You can only separate what you know is on the network
Separating the production network from the office network is the single most effective measure in manufacturing. Before that, however, it has to be established which devices exist and who talks to whom. AIM records the installed base, assesses it through the VAS module and backs up the configurations before the first zone boundary takes effect.
Read the articleOne place that records which remote access routes exist at all
Manufacturer access routes come into being over years and in different places. If someone later asks which external access to production exists, there is usually no list. AIM manages all configured remote access routes centrally, together with the systems behind them and the associated deadlines.
Read the article