Engineer connects remotely
A plant engineer connects remotely to an authorised engineering application used to monitor or maintain industrial equipment.
How it works in OT & ICS
MicroZAccess checks
MicroZAccess verifies the engineer's identity and evaluates the configured access policy before establishing the connection.
Approved application only
The engineer reaches the approved application, while other resources remain inaccessible unless separately authorised by policy.
Per-application access. Only what policy allows.
Why it matters
Benefits for industrial organisations
Limit unnecessary access
Give engineers, operators, and maintenance personnel access to approved applications instead of broad network connectivity, managed by users, groups, and policies.
Reduce lateral movement
Limit the resources reachable through a compromised user account or endpoint.
Support controlled remote maintenance
Apply consistent access policies to authorised personnel working from plants, regional offices, or remote locations.
Extend to legacy applications
Use an application connector to provide access to supported private applications without requiring changes to the application itself.
Use cases
Three industrial access problems. One Zero Trust policy model.
Remote Engineers
Remote access for plant engineers
Scenario
Engineers need to connect to designated engineering applications or maintenance systems hosted within a plant network while working from an authorised remote location.
What the solution does
MicroZAccess verifies the user's identity and applies the configured per-application access policy before allowing access to the designated resource.
Outcome
Engineers can reach the applications they need without receiving unrestricted access to the industrial network.
Third-Party Maintenance
Third-party maintenance access
Scenario
An external maintenance provider needs temporary access to a specific application or system to diagnose an industrial equipment issue.
What the solution does
The organisation grants access to the relevant application according to an approved policy and revokes or changes that access when the maintenance requirement ends.
Outcome
External personnel receive controlled access to authorised resources rather than broad connectivity to the facility.
Team Separation
Protecting access to engineering and operations systems
Scenario
Engineering, production monitoring, and administrative teams use different applications within the same industrial environment.
What the solution does
Per-application access policies restrict each authorised user to the resources approved for their role.
Outcome
Access to sensitive industrial applications is more narrowly controlled, reducing unnecessary exposure between teams.
Keep Exploring
Go Deeper
See how Application access works
Give employees, auditors, and vendors access to specific banking applications only, not the whole network, with MicroZAccess enforcing every session.
Read the full solution →Manufacturing
See how COSGrid provides solutions for Manufacturing
Let’s see how COSGrid secures IoT devices and protects factory networks from threats that spread across connected machines.
Explore the Industry →The Next Solution
See how Next Generation firewall works
Inspect and control traffic across branches and data centres, blocking threats before they reach critical banking systems, with NexusShield NGFW.
Read the full solution →How it works in OT & ICS
Identify the boundaries
The organisation identifies the network boundaries between corporate IT, industrial operations, and other connected environments.
NexusShield inspects
NexusShield applies configured firewall rules and supported security inspection capabilities to traffic traversing the protected boundary.
Policy decides
Unauthorised or suspicious traffic is handled according to the configured security policies, helping limit unwanted communication between connected environments.
Why it matters
Benefits for industrial organisations
Protect network boundaries
Enforce security policies between designated corporate and industrial network segments.
Limit unnecessary connectivity
Apply traffic rules to approved and unauthorised communication paths, so communication is limited to what the configured policy permits.
Strengthen defence in depth
Add network-level security controls alongside identity-based access and existing industrial safeguards.
Enforce policy consistently
Apply consistent firewall policies at the network locations where NexusShield is deployed.
Use cases
Three network exposure problems. One boundary protection model.
IT and OT Separation
Separating corporate IT from industrial operations
Scenario
A manufacturing organisation connects its corporate network to production monitoring systems and other operational resources.
What the solution does
NexusShield enforces configured security rules at the designated network boundary, allowing only the communication permitted by policy.
Outcome
The organisation can reduce unnecessary traffic between corporate IT and industrial environments.
Connected Facilities
Protecting connectivity to critical facilities
Scenario
A utility or industrial enterprise operates multiple facilities with network connections to centralised IT services.
What the solution does
NexusShield applies security policies to the traffic crossing the protected network boundaries, according to the organisation's approved architecture.
Outcome
Connected facilities benefit from controlled network communication and additional protection at designated boundaries.
Sensitive Services
Restricting access to sensitive industrial services
Scenario
Only specific systems should communicate with selected industrial servers or supporting services.
What the solution does
Network policies restrict traffic according to supported rules, source and destination details, and configured security controls.
Outcome
Unnecessary communication paths can be restricted, helping reduce exposure of sensitive systems.
Keep Exploring
Go Deeper
See how Application access works
Give employees, auditors, and vendors access to specific banking applications only, not the whole network, with MicroZAccess enforcing every session.
Read the full solution →Manufacturing
See how COSGrid provides solutions for Manufacturing
Let’s see how COSGrid secures IoT devices and protects factory networks from threats that spread across connected machines.
Explore the Industry →The Next Solution
See how Next Generation firewall works
Inspect and control traffic across branches and data centres, blocking threats before they reach critical banking systems, with NexusShield NGFW.
Read the full solution →How it works in OT & ICS
Define what to manage
The organisation identifies the industrial facilities, users, applications, and network connections that need to be managed through the supported Z3 SASE deployment.
Configure policies
Administrators configure the applicable security and connectivity policies through the platform.
Manage from one console
The organisation manages the supported capabilities through a unified console, reducing the need to administer each included function independently.
Why it matters
Benefits for industrial organisations
Simplify security management
Bring supported security and connectivity functions together under one management platform.
Keep policies consistent
Apply appropriate policies across connected facilities and remote locations, managing supported requirements across multiple sites.
Improve administrative visibility
Use the platform's available monitoring and reporting capabilities to help oversee managed environments.
Reduce tool fragmentation
Consolidate supported capabilities where they can replace separately managed point products.
Use cases
Three multi-site management problems. One unified platform.
Multiple Plants
Managing security across multiple plants
Scenario
A manufacturing organisation operates several plants and regional facilities, each requiring secure connectivity and consistent administration.
What the solution does
Z3 SASE provides a unified management platform for its supported security and networking functions across the applicable deployment.
Outcome
Administrators can manage supported capabilities through a common console instead of maintaining completely separate management processes for every included function.
Plants and Offices
Connecting industrial facilities and corporate offices
Scenario
Plants need connectivity to corporate services, centralised applications, and other approved enterprise resources.
What the solution does
Z3 SASE brings supported security and networking capabilities together to help manage the organisation's connectivity and security requirements.
Outcome
The organisation can simplify management across connected facilities while applying appropriate policies to the supported services.
Connectivity Visibility
Improving visibility into user experience and connectivity
Scenario
Employees report slow access to enterprise applications used for production coordination, inventory management, or facility operations.
What the solution does
Where the applicable DEM capabilities are deployed and supported, the organisation can use available experience and connectivity telemetry to investigate performance issues.
Outcome
IT teams gain additional information to help identify and troubleshoot connectivity or application-experience problems affecting industrial operations.
Keep Exploring
Go Deeper
See how Application access works
Give employees, auditors, and vendors access to specific banking applications only, not the whole network, with MicroZAccess enforcing every session.
Read the full solution →Manufacturing
See how COSGrid provides solutions for Manufacturing
Let’s see how COSGrid secures IoT devices and protects factory networks from threats that spread across connected machines.
Explore the Industry →The Next Solution
See how Next Generation firewall works
Inspect and control traffic across branches and data centres, blocking threats before they reach critical banking systems, with NexusShield NGFW.
Read the full solution →
