Wie unterscheidet sich secunet edge von einem klassischen IoT-Gateway?

Klassische IoT-Gateways konzentrieren sich häufig auf Protokollübersetzung und Datenweiterleitung. secunet edge geht darüber hinaus und bietet eine skalierbare, zentral steuerbare Edge-Computing-Plattform, die es Partnern ermöglicht, Lösungen effizient und kontrolliert in verteilte Umgebungen zu integrieren. doubleSlash ergänzt die technische Basis um Datenstrategie, Integration und Mehrwertdienste.

Brauchen wir zusätzlich Device Connectivity oder Device Management?

secunet edge bildet die Plattform am Netzwerkinterface der Maschine. Device Connectivity erweitert sie um Modulanwendungen auf der Edge-Box: deploybar, an Ihre Plattform angebunden und ausgelegt auf Geräte-Registrierung, Provisionierung, Zertifikatsmanagement sowie Update- und Fernzugriff edge- und cloud-seitig. Device & Update Management ergänzt den Flottenbetrieb mit Update Management, Remote Fernzugriffen und Predictive Maintenance.

Können wir mit Bestandsmaschinen starten?

Ja. Die sichere Anbindung von Bestandsmaschinen ist ein zentraler Use Case in heterogenen Maschinenparks. Üblich ist ein Pilot mit ausgewählten Anlagen vor dem Rollout auf weitere Standorte.

Was macht secunet – was macht doubleSlash?

secunet liefert das Edge-Device mit zugehöriger EMS als sichere Plattform am Maschinenanschluss. doubleSlash integriert Modulanwendungen auf der Edge-Box und verbindet sie mit Ihrer Plattform für Mehrwert-Use-Cases von der Provisionierung bis zum Fernzugriff. Die Rollen im Detail stehen im Abschnitt &bdquo;Vernetzung mit secunet edge“.

Wie wird OT Security sichergestellt?

Über gehärtete Edge-Appliances an der Maschine, geschützte Kommunikationswege, Netzwerksegmentierung und zentrale Verwaltung. secunet ist als IT-Sicherheitsanbieter für kritische Infrastrukturen tätig; Architektur und Betrieb orientieren sich an Anforderungen wie IEC 62443.

Wie läuft eine Pilotierung ab?

Bedarfsanalyse : Ausgangslage, Maschinenlandschaft, Security- und Datenziele klären Pilot-Scope : ausgewählte Bestands- oder Neumaschinen, definierte Erfolgskriterien Aufbau : secunet edge an der Maschine, Konfiguration und zentrale Verwaltung Integration und Mehrwert : Datenstrategie, Anbindung an IoT- und Cloud-Systeme, erste Use Cases Skalierung : Rollout auf weitere Standorte und Anlagen

Müssen wir NIS-2 und den CRA berücksichtigen?

Die Anforderungen an Cybersicherheit in Produktion und Maschinenbau steigen. secunet edge adressiert Security an der Maschine durch gehärtete Hardware, geschützte Kommunikation und zentrale Verwaltung. Welche Vorgaben wie IEC 62443, NIS-2 oder der Cyber Resilience Act (CRA) in Ihrem Fall greifen, hängt von Branche, Rolle in der Lieferkette und Architektur ab. Das klären wir in der Bedarfsanalyse.

How does secunet edge differ from a traditional IoT gateway?

Traditional IoT gateways often focus on protocol translation and data forwarding. secunet edge goes beyond that, offering a scalable, centrally controllable edge computing platform that enables partners to integrate solutions efficiently and in a controlled manner into distributed environments. doubleSlash complements the technical foundation with data strategy, integration, and value-added services.

Do we need additional device connectivity or device management?

secunet edge serves as the platform at the machine’s network interface. Device Connectivity extends it with modular applications on the edge box: deployable, integrated with your platform, and designed for device registration, provisioning, certificate management, as well as updates and remote access on both the edge and in the cloud. Device & Update Management complements fleet operations with update management, remote access, and predictive maintenance.

Can we get started with the equipment we already have?

Yes. Securely connecting existing machines is a key use case in heterogeneous machine fleets. It is common to conduct a pilot with selected machines before rolling out the solution to other locations.

What does secunet do—what does doubleSlash do?

secunet provides the edge device with its associated EMS as a secure platform at the machine interface. doubleSlash integrates modular applications on the edge box and connects them to your platform for value-added use cases, from provisioning to remote access. The roles are described in detail in the section “Networking with secunet edge.”

How is OT security ensured?

Through hardened edge appliances at the machine, secure communication channels, network segmentation, and centralized management. secunet is an IT security provider for critical infrastructure; its architecture and operations are aligned with standards such as IEC 62443.

How does a pilot program work?

Needs Analysis : Clarify the current situation, machine infrastructure, and security and data objectives Pilot Scope : Selected existing or new machines, defined success criteria Setup : secunet edge at the machine, configuration, and central management Integration and Added Value : Data strategy, integration with IoT and cloud systems, initial use cases Scaling : Rollout to additional locations and facilities

Do we need to take NIS-2 and the CRA into account?

Cybersecurity requirements in manufacturing and mechanical engineering are on the rise. secunet edge addresses security at the machine level through hardened hardware, secure communication, and centralized management. Which standards—such as IEC 62443, NIS-2, or the Cyber Resilience Act (CRA)—apply to your specific situation depends on your industry, role in the supply chain, and architecture. We clarify this during the needs analysis.

doubleSlash

Those who use machine data effectively create transparency and measurable added value in production.

secunet provides the edge device along with the associated central control and orchestration system, the Edge Management Suite (EMS) ; doubleSlash integrates modular applications that run on the Edge Box and connect seamlessly to your platform .

Together, they enable secure machine connectivity and value-added services such as remote access, remote updates, condition monitoring, and predictive maintenance.

Schedule a Needs Assessment

Challenges at the OT-IT Interface

In many companies, machine data remains untapped, even though digital services and data-driven decisions are in high demand. With every new connection, the attack surface grows: networking and OT security must be addressed in the same planning process.

Without this joint planning at the interface between production and IT, digitalization projects come to a standstill. secunet edge and doubleSlash combine secure machine connectivity, managed edge infrastructure, and actionable machine data.

Common obstacles:

A heterogeneous infrastructure consisting of legacy and new systems, different protocols, and different generations
Lack of expertise in IT, OT, and security matters at the interface
Increasing regulatory requirements, including IEC 62443, NIS-2, and the Cyber Resilience Act
Uncertainty about which machine data is relevant for one’s own use case
Difficult integration into existing systems and IoT platforms
High effort due to individual projects without a scalable architecture

What Is Needed for OT-IT Integration

Anyone who wants to securely connect machines and utilize machine data needs two layers at the OT-IT interface: a hardened edge platform with Edge Management Suite (EMS)—secunet’s central control and orchestration layer—and integrable modular applications from doubleSlash that run on the Edge Box and connect to your customer instance.

Flexible and secure edge infrastructure for heterogeneous, distributed, and evolving IT environments—from the machine to the cloud
Customized data strategy across various systems
Identification of economic potential and added value
secunet edge as a flexible and secure edge platform (IaaS) with the associated Edge Management Suite (EMS)
Secure connectivity endpoint for machines, networks, and the Internet (cloud)

Secure Connection and Integration of Existing and New Machines
Centralized management, secure maintenance, and remote access
Integration into existing IoT and data platforms
Scalable architecture to meet future requirements

Connecting to secunet edge

secunet edge and doubleSlash connect production environments with secure connectivity, centralized operation, and actionable machine data—even in established machine landscapes. The steps build on one another, from security to operation to data utilization.

secunet provides a secure edge infrastructure with secunet edge: edge platform (IaaS), security gateway, Edge Management Suite, and connectivity endpoints at the machine. Centralized management across multiple locations.

doubleSlash handles data strategy, integration, and value-added services: identifying relevant data sources, connecting to IoT and cloud systems, and implementing use cases ranging from condition monitoring to data-driven business models.

"Connecting existing and new machines to IT systems in a data-driven and secure manner often fails due to challenges at the IT-OT interface. secunet edge and doubleSlash provide centrally orchestrated security, data processing, and IaaS for heterogeneous machine environments." – Torsten Redlich, Global Head of the Edge Unit, secunet

Who is OT-IT integration suitable for?

This offering is aimed at manufacturing companies and machinery and equipment manufacturers that want to leverage critical processes and sensitive data in heterogeneous production environments.

Typical users:

Plant and production management
IT and OT infrastructure managers
CISO (Chief Information Security Officer)
Service and Maintenance Management
Strategic product managers with service and compliance requirements
Digitalization and IoT Managers
Service and After-Sales Managers

Industries:

Automotive Industry
Mechanical Engineering
Process Industry
Medical Technology
Energy Supply
Water Supply

FAQs

Questions and Answers

Contact

How can we successfully help you connect your machines?

Strong IoT partners: secunet and doubleSlash