Cisco Cyber Vision uncovers the smallest details of the industrial infrastructure. It automatically builds a detailed inventory of all connected assets, including their communication patterns, vulnerabilities, rack slot configurations, vendor references, serial numbers, and more. You now have all the required information to drive OT network segmentation and security hygiene. All this OT context is shared with your existing security tools so you can run forensic investigations across both the IT and OT domains and build security policies that are appropriate for your industrial operations.

The Cyber Vision visibility capability is embedded into Cisco’s network equipment, making it very easy to deploy at scale: No need for dedicated security appliances or SPAN collection networks. Network managers will appreciate the unique simplicity and the lower costs of this edge architecture. It is also extremely efficient: As the discovery mechanism is initiated where industrial devices are connected, messages are not blocked by firewalls or NAT boundaries, resulting in 100% visibility.

Cisco Cyber Vision combines protocol analysis, intrusion detection, vulnerability detection, and behavioral analysis to monitor your OT security posture. It automatically calculates risk scores for each component, device, and any specific parts of your operations to highlight critical issues so you can prioritize what needs to be fixed. Each score comes with guidance on how to reduce your exposure so you can be proactive and build an improvement process to limit risks.

Cyber Vision’s detection engine leverages threat intelligence from Cisco Talos, one of the world’s leading cybersecurity research team and the official developer of Snort signature files. Cyber Vision is also fully integrated with Cisco security platforms, and market leading SIEMs, firewalls, and CMDBs so you can extend IT security to your industrial operations.

Cisco Cyber Vision decodes industrial protocols to keep track of process events, asset modifications, and variable changes. It provides insights into network issues, device misconfigurations, communication problems between devices, unexpected changes to industrial processes, malicious traffic, and more so you have all the information you need to improve network efficiency, troubleshoot issues faster, and reduce downtime.