What it is and what it does
A network firewall decides which connections may cross a boundary. Cisco Secure Firewall is a product family for this task. It can help separate office users, servers, and production networks. Intrusion prevention adds inspection for known suspicious traffic. The exact capability depends on the model, software, license, and settings. Cisco: Secure Firewall.
What that means for your business
An office laptop should not automatically be able to reach a production controller. Approved ERP traffic may need to cross the boundary, while unrelated traffic should be denied. Engineers and operations must validate those rules before a plant change.
Is this a baseline system?
Managed network boundaries are baseline for connected sites. For manufacturing, deliberate separation between business IT and production systems deserves early attention. Buying Cisco is not the baseline; establishing and operating the boundary is.
Will insurance ask about it?
An application may ask about firewalls and network security. Manufacturing discussions may also examine production separation and remote maintenance. A device invoice is weaker evidence than a current network map and a tested rule set. Ask the broker what the underwriter needs for your sites.
See the insurance sources and how to interpret the levels.
Minimum operating position
Supported equipment, current updates, limited administrator access, restricted inbound connections, reviewed rules, and retained configuration backups.
When the business needs stronger protection
Separate critical network areas, monitor security events, inspect traffic where appropriate, and test failover. Coordinate production changes with operations and equipment vendors.
Evidence to request from IT
- Network diagram showing the office and plant boundary.
- Last update date, rule review, and remote access inventory.
- A test showing an office device cannot reach an unauthorized production service.
What belongs in the budget
Include subscriptions, support, replacement timing, management work, and performance with inspection enabled. Price redundancy against the cost of a stopped site.
A documented incident
Equifax, 2017: insufficient separation increased exposure
The FTC alleged that Equifax failed to segment database servers, allowing attackers to reach more data after the initial intrusion. FTC: Equifax security failures and settlement, 2019.
What this case shows: The lesson is to contain access between systems. The FTC finding is not a verdict on Cisco equipment or evidence that a particular firewall would have prevented the breach.
Sources and scope
The baseline and stronger-protection positions are editorial planning guidance. Confirm your company’s required controls and insurance answers with the accountable IT owner and broker.