MetaDefender OT Access is a secure access management platform for operational technology (OT) and IT environments that facilitates and monitors connections between users and industrial assets. It operates on a zero-trust model, utilizing outbound-only, end-to-end encrypted TLS tunnels to eliminate the need for inbound firewall exceptions and prevent lateral network movement. The system supports native OT and IT protocols like Modbus, OPC UA, and S7COMM, enabling client-based or clientless access. It enforces granular, protocol-specific policies, such as read-only restrictions and operation code filtering, and can integrate with hardware like the MetaDefender Industrial Firewall to function as an access gateway.
The platform includes modules for endpoint compliance, vulnerability management, and automated patching across Windows, macOS, and Linux devices. It performs pre-connection authentication and compliance verification for managed, BYOD, and IoT endpoints. Through a centralized console, administrators monitor endpoint security status and activities, which are evaluated using a scoring system that assesses vulnerabilities across third-party applications. The system provides automated remediation capabilities and can be deployed on-premises via industrial servers or virtual appliances, or as a cloud-hosted service.
