SOLUTION OVERVIEW

Tenable.ot for Waterfall

Business Challenge
Industrial control systems (ICS) are the bedrock of manufacturing processes
and critical infrastructure. It is essential that these systems, which operateon operational technology (OT) networks, execute flawlessly and without
fail. One of the major and more recent threats to this goal is the increase
in security-related issues that specifically target your industrial network.
The combination of an increased attack surface and attack vectors forces
organizations to re-examine their entire security posture.
Convergence of your IT and OT environments is one of the larger factors that
contributes to the increase in your attack surface and vectors. What you once
physically air-gapped, now requires technology to view and manage IT and OT
activity and threats without creating new ones.

Solution
Tenable.ot protects industrial networks from cyber threats, malicious insiders
and human error.
From threat detection and mitigation to asset tracking, vulnerability
management, configuration control and active query checks, Tenable.ot’s
capabilities maximize the safety and reliability of your operational andcritical infrastructure environments.
Tenable.ot delivers comprehensive situational awareness across all sites andrespective OT assets—from Windows servers to PLC backplanes—in a single
pane of glass. With today’s emerging threats, you need full visibility, security
and control between your IT and OT environments, and where appropriate,
you should separate your OT network from your IT network. In such cases,
you should deploy the Waterfall USG in your OT network, where you need
360-degree monitoring.
By integrating Waterfall USG with Tenable.ot, you can trust that your internaland critical network is physically inaccessible from your external network
while Tenable.ot monitors your sensitive network.

TechnologyComponents• Tenable.ot• Waterfall Unidirectional Security Gateway (USG)

The Challenge• IT and OT convergence increases the attack
surface and attack vectors for your OT networks• Achieving a comprehensive view in a single
pane of glass• Legacy OT systems are not specificallyarchitected with built-in security• Increased complexity and distribution ofnetworks makes security and control of yourenvironment difficult• Increased targeting of manufacturing andcritical infrastructure

Key Benefits• Enables visibility, security and control of yourOT network without introducing the risk oflateral threats• Data can securely flow between different
elements on different network segments
without introducing risk
• An integrated solution makes it easy toconfigure and deploy network sensors in any
part of your network architecture• Tenable.ot detects threats that Waterfall
Unidirectional Gateways block or stop
• Waterfall Unidirectional Gateways provide
physical protection for industrial networks
while allowing critical data and authorized
data to flow between IT and OT segments for
improved visibility, security and control.

SOLUTION OVERVIEWKey Components
There are three key scenarios whereTenable.ot and Waterfall work together topass needed data while ensuring a diodebased air-gap between networks:

1. A sensor is located on the critical/OT
network and forwards captured traffic
to Tenable.ot, which resides outside of
the OT network. A Waterfall USG protects
your industrial network and the sensor
so authorized traffic can securely passthrough the gateway.

Mirrored TrafﬁcWaterfall Unidirectional
Security Platform
Industrial NetworkWorkstationHistorian

SwitchSensor

HMISensor

Switch.ot

Panel

SCADA

Switch.ot

PLC

PLC

Panel

RTU

PLC

SIEM

Syslog Messages

Waterfall Unidirectional
Security Platform

2. T enable.ot, which is part of yourcritical network, will send alerts/syslog
messages to a SIEM, which resides
outside of your critical network.

Industrial Network
Workstation

HistorianSwitchSensorHMI

Switch.ot

Panel

PLC

SensorSCADA

Switch.ot

Panel

PLC

RTU

PLC

Solution Overview / Waterfall Security / 2

SOLUTION OVERVIEWAB OUT T E N AB LE
Tenable®, Inc. is the Cyber
Exposure company. Over 30,000
organizations around the globerely on Tenable to understand andreduce cyber risk. As the creator ofNessus®, Tenable extended its
expertise in vulnerabilities todeliver the world’s first platform tosee and secure any digital asset on
any computing platform. Tenable
customers include more than 50
percent of the Fortune 500, morethan 30 percent of the Global 2000
and large government agencies.
Learn more at www.tenable.com.

Forwarded TrafﬁcWaterfall Unidirectional
Security Platform
Industrial Network
Workstation

HistorianSwitchSensorHMI

Switch.ot

A B O U T W AT E R FA L L S ECU R I T Y
Waterfall Security Solutions is
the global leader in industrial
cybersecurity, protecting criticalindustrial networks since 2007.
Our mission is to revolutionize
how entire industries protect
physical assets and industrial
processes from cyber attacks.
Waterfall’s patented, unidirectional
products enable safe IT/OT
integration, remote monitoring anddiagnostics, cloud connectivity andtamper-proof forensics, without
the vulnerabilities that always
accompany firewalled connectivity.

Panel

PLC

SensorSCADA

Switch.ot

Panel

PLC

RTU

PLC

3. The Waterfall USG captures traffic from your critical network through alocal mirror or SPAN port and makes that traffic available directly to an ICP(located outside of the critical network) for analysis.

Learn more: waterfall-security.com

More Information
For support please contact: support@tenable.com

COPYRIGHT 2020 TENABLE, INC. ALL RIGHTS RESERVED. TENABLE, TENABLE.IO, TENABLE NETWORKSECURITY, NESSUS, SECURITYCENTER, SECURITYCENTER CONTINUOUS VIEW AND LOG CORRELATIONENGINE ARE REGISTERED TRADEMARKS OF TENABLE, INC. TENABLE.SC, TENABLE.OT, LUMIN, INDEGY,ASSURE, AND THE CYBER EXPOSURE COMPANY ARE TRADEMARKS OF TENABLE, INC. ALL OTHERPRODUCTS OR SERVICES ARE TRADEMARKS OF THEIR RESPECTIVE OWNERS.

Solution Overview / Waterfall Security / 3