Cisco Cyber Vision Lab

Cisco Cyber Vision bridges the cybersecurity gap between IT and OT environments. Backed and adopted by leading industrial automation vendors, Cisco Cyber Vision  is deployed on all seven continents.

Cisco Cyber Vision reduces the complexity of OT security:

• Cisco Cyber Vision solutions are technology-agnostic and enable customers to leverage their existing IT security infrastructure to protect their OT assets & networks.
• Installing, using and maintaining Cisco Cyber Vision solutions does not require customers to disrupt operations or make substantial investments in new tools or staffing.
• Cisco Cyber Vision protects the bottom line by helping to ensure more uptime and greater efficiency across business and production operations.

Cisco Cyber Vision delivers comprehensive OT security:

• Cisco Cyber Vision improves the availability, safety and reliability of OT assets and networks within industrial enterprises and critical infrastructure.
• Cisco Cyber Vision bridges the IT/OT cybersecurity gap with the only converged IT/OT cybersecurity solution compatible across IT, OT and converged IT/OT environments.
• Cisco Cyber Vision is the only OT security provider to offer native Secure Remote Access (SRA).

Cisco Cyber Vision leverages unmatched OT protocol coverage and Passive scanning capabilities to deliver complete OT visibility and asset management controls. Cisco Cyber Vision is the only vendor to offer visibility into all three variables of risk in OT environments:

• Asset visibility: All devices on OT networks, including serial networks, as well as extensive attributes about each device.
• Network visibility: All OT network sessions and their bandwidth, actions taken, changes made and other relevant details.
• Process visibility: All OT operations and the code section and tag values of all processes related to OT assets.

This lab in its first module is designed to serve as a preconfigured environment for users to explore the Cisco Cyber Vision interface and operations at their own direction. WWT can provide a guided demo of the solution as well as coordinate a deep dive session with Cisco Cyber Vision upon email request to the listed lab owners and contributors for this deployment.  

Cisco Cyber Vision monitors span port traffic to monitor the ICS network. The network has no security controls. All traffic generated in the network is monitored and analyzed by Cyber Vision. Cisco Cyber Vision provides insight into the hosts in the network, their roles and their communications. Once traffic is baselined, new hosts or traffic baseline deviations will generate an alert.

This lab demonstrates the following Cyber Vision features:

• Discover and identify ICS assets
• Map ICS network
• Baseline ICS traffic
• Generate alerts related to ICS assets/traffic
• Become acquainted with Dashboard and Reporting capabilities

• WebUI/Sensor and monitored processes hosted on virtual ATC infrastructure
• Virtual OT/ICS environment
• Cisco Cyber Vision Version 4.0.2