It is strongly recommended to create a dedicated network for a operational technology or building automation network (OT/BAN). This network should contain only IT components necessary for the application. In this scenario, the edge device should be connected in separate network mode:
- One OT/BAN network connected to the LAN port
- IT network with Internet access connected to the WAN port where the usual cybersecurity guidelines (firewall) apply