Overview

Tenable OT Security (OT Security) protects industrial networks from cyber threats, malicious insiders, and human error. From threat detection and mitigation to asset tracking, vulnerability management, configuration control and Active Query checks, OT Security’s ICS (Industrial Control Systems) security capabilities maximize your operational environment's visibility, security, and control.

OT Security offers comprehensive security tools and reports for IT security personnel and OT engineers. It provides visibility into converged IT/OT segments and ICS activity, and makes you aware of situations across all sites and their respective OT assets—from Windows Servers to PLC backplanes—in a single pane of glass.

OT Security enables ICS engineering and security professionals to configure their own policies to alert for specific unauthorized or important activities as well as for various anomalies in the ICS network. You can configure OT Security to send notifications using the Cisco Express Forwarding (CEF) protocol to an external syslog server. This allows you to make the information available in real time to those responsible for implementing the necessary mitigation measures. This guide explains the format and contents of those CEF syslog messages sent from OT Security to your syslog server, like you'd see in Security Information and Event Management (SIEM) solutions.