MDIoT benefits
MDIoT leverages passive monitoring and Network Traffic Analysis (NTA). This is the highlight of the product as it combines passive monitoring and NTA with Microsoft’s own patented technology (i.e., IoT/OT-based behavioral analytics) to capture information in real time.
To capture network traffic, we need to deploy a sensor on-premises to a network SPAN port, and we shall now see some of the advantages of this.
Zero impact on network performance
Most OT environments cannot sustain an active scan. Figure 4.11 represents the fears of a plant operating team about downtime caused by an active scan:
Figure 4.11 – Active scanning OT devices may cause downtime
Downtime directly translates to a loss of business or profit, which is a central cause of worry for most organizations. MDIoT is here to help as it leverages passive scanning of network traffic. The huge advantage of this is that the device being scanned will not be actively...