Representative End User Clients
Representative Automation Clients
Representative Software Clients
Data-driven production systems require wireless connectivity for countless sensors and mobile assets, leading many companies to pursue private 5G infrastructure. At the same time, cyberattacks can cause costly downtimes or compromise worker safety. Additionally, regulations like NIS2 mandate defense-in-depth security architectures that meet IEC 62443 standards. Off-the-shelf IT security solutions often create performance bottlenecks or fail to address OT-specific threats in industrial environments.
Palo Alto Networks has collaborated with Siemens on optimizing the Palo Alto NGFW technology for Siemens' Private 5G. This verification process looked to validate that the solution delivers industrial-grade security without compromising the low latency and high throughput required for real-time production systems, a critical distinction from generic IT security approaches.
Three Security Elements
Siemens’ private 5G infrastructure provides on-premise, deterministic wireless connectivity for mobile and moving assets, with built-in security features protecting the core network infrastructure. The solution ensures data sovereignty and low-latency communication independent of mobile network operators.
SINEC Security Monitor: Siemens software for passive, non-intrusive, continuous on-premises security monitoring during production. The system identifies communication anomalies, unauthorized devices, or potential threats without impacting production operations.
Palo Alto Networks Firewall: The Palo Alto Networks firewall delivers Layer 7 security and dedicated OT protocol analysis specifically optimized for industrial environments. Unlike generic IT security solutions, it provides deep packet inspection for OT protocols while maintaining the low latency required for real-time control applications, now also in wireless communications via private 5G networks. This includes protection against malware, intrusion attempts, and data exfiltration without the performance degradation typical of off-the-shelf security tools.
The verified architecture meets IEC 62443 requirements for industrial automation and control systems security while maintaining the performance characteristics essential for time-critical production applications. The solution is now available as part of the Siemens Xcelerator portfolio.
ARC Advisory Group covers Industrial Cybersecurity Challenges and Solutions, the market for Industrial Next-Generation Firewalls, and the market for industrial cellular routers in its ongoing market analysis.