AI-driven cybersecurity solution

The solution combines Siemens' Private 5G infrastructure with Palo Alto Networks' Next-Generation Firewall (NGFW), specifically optimised for AI, extensively tested to verify high availability, network resilience, and uninterrupted operations. It enables manufacturers to meet diverse industrial security requirements while maintaining the critical performance their increasingly AI-driven productions demand.

“A pharmaceutical plant has different security requirements than an automotive assembly line," said Michael Metzler, vice president horizontal management cybersecurity for digital industries at Siemens. "Siemens’ verified solution with Palo Alto Networks addresses these industry-specific needs through purpose-built architecture. Manufacturers get secure 5G connectivity tailored to their operations without performance trade-offs.”

“Palo Alto Networks and Siemens are not just connecting the factory floor, we are building the central nervous system for the future of industry - a future that is intelligent, autonomous, and secure by design," said Dharminder Debisarun, smart industries cybersecurity executive at Palo Alto Networks.

Data-driven production systems require wireless connectivity for countless sensors and mobile assets, making private 5G essential infrastructure. At the same time, cyberattacks can cause costly downtimes or compromise worker safety. Additionally, regulations like NIS2 mandate defense-in-depth security architectures meeting IEC 62443 standards. Off-the-shelf IT security solutions often create performance bottlenecks or fail to address OT-specific threats in industrial environments.

The collaboration between Siemens and Palo Alto Networks addresses this gap. Palo Alto Networks has specifically optimized its NGFW technology for Siemens' Private 5G infrastructure through Siemens’ extensive testing across multiple deployment scenarios. This verification process validates that the solution delivers industrial-grade security without compromising the low latency and high throughput required for real-time production systems – a critical distinction from generic IT security approaches.

The solution combines three elements for enhanced cybersecurity. Siemens has specifically tested and verified the solution for industrial environments in its Digital Connectivity Lab in Erlangen (Germany):

• Siemens’ private 5G Infrastructure provides on-premises, deterministic wireless connectivity for mobile and moving assets with built-in security features protecting the core network infrastructure. The solution ensures data sovereignty and low-latency communication independent of mobile network operators.
• SINEC Security Monitor: Siemens software for passive, non-intrusive, continuous on-premises security monitoring during production. The system identifies communication anomalies, unauthorized devices, or potential threats without impacting production operations.
• Palo Alto Networks Firewall delivers Layer 7 security and dedicated OT protocol analysis specifically optimized for industrial environments. Unlike generic IT security solutions, it provides deep packet inspection for OT protocols while maintaining the low latency required for real-time control applications – now also in wireless communications via private 5G networks. This includes protection against malware, intrusion attempts, and data exfiltration without the performance degradation typical of off-the-shelf security tools.

This verified architecture meets IEC 62443 requirements for industrial automation and control systems security while maintaining the performance characteristics essential for time-critical production applications. The solution is now available as part of the Siemens Xcelerator portfolio.

www.siemens.com