Case study · Manufacturing

Remote management of manufacturing networks

Central visibility and control of plant network equipment across several manufacturing sites.

Book a demo

The challenge

Each plant grew its own network, managed by whoever was on site. Head office cannot see what is connected, and every change needs someone at the plant.

Office IT and shop-floor OT often share the same flat network, so one infected laptop can reach production machines.

How Nexapp solved it

  • IT and OT in separate zones

    Zone firewalls and VRFs put OT and IT in separate segments; traffic between them is limited to what policy allows, and IPS inspects it.

  • Plants on one WAN

    SD-WAN connects every plant to head office with SLA-based steering across fibre, broadband and 4G/5G.

  • One console for every site

    Instaroute SDWAN Lite 2.0 shows the health, signal and data usage of every router, with zero-touch set-up and canary firmware rollout, wave by wave.

  • Vendor access without open ports

    Engineers and equipment vendors connect through the InstaAccess client (ZTNA, SSL VPN or IPsec VPN) to only the equipment they support, and every session is logged.

What changed

  • Head office sees and manages every plant network from one place.
  • Production machines are isolated from office traffic.
  • Changes are pushed centrally instead of on site.

Planning something similar?

A Nexapp engineer can walk you through this deployment and map it to your own sites, links and devices.

Talk to our team

More case studies

All case studies and brochures