WEBVTT

1
00:00:00.050 --> 00:00:07.050
Use the industrial zone audit to find unprotected paths between configured levels.

2
00:00:07.100 --> 00:00:16.100
This prepared lab has Cell One at level one and a plant network at level two.

3
00:00:20.700 --> 00:00:25.200
The firewall blocks the selected destination address.

4
00:00:25.850 --> 00:00:32.350
A second destination still answers, confirming that the permitted path works.

5
00:00:37.950 --> 00:00:44.450
Before the bypass is opened, the audit reports no unprotected path.

6
00:00:44.600 --> 00:00:50.600
A direct connection now provides a route around the firewall.

7
00:00:54.950 --> 00:01:00.250
The previously blocked address answers through this bypass.

8
00:01:05.250 --> 00:01:11.750
Open IoT Operations and choose Zone audit to inspect the findings.

9
00:01:11.800 --> 00:01:18.300
Each row identifies the source zone, destination zone and their levels.

10
00:01:18.350 --> 00:01:24.850
Read the complete device path and the reason for each finding.

11
00:01:24.900 --> 00:01:32.900
The controller has no IP address here, so its finding describes a connected path.

12
00:01:40.200 --> 00:01:45.700
Close the bypass interface to remove the unprotected route.

13
00:01:46.300 --> 00:01:50.350
The selected destination is blocked again.

14
00:01:50.950 --> 00:01:55.900
The independent permitted destination continues to answer.

15
00:01:58.800 --> 00:02:05.800
Return to Zone audit and confirm that the unprotected paths have cleared.

16
00:02:05.900 --> 00:02:15.400
Review firewall and access rules, and test traffic separately; this audit does not certify a security policy.