OT Network Management
Manage IT and OT network configurations in a single unified platform. Non-intrusive configuration backup for SCADA systems, PLCs, HMIs, and industrial switches, alongside your Cisco, Juniper, and Fortinet equipment. Designed for isolated industrial networks with zero tolerance for downtime.
- ✓Unified IT/OT inventory in a single CMDB
- ✓Siemens, Schneider Electric, Rockwell Automation, ABB support
- ✓Isolated deployment, no internet required
- ✓Non-intrusive, read-only backup for OT devices
- ✓NIS2 Article 21 & IEC 62443 compliance reporting
- ✓Strict change approval workflow with maintenance windows
Industrial Networks Deserve the Same Rigor as IT, With Different Rules
OT networks have been managed with spreadsheets, tribal knowledge, and vendor-specific tools for decades. When a PLC configuration is lost after a hardware failure, recovery means hours or days of manual reconstruction, during which production is stopped. When a SCADA configuration changes without documentation, auditors and incident responders have no forensic trail to follow. ConnectMyAssets brings the same systematic configuration management that IT networks rely on to OT environments, adapted for the zero-downtime, complete network isolation, and safety constraints that make industrial networks unique.
Configuration Management Built for Industrial Networks
From unified IT/OT inventory to isolated network deployment and OT compliance, every capability is designed for the operational constraints of industrial environments.
IT/OT Unified Inventory
A single CMDB that covers both IT and OT assets in one consolidated view. Network routers, firewalls, and switches sit alongside PLCs, HMIs, SCADA servers, and industrial switches. Each device carries its full metadata, vendor, model, firmware version, site location, and operational criticality. Your IT and OT teams share the same source of truth, eliminating the spreadsheet silos that create blind spots during incidents.
Industrial Device Support
ConnectMyAssets supports the full spectrum of industrial vendors alongside traditional IT vendors. On the OT side: Siemens (SCALANCE switches, S7 PLCs), Schneider Electric (ConneXium, Modicon), Rockwell Automation (Stratix switches, ControlLogix), and ABB. On the IT side: Cisco, Juniper, Fortinet, Palo Alto, Aruba, and 100+ others. A single platform handles both worlds without requiring separate tools for each environment.
Isolated Network Deployment, No Internet Required
Industrial networks are typically fully isolated from the internet and often from the corporate IT network. ConnectMyAssets is designed for this reality. The platform can be deployed entirely on-premises inside your OT DMZ, with no outbound internet connectivity required. All backups, audits, and compliance reports run locally. This architecture meets the strict security requirements of critical infrastructure operators without compromising network isolation.
Non-Intrusive Backup
OT networks have zero tolerance for disruption. ConnectMyAssets uses passive, read-only collection methods to retrieve device configurations without generating traffic that could interfere with industrial processes. Backup schedules are configurable to run during planned maintenance windows. The platform never pushes unsolicited commands to OT devices. If a device is unreachable during a scheduled backup, the system logs the miss and retries at the next window, it does not force a connection.
OT Compliance, NIS2 & IEC 62443
Critical infrastructure operators (OIV in France, essential entities under NIS2 in Europe) face mandatory cybersecurity obligations. NIS2 Article 21 requires documented asset management, configuration control, and incident response capabilities for network equipment. IEC 62443 defines security levels for industrial automation and control systems. ConnectMyAssets generates audit-ready compliance reports aligned to both frameworks, documenting every configuration change, access event, and backup snapshot with timestamps and user attribution.
Change Management for OT
Changes to OT configurations carry far higher risk than changes to IT equipment. A misconfigured PLC or SCADA server can halt production, damage equipment, or create safety hazards. ConnectMyAssets enforces a strict multi-step approval workflow for any configuration change in the OT environment. Changes must be reviewed and approved by designated OT engineers before deployment. All changes are scheduled to execute only during pre-defined maintenance windows, and a full configuration backup is automatically taken before any change is applied.
How It Works
Deploy On-Premises in Your OT Network
Install ConnectMyAssets on a dedicated server inside your OT DMZ or isolated industrial network. No internet connectivity required. The platform runs entirely within your security perimeter, communicating only with the devices in your OT network segments. Deployment takes less than a day and requires no changes to your existing network architecture or firewall rules beyond allowing SSH read-only access from the ConnectMyAssets server to your managed devices.
Inventory & Backup All IT and OT Devices
ConnectMyAssets discovers and inventories both IT and OT devices in your network. Add devices manually, import from a CSV, or use network discovery. The platform identifies vendors and models automatically and begins taking configuration backups on your defined schedule. Each backup is stored with a full diff against the previous version, so you always know exactly what changed, when it changed, and who made the change. Industrial devices like Siemens SCALANCE switches and Schneider ConneXium are handled with the same rigor as Cisco or Juniper equipment.
Monitor, Audit & Comply
With your full IT and OT inventory backed up and version-controlled, ConnectMyAssets continuously monitors for unauthorized configuration changes. Any deviation from the approved baseline triggers an alert to your security and operations teams. The compliance engine runs automated checks against NIS2 Article 21 and IEC 62443 requirements and generates audit-ready reports on demand. When auditors or regulators request evidence of your configuration management practices, ConnectMyAssets produces a complete audit trail in minutes.
Frequently Asked Questions
Common questions about OT network management
What is OT network management and why does it differ from IT?
OT (Operational Technology) refers to the hardware and software that monitors and controls physical processes, industrial machinery, manufacturing lines, power grids, water treatment plants, and similar infrastructure. OT networks use specialized protocols (Modbus, DNP3, Profinet, EtherNet/IP) and devices (PLCs, SCADA servers, HMIs, industrial switches) that are fundamentally different from IT equipment. Unlike IT, where a brief outage means a slow webpage, an OT outage can halt production, cause physical damage, or create safety risks. This means OT management tools must be non-intrusive, able to operate in fully isolated environments with no external connectivity, and designed with operational continuity as the primary constraint.
What is the difference between IT and OT network management?
IT network management focuses on availability, performance, and security of data networks, routers, switches, firewalls, and servers. The primary concern is uptime of communication services. OT network management focuses on the reliability and safety of operational processes. OT devices often run proprietary firmware, use industrial protocols not found in IT, and must never be restarted or reconfigured during production hours. Maintenance windows in OT can be months apart. A unified platform like ConnectMyAssets bridges both worlds, applying appropriate management methods to each device type while giving a single pane of glass to operators who need visibility across the entire infrastructure.
Can ConnectMyAssets interact with PLCs and SCADA systems without disrupting operations?
Yes. ConnectMyAssets uses read-only, non-intrusive collection methods for OT devices. For PLCs and SCADA systems, the platform retrieves configuration exports using vendor-supported read-only interfaces, it does not write to the device or send commands that could affect operational state. Backup collection is rate-limited and scheduled for maintenance windows. ConnectMyAssets never initiates a configuration push to an OT device without explicit approval through the multi-step change management workflow. The platform is designed to be invisible to the industrial process running on the OT network.
What does NIS2 Article 21 require for OT network configuration management?
NIS2 Article 21 requires essential and important entities, including operators of critical infrastructure (OIV in France), to implement appropriate cybersecurity risk management measures. For network configuration, this translates to documented asset inventories, change management processes with audit trails, configuration backup and recovery capabilities, and access control over who can modify network and OT device configurations. ConnectMyAssets provides all of these capabilities natively: a complete asset inventory with version-controlled configuration backups, a full audit trail of all changes, RBAC for access control, and automated compliance reports that map to NIS2 Article 21 requirements.
How does ConnectMyAssets work in an OT network with no internet access?
ConnectMyAssets is designed from the ground up to operate in fully isolated environments with no external connectivity. The platform is deployed as an on-premises appliance or virtual machine inside your OT network, with no requirement for internet connectivity. All features, configuration backup, change detection, compliance reporting, audit trails, dashboards, function entirely locally. Software updates can be delivered via USB or an internal update server. The platform does not require any cloud connectivity for any operational function. This makes it suitable for the most sensitive industrial environments, including nuclear, defense, energy, and water infrastructure.
Does ConnectMyAssets support Siemens SCALANCE and S7 PLCs?
Yes. ConnectMyAssets includes native support for Siemens industrial equipment including SCALANCE industrial Ethernet switches and S7 PLCs (S7-300, S7-400, S7-1200, S7-1500). The platform uses Siemens-native interfaces for configuration backup: SSH for SCALANCE switches and vendor-supported export mechanisms for S7 PLCs, ensuring that backup collection is non-intrusive and does not interfere with PLC program execution. Configuration backups include the full device configuration, including VLAN settings, port configurations, and security parameters. The platform also supports Schneider Electric ConneXium and Modicon, Rockwell Automation Stratix switches, and ABB industrial networking equipment.
Unified Configuration Management for IT and OT Networks
Non-intrusive configuration backup for your SCADA systems, PLCs, and industrial switches, alongside your entire IT network. Fully isolated deployment supported, NIS2 compliant, deployable in your OT DMZ today.