

Using sites and zones supports the principles of Zero Trust, and provides extra monitoring and reporting granularity.įor example, if your growing company has factories and offices in Paris, Lagos, Dubai, and Tianjin, you might segment your network as follows: Site

You'll associate each OT network sensor with a specific site and zone, so that each sensor covers only a specific area of your network. When working with OT networks, we recommend that you list all of the locations where your organization has resources connected to a network, and then segment those locations out into sites and zones.Įach physical location can have its own site, which is further segmented into zones. This step is performed by your architecture teams.

For more information, see Add an OT plan to your Azure subscription. Use the content below to learn how to plan your overall OT monitoring with Microsoft Defender for IoT, including the sites you're going to monitor, your user groups and types, and more.īefore you start planning your OT monitoring deployment, make sure that you have an Azure subscription and an OT plan onboarded Defender for IoT. This article is one in a series of articles describing the deployment path for OT monitoring with Microsoft Defender for IoT.
