SOLUTION BRIEF The Leading Solution For OT & IoT Security .

SOLUTION BRIEFThe LeadingSolution for OT& IoT Securityand Visibility

The Leader inOT & IoT Securityand VisibilitySeeAll OT and IoT assets andbehavior on your networksfor unmatched awarenessDetectNozomi Networks accelerates digital transformation by providingCyber threats, vulnerabilities,risks and anomalies forfaster responseexceptional network visibility, threat detection and operational insight forOT and IoT environments.We make it possible to tackle escalating cyber risks to operational networkswhile modernizing your business to succeed in the future.UnifyLet us put our passion for innovation and customer success to work for you,helping you ensure high cyber resilience and reliability.Security, visibility andmonitoring across all yourassets for improved resilienceSecuring the World'sLargest Organizations9 of Top 20Oil & Gas7 of Top 10ChemicalsBuildingAutomationManufacturingFood & RetailAutomotiveLogisticsAirportsSmart CitiesWaterTransportationPharma5 of Top 10Mining5 of Top 10Utilities2SOLUTION BRIEFOT and IoT Security and Visibility

GlobalFootprint44,000,000 3,400 OT, IoT and IT Devices MonitoredInstallations WorldwideLondon, EnglandWorldwideOfficesAmsterdam, The NetherlandsCalgary, CanadaSydney, AustraliaMunich, GermanyPortugalDubai, UAEGlobal HQSan Francisco, USASpainMilan, ItalyMexicoRio de Janeiro, BrazilEuropean HQMendrisio, to OptimizeOT and IoTSecurityGlobal Networkof SI, VAR andDistribution PartnersSOLUTION BRIEFOT and IoT Security and Visibility1,000 Trained andCertified Professionals3

SA ASVantageIdentifySaaS-Powered Security and Visibilityof OT and IoT NetworksAsset Discovery andNetwork VisualizationNozomi Networks Vantage leverages the power and simplicity of software as a service(SaaS) to deliver unmatched security and visibility across your OT, IoT, and IT networks.AssessVantage accelerates digital transformation for the largest and most complexVulnerability Assessmentand Risk Monitoringdistributed networks.You can protect any number of OT, IoT, IT, edge and cloud assets, anywhere.DetectIts scalable SaaS platform enables you to consolidate all of your security managementAdvanced Anomalyand Threat Detectioninto a single application, even as your networks quickly evolve.Vantage delivers the immediate awareness of cyber threats, risks, and anomalies youActAccelerated GlobalIncident Responseneed to detect and respond quickly and ensure cyber d Security for Allof Your Sites with thePower of SaaSVantage Assets View summarizesall asset activity on your networkfor rapid assessment.Network Visualization View displaysall assets communicating on yournetwork for real-time awareness.4SOLUTION BRIEFOT and IoT Security and Visibility

AutomaticallyTrack Your OTand IoT AssetsUp-to-Date Asset InventoryIntuitive DashboardsEliminates blind spots and increasesGenerates macro views as well asawareness with automated asset inventorydetailed information on assetsQuickly Detectand Disrupt Threatsand AnomalousBehaviorContinuous Monitoringand connectionsContinuous monitoring of all supportedCombines behavior-based anomalyprotocols: OT, IoT and ITNo critical blind spots in protection causedby limited monitoring or inadequatedetection with signature-based threatdetection for comprehensive riskmonitoringprotocol supportSignificantlyImprove OT and IoTRisk ManagementSuperior OT and IoTThreat DetectionUser-Centric DesignAccelerates ResponseDetailed Alerts ProvideWorldwide PerspectiveFocuses attention on critical concerns byConsolidates all data to create accuratesummarizing risks and threatsalerts that identify security and reliabilityImproves response time and productivityrisks anywhere in your networkswith precise alerts that are easy to prioritizeReadily Scalewith OptimalPerformanceExceptional Global VisibilityConsolidated Monitoringof All FacilitiesAggregates data from any number ofEnables centralized security riskGuardian sensors, deployed anywheremanagement for all sitesDelivers customizable summaries ofessential information with drill-down toProvides visibility into all OT/IoTindividual sites or assetsenvironmentsGlobal SOCCanada20 FacilitiesIntegratedSystemsUSAVantageSOCJapan25 FacilitiesRussiaSpain11 Facilities40 Facilities20 FacilitiesChina20 facilitiesItaly20 FacilitiesUAE20 FacilitiesBrazil25 FacilitiesPeru12 FacilitiesSouth Africa25 FacilitiesAustralia12 FacilitiesArgentina12 FacilitiesVantage protects anysize network.SOLUTION BRIEFOT and IoT Security and Visibility5

EDGE OR PUBLIC CLOUDGuardianIdentifyIndustrial Strength OT and IoT Securityand VisibilityAsset Discovery andNetwork VisualizationNozomi Networks Guardian delivers visibility, security and monitoring of OT, IoTAssessVulnerability Assessmentand Risk Monitoringand IT devices.Guardian sensors send data to Vantage for consolidated security managementanywhere, anytime from the cloud. They can also send data to the CentralManagement Console for aggregated data analysis at the edge or in the public cloud.The world’s top companies rely on Guardian to protect their critical infrastructure,DetectAdvanced Anomalyand Threat Detectionenergy, manufacturing, mining, transportation, building automation and otherActsites around the world.Time-Saving Dashboardsand Forensic ToolsScaleIdentifyAssessDetectActScaleSingle Guardian SensorCan Monitor 500K AssetsPortion of customizableGuardian Dashboard.Portion of interactiveNetwork Visualization Graph.6SOLUTION BRIEFOT and IoT Security and Visibility

AutomaticallyTrack andVisualize YourAssetsQuickly DetectThreats andAnomalousBehaviorUp-to-DateAsset InventoryReduced Risk ThroughNetwork VisualizationEliminates blind spots and increasesProvides instant awareness of your OT/IoTawareness with automated asset inventorynetworks and their activity patternsProvides extensive node informationPresents key data such as trafficand identifies risks such as alerts andthroughput, TCP connections andvulnerabilitiesprotocols used between nodes and zonesContinuous MonitoringSuperior OT and IoT Threat DetectionContinuous monitoring of all supportedUses behavior-based anomaly detectionprotocols: OT, IoT and ITplus signature-based threat detection forNo critical blind spots in protection causedby limited monitoring or inadequatecomprehensive risk monitoringConsolidates and correlates alertsprotocol supportGuardian Sensorsfor any EnvironmentLarge EnterprisesMid-enterprisesUp to 500,000 NodesUp to 40,000 Nodes3-6 Gbps Max. Throughput250 Mbps-1 Gbps Max.ThroughputRuggedized EnvironmentsPortable Scenarios500-1,000 Nodes2,500 Nodes100-250 Mbps Max200 Mbps Max. ThroughputThroughputRemote Site Data CollectorsVirtual Environments and ContainersUp to 15 Mbps ThroughputVIRTUAL SENSORCONTAINER EDITIONSend data to Guardian for analysis1,000-40,000 NodesGatewatcherVirtual sensor also available1 Gbps Max. ThroughputSiemensRUGGEDCOMFor more details, visit: nozominetworks.com/techspecs.SOLUTION BRIEFOT and IoT Security and Visibility7

EDGE OR PUBLIC CLOUDCentral ManagementConsoleConsolidated OT and IoT Securityand Visibility for Distributed SitesNozomi Networks Central Management Console (CMC) delivers consolidated OTand IoT security and visibility. It analyzes data from multiple Guardian sensors on onesite, or data from multiple sites.Whether you’re consolidating visibility and risk management at the edge or in thepublic cloud, the CMC is fast and simple to deploy.ConsolidateAsset Discovery andNetwork VisualizationVisualizeVulnerability Assessmentand Risk MonitoringRespondAdvanced Anomaly andThreat ied Security forMultiple Distributed SitesCMC AppliancesIn the Public Cloud or at the EdgeEnterprisesCloud or Virtual EnvironmentsPHYSICALCLOUD50 Max. Managed Guardian SensorsAmazon AWS250 Mbps–1 Gbps Max. ThroughputMicrosoft AzureVIRTUALHyper-V 2012 , KVM 1.2 ,VMware ESX 5.x , XEN 4.4 Unlimited* Max. ManagedSensors100 GB Storage*Based on the infrastructure. For complete and current techspecs, visit nozominetworks.com/techspecs.SOLUTION BRIEFOT and IoT Security and Visibility8

Enhance Vantagefor Expanded Visibilityand Threat DetectionSUBSCRIPTIONSUBSCRIPTIONReduces risks by shrinking the mean-time-to-Reduces risks by decreasing the mean-time-to-detect (MTTD), minimizing impactsrespond (MTTR) to operational anomaliesDelivers regular updates to detect emergingDelivers regular updates for faster and morethreats and new vulnerabilitiesaccurate anomaly detectionConsists of rules, signatures and vulnerabilityUpdates Guardian's anomaly detectionupdates created and curated by Nozomitechnology with device profiles and behaviorNetworks Labs, a team of expert securitydata based on analysis of millions of assets in useresearchersat sites around the worldComplete details available at:Complete details available works.com/asset-intelligenceGUARDIAN ADD-ONGUARDIAN ADD-ONAdds low-volume active polling to Guardian’sSupplements Guardian’s data via low-resourcepassive asset discoverysensors for distributed locationsIdentifies non-communicating assets andCollects data and sends it to Guardianrogue devicesfor further analysisDelivers accurate vulnerability assessmentReduces deployment costs for wilderness,for fast and efficient responseoff-shore or other isolated locationsComplete details available at:Complete details available com/techspecsThreat IntelligenceSmart PollingSOLUTION BRIEFOT and IoT Security and VisibilityAsset IntelligenceRemote Collectors9

OT and IoTSecurity and VisibilityIndustrialStrength Cyberand OperationalResilienceYou can protect a wide variety of mixed environments with rapid asset discovery,network visualization and accelerated tagePhysicalVirtualOTRespondto ontainerIoTFor the first time you can see all the assets on your network and know their behavior.Our technology quickly and accurately detects malicious and anomalous activity.You have the insights you need to understand and respond to threats before data theft oroperational disruptions occur.10SOLUTION BRIEFOT and IoT Security and Visibility

Sample DeploymentArchitecturePurdue ModelExampleYou can tailor the Nozomi Networks solution to meet your needs by utilizing its flexiblearchitecture and integrations with other systems.INTEGRATED REMOTESYSTEMSACCESSCAMERATABLETBUSINESSCOMPUTERSOC /CONTROLCENTERLevel 4Threat IntelligenceAsset IntelligenceSUBSCRIPTIONSUBSCRIPTIONEnterprise ITLevel 3Operations (ICT/DMZ)DNSHISTORIANVantageSaaSLevel 2Process NetworkHMIENGINEERINGWORKSTATIONGuardian Smart PollingLevel 1Control NetworkPLC s/RTUsOPTIONALLevel 0Field NetworkSITE #1SITE #2SITE #NWorldClassPartnersNozomi Networks partners deeply with the IT/OT services and technology companies youtrust. These include: Strategic alliances with enterprise IT and managed security providers Technology integrations with leading IT/OT solutions Global network of SI, VAR and distribution partnersVisit nozominetworks.com/partners for more information.SOLUTION BRIEFOT and IoT Security and Visibility11