Networking

OT Network Isolation via the Purdue Model

Network Design diagram · made in Skemio

Purdue Model network diagram demonstrating strict separation between corporate IT Level 4, an Industrial DMZ Level 3.5, and plant floor SCADA PLCs.
Purdue Model network diagram demonstrating strict separation between corporate IT Level 4, an Industrial DMZ Level 3.5, and plant floor SCADA PLCs.
Open it in SkemioMake your own

What it shows

  • Industrial DMZ (Level 3.5) stops direct routing between IT and OT layers.
  • Dual-homed jump hosts ensure credentials never cross security boundaries.
  • PLC control loops (Level 1) stay isolated from corporate workstations.

The takeaway

Strict DMZ segmentation keeps industrial automation safe from corporate malware.

More network design diagrams