This at-a-glance overview summarizes Safous Industrial Secure Remote Access (I-SRA), the OT edition of Safous for industrial operators. It explains the security challenges OT environments face as they connect to the cloud and remote users, the main use cases, and the capabilities I-SRA provides to secure remote access to industrial systems.
Download the PDF
Challenges in OT Remote Access
Industrial environments were not designed with cloud connectivity and remote access in mind. OT operators now face:
- Attack surface expansion due to digital transformation
- Aging and end-of-life software that is difficult to update
- Increasingly stringent global supply chain regulations
- Industry-specific regulatory compliance requirements
Use Cases
- Secure remote access for third-party vendors
- Modernizing legacy system security
- Managing critical and high-risk accounts
- Achieving regulatory compliance
Key Capabilities
- Granular access control: users reach only the systems required for each session.
- Strong authentication: MFA, device posture checks or device registration.
- Credential vaulting and SSO: login information for privileged accounts is stored so users do not handle passwords.
- Just-in-time access: access only when needed, with supervisory approval.
- Centralized audit logs and session recording: who accessed what, when and from where, with real-time visibility into privileged activity.
- Air-gapped deployment: operation in fully isolated networks with no internet connection, using a Safous private point of presence and the Safous AppGateway in the OT DMZ.
- Flexible deployment: on-premises, cloud and hybrid, with agentless access and centralized administration.
The overview also lists the frameworks I-SRA is designed to support, including ISO/IEC 27001, SOC 2, NIST SP 800-171, ISA/IEC 62443 and HIPAA.
Frequently Asked Questions
What is Safous I-SRA?
Safous Industrial Secure Remote Access (I-SRA) is the OT edition of Safous. It provides identity-based, supervised and audited remote access to industrial systems without exposing the OT network.
Can Safous I-SRA run in an air-gapped network?
Yes. I-SRA supports air-gapped deployment, operating in fully isolated networks with no internet connection through a private point of presence and the Safous AppGateway.
How does I-SRA control third-party vendor access?
Vendors receive just-in-time access to specific systems with supervisory approval, MFA and session recording, and credentials can be injected from a vault so vendors never see passwords.
Learn more about Industrial Secure Remote Access or see Safous Privileged Remote Access at a Glance.