Networking
7 pages in this section.
Pages
How to Deploy a Secure Twin: Three Ways Compared
Three ways to deploy a Secure Twin on an OT network: asset by asset with Twin DNS or Twin IPs, a whole subnet with Source-Based Routing, or IP and ARP NAT.
Deploy Secure Twin with Twin DNS: Split DNS Delegation
Steer assets through Access Gate by name, delegate a subdomain to the Access Gate resolver and every name in it resolves to its Secure Twin overlay address.
Deploy Secure Twin with Twin IPs: 1:1 Overlay NAT for OT
Point an asset directly at its Secure Twin overlay address so its traffic transits Access Gate for policy enforcement, with no rewiring of the network.
Deploy Secure Twin with Source-Based Routing (Policy Route)
Route an entire origin network through Access Gate with one source-based rule on the router, so a whole subnet or VLAN is protected without touching a device.
Deploy Secure Twin via IP NAT (L3): Router DNAT to Overlay
Let the router or L3 gateway destination-NAT selected flows onto the overlay, so traffic transits Access Gate with no change to the assets.
Deploy Secure Twin via ARP NAT (L2): Private VLAN Proxy ARP
Where you administer the switches, private VLAN and proxy ARP can redirect East-West traffic through Access Gate without changing the end devices.
Configuring Access Gate DNS
Give assets memorable DNS names through Access Gate, simpler access, a clean path to migrate IPs, and the foundation for SSL/TLS certificates.