Security Visibility for the Converged Plantwide Ethernet Architecture Guide

This document is a Design and Implementation Guide for Security Visibility in the Converged Plantwide Ethernet (CPwE) architecture. It outlines the significance of cybersecurity visibility in industrial networks, emphasizing the need for a comprehensive understanding of connected devices and their communication patterns. The guide details the design considerations, operational aspects, and integration of security visibility tools, particularly focusing on Cisco Cyber Vision. It describes how this tool enhances visibility by providing insights into Industrial Automation and Control System (IACS) devices and their communication flows, which are critical for developing effective security policies. The document also presents various use cases for security visibility, including asset visibility, security posture assessment, operational insights, and intrusion detection. Additionally, it highlights the advantages of using Cisco Cyber Vision over previous solutions, such as Cisco Stealthwatch, by offering richer context and real-time monitoring capabilities. The guide aims to support manufacturers in securing their production environments against evolving cybersecurity threats.