--- title: "Monitoring OT Networks Securely with TAPs and NPBs: A Purdue Model Approach" description: Learn how to securely monitor OT networks using TAPs and NPBs following the Purdue model approach. Enhance cybersecurity, prevent downtime, and maintain regulatory compliance. image: https://insights.profitap.com/hubfs/Operation%20technology%20network%20diagram.jpeg --- [![Profitap](https://insights.profitap.com/hubfs/profitap-logo-white-rev1.png "Profitap")](https://www.profitap.com) - [Solutions](https://www.profitap.com/solutions/) - Products - Resources - Company - - - - # Profitap Blog ### Recent Posts ### Categories - [Network Monitoring (75)](https://insights.profitap.com/topic/network-monitoring) - [Insights (38)](https://insights.profitap.com/topic/insights) - [IOTA (32)](https://insights.profitap.com/topic/iota) - [Copper TAPs (31)](https://insights.profitap.com/topic/copper-taps) - [ProfiShark (24)](https://insights.profitap.com/topic/profishark) - [Fiber TAPs (23)](https://insights.profitap.com/topic/fiber-taps) - [Data Center (17)](https://insights.profitap.com/topic/data-center) - [Network Packet Brokers (14)](https://insights.profitap.com/topic/network-packet-brokers) - [Network Visibility and Cybersecurity (14)](https://insights.profitap.com/topic/network-visibility-and-cybersecurity) - [Network Security (13)](https://insights.profitap.com/topic/network-security) - [News (13)](https://insights.profitap.com/topic/news) - [Product Update (11)](https://insights.profitap.com/topic/product-update) - [Field Service (10)](https://insights.profitap.com/topic/field-service) - [Case Study (3)](https://insights.profitap.com/topic/case-study) - [OIDA (3)](https://insights.profitap.com/topic/oida) - [Events (2)](https://insights.profitap.com/topic/events) - [Heroes of Packet Analysis (2)](https://insights.profitap.com/topic/heroes-of-packet-analysis) - [Solutions for Government and Defense (2)](https://insights.profitap.com/topic/solutions-for-government-and-defense) - [Power and Utilities Solutions (1)](https://insights.profitap.com/topic/power-and-utilities-solutions) - [Solutions for Logistics (1)](https://insights.profitap.com/topic/solutions-for-logistics) - [cloud (1)](https://insights.profitap.com/topic/cloud) see all ### Archives - [July 2026 (1)](https://insights.profitap.com/archive/2026/07) - [June 2026 (1)](https://insights.profitap.com/archive/2026/06) - [May 2026 (3)](https://insights.profitap.com/archive/2026/05) - [April 2026 (2)](https://insights.profitap.com/archive/2026/04) - [March 2026 (3)](https://insights.profitap.com/archive/2026/03) - [February 2026 (3)](https://insights.profitap.com/archive/2026/02) - [January 2026 (3)](https://insights.profitap.com/archive/2026/01) - [November 2025 (1)](https://insights.profitap.com/archive/2025/11) - [October 2025 (4)](https://insights.profitap.com/archive/2025/10) - [September 2025 (1)](https://insights.profitap.com/archive/2025/09) - [August 2025 (2)](https://insights.profitap.com/archive/2025/08) - [July 2025 (3)](https://insights.profitap.com/archive/2025/07) - [May 2025 (1)](https://insights.profitap.com/archive/2025/05) - [March 2025 (2)](https://insights.profitap.com/archive/2025/03) - [February 2025 (3)](https://insights.profitap.com/archive/2025/02) - [January 2025 (2)](https://insights.profitap.com/archive/2025/01) - [December 2024 (1)](https://insights.profitap.com/archive/2024/12) - [November 2024 (2)](https://insights.profitap.com/archive/2024/11) - [October 2024 (1)](https://insights.profitap.com/archive/2024/10) - [September 2024 (3)](https://insights.profitap.com/archive/2024/09) - [August 2024 (8)](https://insights.profitap.com/archive/2024/08) - [July 2024 (7)](https://insights.profitap.com/archive/2024/07) - [June 2024 (1)](https://insights.profitap.com/archive/2024/06) - [May 2024 (6)](https://insights.profitap.com/archive/2024/05) - [April 2024 (1)](https://insights.profitap.com/archive/2024/04) - [March 2024 (3)](https://insights.profitap.com/archive/2024/03) - [February 2024 (2)](https://insights.profitap.com/archive/2024/02) - [January 2024 (1)](https://insights.profitap.com/archive/2024/01) - [December 2023 (2)](https://insights.profitap.com/archive/2023/12) - [November 2023 (1)](https://insights.profitap.com/archive/2023/11) - [July 2023 (1)](https://insights.profitap.com/archive/2023/07) - [June 2023 (1)](https://insights.profitap.com/archive/2023/06) - [April 2023 (1)](https://insights.profitap.com/archive/2023/04) - [February 2023 (1)](https://insights.profitap.com/archive/2023/02) - [January 2023 (1)](https://insights.profitap.com/archive/2023/01) - [December 2022 (1)](https://insights.profitap.com/archive/2022/12) - [October 2022 (1)](https://insights.profitap.com/archive/2022/10) - [April 2022 (1)](https://insights.profitap.com/archive/2022/04) - [March 2022 (1)](https://insights.profitap.com/archive/2022/03) - [February 2022 (2)](https://insights.profitap.com/archive/2022/02) - [January 2022 (1)](https://insights.profitap.com/archive/2022/01) - [December 2021 (2)](https://insights.profitap.com/archive/2021/12) - [October 2021 (2)](https://insights.profitap.com/archive/2021/10) - [September 2021 (1)](https://insights.profitap.com/archive/2021/09) - [August 2021 (1)](https://insights.profitap.com/archive/2021/08) - [June 2021 (1)](https://insights.profitap.com/archive/2021/06) - [May 2021 (1)](https://insights.profitap.com/archive/2021/05) - [March 2021 (2)](https://insights.profitap.com/archive/2021/03) - [February 2021 (1)](https://insights.profitap.com/archive/2021/02) - [January 2021 (2)](https://insights.profitap.com/archive/2021/01) - [November 2020 (1)](https://insights.profitap.com/archive/2020/11) - [September 2020 (1)](https://insights.profitap.com/archive/2020/09) - [August 2020 (1)](https://insights.profitap.com/archive/2020/08) - [July 2020 (2)](https://insights.profitap.com/archive/2020/07) - [June 2020 (2)](https://insights.profitap.com/archive/2020/06) - [April 2020 (2)](https://insights.profitap.com/archive/2020/04) - [March 2020 (2)](https://insights.profitap.com/archive/2020/03) - [February 2020 (4)](https://insights.profitap.com/archive/2020/02) - [September 2019 (1)](https://insights.profitap.com/archive/2019/09) - [August 2019 (1)](https://insights.profitap.com/archive/2019/08) - [May 2019 (2)](https://insights.profitap.com/archive/2019/05) - [April 2019 (1)](https://insights.profitap.com/archive/2019/04) - [March 2019 (1)](https://insights.profitap.com/archive/2019/03) - [February 2019 (1)](https://insights.profitap.com/archive/2019/02) - [December 2018 (2)](https://insights.profitap.com/archive/2018/12) - [October 2018 (2)](https://insights.profitap.com/archive/2018/10) - [August 2018 (1)](https://insights.profitap.com/archive/2018/08) - [July 2018 (2)](https://insights.profitap.com/archive/2018/07) - [June 2018 (1)](https://insights.profitap.com/archive/2018/06) - [May 2018 (4)](https://insights.profitap.com/archive/2018/05) - [April 2018 (1)](https://insights.profitap.com/archive/2018/04) - [March 2018 (2)](https://insights.profitap.com/archive/2018/03) - [February 2018 (1)](https://insights.profitap.com/archive/2018/02) - [January 2018 (1)](https://insights.profitap.com/archive/2018/01) - [December 2017 (1)](https://insights.profitap.com/archive/2017/12) - [November 2017 (2)](https://insights.profitap.com/archive/2017/11) - [October 2017 (1)](https://insights.profitap.com/archive/2017/10) - [July 2017 (1)](https://insights.profitap.com/archive/2017/07) - [May 2017 (2)](https://insights.profitap.com/archive/2017/05) - [February 2016 (1)](https://insights.profitap.com/archive/2016/02) - [December 2015 (2)](https://insights.profitap.com/archive/2015/12) - [June 2015 (2)](https://insights.profitap.com/archive/2015/06) - [May 2015 (3)](https://insights.profitap.com/archive/2015/05) see all ### Stay up to date [Follow @Profitap](https://twitter.com/Profitap) [Return to Blog](https://insights.profitap.com/) # Monitoring OT Networks Securely with TAPs and NPBs: A Purdue Model Approach - [Tweet](https://twitter.com/share) Operational Technology (OT) networks are used across many industries, including manufacturing, energy, transportation, and healthcare. Unlike traditional IT networks, disruptions or failures in OT networks can directly impact physical assets, cause downtime, and compromise safety. Due to their critical nature, OT systems require a special monitoring approach. The equipment used for monitoring must support real-time data processing and, under no circumstances, compromise the network's security or performance. On the other hand, OT networks typically consist of legacy systems with proprietary industrial network protocols that cannot be easily monitored using traditional IT network monitoring tools. Getting visibility into this data requires specialized equipment that can capture and interpret these unique protocols. # ***Purdue model*** The Purdue Model for Industrial Control Systems (ICS) security is a framework that outlines a multilayered approach to safeguarding sensitive industrial environments. Originally developed at Purdue University and further refined by the International Society of Automation (ISA) as part of the ISA-99 standard, the model defines six distinct layers of network segmentation, each designed to serve a specific function in protecting and managing industrial operations. These layers range from the enterprise level down to the actual physical processes. ![Purdue-graph-3](https://insights.profitap.com/hs-fs/hubfs/Purdue-graph-3.png?width=700&height=875&name=Purdue-graph-3.png) The primary objective of the Purdue Model is to create clear, secure boundaries between the various levels of an organization’s network, particularly separating enterprise and production operations. This segmentation helps prevent the propagation of cyber threats across different business areas, thereby enhancing the overall security posture. By implementing this structured approach, companies can better manage and mitigate risks associated with cybersecurity threats, unauthorized access, and data breaches, ensuring their industrial control systems' continuous and reliable operation. Following this model, here are the steps to monitor industrial networks with TAPs and NPBs:   ### *Step 1: Identify critical assets* The first step in monitoring an industrial network is identifying the critical assets that need protection. This includes all devices and systems essential for the operation of the industrial process.   ### *Step 2: Segment the Network* Next, the network should be segmented according to the Purdue model’s hierarchical levels. This will allow better monitoring and analysis, which will reduce downtime if something needs to be investigated. ![Operation technology network diagram](https://insights.profitap.com/hs-fs/hubfs/Operation%20technology%20network%20diagram.jpeg?width=800&height=475&name=Operation%20technology%20network%20diagram.jpeg) ### ***Step 3: Deploy TAPs*** Network TAPs are hardware devices designed to passively monitor network traffic without interrupting its flow. Deploy them at strategic points in the network, such as between different levels or zones, to capture all data passing through. Special low-latency and 24v models are available for OT environments. We wrote an article on enhancing OT network monitoring using copper TAPs and IOTA. Copper TAPs, such as those offered by Profitap, are non-intrusive devices that capture all network traffic within a single cable, providing separate TX/RX streams without introducing delays or interfering with existing traffic. This allows for seamless, interaction-free integration into existing networks, which is crucial in industrial environments where timing is critical and disruptions could hinder operations. [https://insights.profitap.com/enhancing-ot-network-monitoring-with-copper-taps-and-iota](https://insights.profitap.com/enhancing-ot-network-monitoring-with-copper-taps-and-iota) [![enhancing-ot-network-monitoring-2](https://insights.profitap.com/hs-fs/hubfs/enhancing-ot-network-monitoring-2%20(1).png?width=800&height=436&name=enhancing-ot-network-monitoring-2%20(1).png)](https://insights.profitap.com/enhancing-ot-network-monitoring-with-copper-taps-and-iota)[***Step 4: Set up the aggregation layer ***](https://insights.profitap.com/enhancing-ot-network-monitoring-with-copper-taps-and-iota) ### [![Booster In Line Aggregation TAP](https://insights.profitap.com/hs-fs/hubfs/Blog%20visuals/Booster%20Aggregation%20TAPs/Booster%20In%20Line%20Aggregation%20TAP.png?width=200&height=53&name=Booster%20In%20Line%20Aggregation%20TAP.png)](https://www.profitap.com/aggregation-taps/) ****** Use Booster Inline and Booster SPAN TAPs to aggregate network traffic from multiple TAPs into a single data stream. These devices are specifically designed to securely combine and forward data without any loss to monitoring tools. Thanks to their robust design and low latency, they are ideal for industrial networks where reliability is critical. [https://www.profitap.com/aggregation-taps/](https://www.profitap.com/aggregation-taps/)   ### ***Step 5: Monitor traffic***[![Vertical_layers-visual_IOTA CM](https://insights.profitap.com/hs-fs/hubfs/Vertical_layers-visual_IOTA%20CM.png?width=200&height=126&name=Vertical_layers-visual_IOTA%20CM.png)](https://www.profitap.com/iota-cm/) The IOTA can then analyze the collected traffic with multiple dashboards and forward it to a monitoring system like an Intrusion Detection System (IDS) or a Network Detection & Response (NDR).   ### ***Step 6: Identify anomalies*** Analytics tools can easily detect issues like hardware degradation, network congestion, or failing components. Applicationists can then investigate the issue directly and determine the best course of action.   ### ***Step 7: Optimize and implement*** Based on insights gained from monitoring traffic, changes can be made to make the network and application more resilient. Also, on the Network TAP and Network Packet Broker level, adding different capture locations and creating new filter rules can further help get a better overview of the network.   ### ***Step 8: Regular updates*** It is essential to regularly update security tools used for monitoring the industrial network. This will ensure that they have the latest threat intelligence as well as software functionality and can detect and mitigate new attacks or issues. By following these steps, organizations can effectively monitor their industrial networks using TAPs and NPBs while adhering to the Purdue model’s layered security approach. This helps protect critical assets from cyber threats, ensure smooth operations, and maintain regulatory compliance. ## Profitap Secure TAPs | Diode fiber TAP | 1-Link gigabit copper TAP | 8-Link gigabit copper TAP | | --- | --- | --- | | Fiber TAP with diode feature preventing light injection from the monitor ports. | 10M/100M/1G copper TAP with diode feature protecting the network from data injection from the monitor ports. | High density 10M/100M/1G copper TAP with diode feature protecting the network from data injection from the monitor ports. | | ![F1D-MOD-S-SM-MM](https://www.profitap.com/wp-content/uploads/F1D-MOD-S-SM-MM-1000px.png) | ![C1R-1G-S](https://www.profitap.com/wp-content/uploads/C1R-1G-S-1000px.png) | ![C8-1G-S](https://www.profitap.com/wp-content/uploads/C8-1G-S-1000px.png) | | [![Discover >](https://no-cache.hubspot.com/cta/default/2954816/interactive-176027741791.png)](https://insights.profitap.com/hs/cta/wi/redirect?encryptedPayload=AVxigLI1ZDD9MERoWwUgmKtzf94pJBrU1PfAmcFHW6ARXQk3XgqL0Q5nkVMKXmIOs4ehIg9JShlFvL5XgezDiwFv6JN3bnVZYWiLRZvJXayNtEblz2Etq4zgS8i9TCNegVDKGM9MyaVs3WwrzQPj4ezYA8l3troe%2BN9ccDKgA2C2S2qa5%2BUyffWKSizyzT2T&webInteractiveContentId=176027741791&portalId=2954816) | [![Discover >](https://no-cache.hubspot.com/cta/default/2954816/interactive-176029788521.png)](https://insights.profitap.com/hs/cta/wi/redirect?encryptedPayload=AVxigLLRydPytGyLGtP06G3DKDKAmN7uNOHy2Jo%2FLnmlewOF%2BfAwbuU08fJjMot5Nwa5%2B5%2FxnXKlUxEqoBzTxiOeOoTtZOeecE4pw1MyYqGrtPRMTZAfhMhHxm1aVZVLWHVoMou5DCrmg5PTeoQl56zWHrbPVuRcWYK9yQAr6%2FpZN8catA7uRU8wjmLhok5Npz5nxJnFhB1pvw%3D%3D&webInteractiveContentId=176029788521&portalId=2954816) | [![Discover >](https://no-cache.hubspot.com/cta/default/2954816/interactive-176029788543.png)](https://insights.profitap.com/hs/cta/wi/redirect?encryptedPayload=AVxigLIKMo5c9stu9x3VV6V03RDSfdi8%2F1vRCIDCvVFdeHjgLusk7KcADeplQtYmfeh6ks8wPckdqg6HechTsDrCbN8uhiR4b%2FimiG5p7K5zKhQQ4pWKSMKZ%2BRYet58P%2BpsYmLAbJYr%2BjcCndpu7OouziBztDL1KYnbXePSJ7axHiEh8MCwDjY%2B8Xm3TG7G4UPH8zFAA5BJBSw%3D%3D&webInteractiveContentId=176029788543&portalId=2954816) | [![CTA_NPBs Save costs_compressed](https://no-cache.hubspot.com/cta/default/2954816/interactive-164600646739.png)](https://insights.profitap.com/hs/cta/wi/redirect?encryptedPayload=AVxigLJ8tkaxDhWdmNKwxXRlOgacE70gjz5JsDva9R%2F8ZoijhgIOP72Qp45MJPmbtF6XCEbvkJ9wtH9zb4OUBZjbeLE%2Fb0uf73tyfsuiLqRkeNXfXePLGf9Wg3LWUcMSyNTMbrWZ%2FEfHmSRBe8Ioymr26dTOZhaPOvO67ggZeXBie0MGnBnXExe2nwWz%2Ba7nZt6Z%2FsazmDKim4CSIkVWGMQP&webInteractiveContentId=164600646739&portalId=2954816) - [Tweet](https://twitter.com/share) by [Profitap](https://insights.profitap.com/author/profitap) | Aug 16, 2024 | [Copper TAPs](https://insights.profitap.com/topic/copper-taps), [Network Packet Brokers](https://insights.profitap.com/topic/network-packet-brokers) [**Packet Capture & Analysis**](https://www.profitap.com/iota/) - [IOTA 1G](https://www.profitap.com/iota-1g/) - [IOTA 1G+](https://www.profitap.com/iota-1g-plus/) - [IOTA 10G](https://www.profitap.com/iota-10g/) - [IOTA 10G+](https://www.profitap.com/iota-10g-plus/) - [IOTA 10 CORE](https://www.profitap.com/iota-10-core/) - [IOTA 10 CORE+](https://www.profitap.com/iota-10-core-plus/) - [IOTA 100 CORE](https://www.profitap.com/iota-100-core/)   [**ProfiShark**](https://www.profitap.com/profishark-network-taps/) - [ProfiShark 100M](https://www.profitap.com/profishark-100m/) - [ProfiShark 1G](https://www.profitap.com/profishark-1g/) - [ProfiShark 1G+](https://www.profitap.com/profishark-1g-plus/) - [ProfiShark 10G](https://www.profitap.com/profishark-10g/) - [ProfiShark 10G+](https://www.profitap.com/profishark-10g-plus/)   [**Accessories**](https://www.profitap.com/accessories/) - [Transceivers](https://www.profitap.com/transceivers/) - [Data Diodes](https://www.profitap.com/data-diodes/) - [Connectivity](https://www.profitap.com/accessories/#connectivity/) [**Network Traffic Aggregators**](https://www.profitap.com/network-traffic-aggregators/) - [XX-720G](https://www.profitap.com/xx-720g-network-packet-broker/) - [XX-1800G](https://www.profitap.com/xx-1800g-network-packet-broker/) - [XX-3200G](https://www.profitap.com/xx-3200g-network-packet-broker/)   [**Network Packet Brokers**](https://www.profitap.com/network-packet-brokers/) - [X3-Series](https://www.profitap.com/x3-series-advanced-network-packet-brokers/) - [X2-2010G](https://www.profitap.com/x2-2010g-network-packet-broker/) - [X2-3200G](https://www.profitap.com/x2-3200g-network-packet-broker/) - [X2-6400G](https://www.profitap.com/x2-6400g-network-packet-broker/) - [X2-12800G](https://www.profitap.com/x2-12800g-network-packet-broker/)   **NPB Features** - [Data Masking](https://www.profitap.com/data-masking/) - [Timestamping](https://www.profitap.com/timestamping/) - [Packet Deduplication](https://www.profitap.com/packet-deduplication/) - [Tunneling & De-tunneling](https://www.profitap.com/tunneling-de-tunneling/) - [Packet Slicing](https://www.profitap.com/packet-slicing/) - [GTP IP Filtering](https://www.profitap.com/gtp-ip-filtering/) [**Network TAPs**](https://www.profitap.com/network-taps/) - [Secure TAPs](https://www.profitap.com/secure-data-access/) - [Fiber TAPs](https://www.profitap.com/fiber-taps/) - [Copper TAPs](https://www.profitap.com/copper-taps/) - [Aggregation TAPs](https://www.profitap.com/aggregation-taps/) - [Bypass TAPs](https://www.profitap.com/bypass-taps/) - [Regeneration TAPs](https://www.profitap.com/regeneration-taps/) - [Replication TAPs](https://www.profitap.com/replication-taps/)   **Cloud Visibility** - [VMware](https://www.profitap.com/vtap/) - [Kubernetes](https://www.profitap.com/cloud-tap/) - [AWS EKS](https://www.profitap.com/cloud-tap/) - [Azure VM](https://www.profitap.com/cloud-tap/#azure)   **Centralized Management** - [IOTA CM](https://www.profitap.com/iota-cm/) - [Supervisor](https://www.profitap.com/supervisor/)   [**Solutions**](https://www.profitap.com/solutions/) - [Performance analysis & diagnostics](https://www.profitap.com/performance-analysis-and-diagnostics-solutions/) - [Network troubleshooting](https://www.profitap.com/network-troubleshooting-solutions/) - [Packet forensics](https://www.profitap.com/packet-forensics-solutions/) - [Network security](https://www.profitap.com/network-security-solutions/) - [ICS/OT network monitoring](https://www.profitap.com/ics-ot-network-monitoring-solutions/) [**About Us**](https://www.profitap.com/our-story/) - [Our Story](https://www.profitap.com/our-story/) - [Events](https://www.profitap.com/events/) - [Careers](https://jobs.profitap.com/) - [News](https://news.profitap.com/)   **Resources** - [Knowledge Base](https://kb.profitap.com/) - [Software & Drivers](https://resources.profitap.com/) - [Product Portfolio](https://www.profitap.com/portfolio/) - [Blog](https://insights.profitap.com/) - [Library](https://www.profitap.com/library/) - [Product Updates](https://www.profitap.com/product-updates/) - [Academy](https://www.profitap.com/academy/)   **Partners** - [Partner with Us](https://www.profitap.com/partner-with-us/) - [Our Partners](https://www.profitap.com/our-partners/) - [Locate a Reseller](https://www.profitap.com/locate-a-reseller/)   **Contact** - [Contact Us](https://www.profitap.com/contact-us/) - [Professional Services](https://www.profitap.com/professional-services/) - [Get a Quote](https://www.profitap.com/get-a-quote/) --- © 2026 Profitap HQ B.V. and its licensors. All Rights Reserved — Profitap HQ B.V., High Tech Campus 84, 5656 AG Eindhoven, The Netherlands | [Privacy Policy](https://www.profitap.com/privacy-policy/) | [Terms and Conditions](https://www.profitap.com/terms-and-conditions/) ```json { "@context" : "http://schema.org", "@type" : "Blog", "author" : { "@type" : "Person", "name" : "Profitap" }, "dateModified" : "April 30, 2026, 8:27:05 AM", "datePublished" : "2024-08-16 07:32:51", "description" : "Learn how to securely monitor OT networks using TAPs and NPBs following the Purdue model approach. Enhance cybersecurity, prevent downtime, and maintain regulatory compliance.", "headline" : "Monitoring OT Networks Securely with TAPs and NPBs: A Purdue Model Approach", "image" : { "@type" : "ImageObject", "url" : "https://2954816.fs1.hubspotusercontent-na1.net/hubfs/2954816/Operation%20technology%20network%20diagram.jpeg" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://cdn2.hubspot.net/hubfs/2954816/Logos/Profitap-logo-black-orange-whitebg.png" }, "name" : "Profitap HQ B.V." } } ```