Accelerating DTM-25-003 Outcomes with Identity-First, Authenticate-Before-Connect Networking
In modern OT, the challenge is no longer just how to connect systems securely, but how to do so without triggering repeated firewall/VLAN changes, MOC cycles, safety reviews, and IT/OT governance friction. This whitepaper details a pragmatic, secure, and operationally simple approach using NetFoundry Software-Defined Zero Trust Overlays that can be fully owned and operated by OT engineers with minimal networking knowhow. NetFoundry ZLAN implements a software-defined network that runs on the existing infrastructure as an identity-first overlay fabric. With it, organizations can implement granular microsegmentation and policy-defined conduits across Purdue Levels 1 through 5 while running on standard COTS hardware without touching the existing underlay.
