response includes management, coordination, resolution and disaster recovery* services that entail assessing/verifying security incidents and providing guidance on further action as necessary. Onsite Services includes annually or regularly scheduled assessments to analyze any changes to the system and their effects. *Disaster recovery assistance offers support when your Disaster Recovery Plan has been implemented after a business continuity impacting event has occurred.

6 Rockwell Automation Services & Support Global Support. Local Address. Peace of Mind. Providing the resources you need, when and where you need them, Rockwell Automation has an integrated, global network of ISO-certified repair centers, exchange hubs, field service professionals, IACET-recognized training centers, certified technical phone support centers and online tools. Meet Your Everyday Technical Needs Online & Phone Support System level support Unlimited, real-time support Unlimited, online resources & tools Live chat & support forums Training Services Instructor-led & computer or web-based courses Workstations Knowledge assessments Job aids OnSite Support Embedded engineering Preventive maintenance Migrations & conversions Start-up & commissioning Repair Services Product remanufacturing Third-party repair Annual repair agreements Maximize Your Automation Investment MRO Asset Management Network & Security Services Warranty tracking Consolidated asset reports Quick access to global spare parts inventory Owned & managed spare parts inventory Control system lifecycle services Manage network convergence Security technology, policies and procedures services Safety & Energy Services Machine safety assessments Safety design, integration, validation services General & comprehensive energy audits InSite Managed Services Convergence-enabled, managed application support services Advanced surveillance services Knowledge management and hosting technologies Visit the Rockwell Automation Knowledgebase, for technical information and assistance, plus: View technical/application notes Subscribe for product/service notifications Obtain software patches Submit a Question, Live Chat and Support Forums, and more In the U.S./Canada, call to obtain Repair Services, Phone Support, Onsite Support Callout Services, or to register for Instructor-led Training. Visit Get Support Now, to select your country and find your local support information. Publication GMSC10-BR004A-EN-P - February 2010 Copyright 2010 Rockwell Automation, Inc. All Rights Reserved. Printed in USA.