Pattern FO-E

One-way release from OT, with a controlled return

Out is the default. Anything coming back is a separate link with its own approval.

Request a quote Talk to an engineer

Area: Fiber & OT
Environments: 3
Products used: 5

How it is built

One-way path
Data path
Path that does not exist

Control system and historian on the inside, a diode out to reporting — and nothing back.

Used in these environments

Switching station with SCADA releaseMeasurements must leave the station without opening a way back in.
Water treatment and distributionThe distances between pumping stations are set by geography, and the budget has to be calculated rather than assumed.
MineClassified areas require ATEX or IECEx, and the catalogue carries no such data.

How it works

Measurements, events and reports leave the OT network through a diode. Nothing comes back on that path.

Out is the default

Every request to add a return path deserves the same treatment: a separate link, a separate approval and a named owner. Handled as an operational change rather than as a decision, the return path arrives without anyone assessing it.

The historian belongs on the inside

Putting the historian on the office side means the OT network has to answer queries. Putting it inside means it only has to send. The second is the one that survives an incident on the office network.