Site-to-site VPN over public internet between plants and Azure. Plant servers on legacy Windows with no central governance plane. MES analytics partially cloud-resident. Defender for Cloud Azure-only; not extended to on-prem. No unified hub.
Typical concerns
- ·VPN latency jitter affecting OT analytics
- ·Plant-floor servers outside the central security perimeter
- ·No single inventory across cloud + on-prem + edge
- ·Patching plant Windows servers ad-hoc
- ·Resilience story relies on a single circuit path
Capability gaps
- ·Predictable site-to-cloud connectivity
- ·Unified governance across cloud + on-prem
- ·Multi-site hub-and-spoke
- ·Hybrid security posture
- ·OT-segmented network architecture