Skip to content
Free tool

OT Conduit / Firewall Ruleset Linter

Paste the firewall rules between your Purdue zones and this linter checks them against ISA/IEC 62443 zone-and-conduit practice — catching IT→OT any-any allows, inbound remote access into the control floor, conduits that skip the IT/OT DMZ, plaintext management into OT, control-protocol writes from outside the cell, and shadowed or overly-broad rules. It parses and lints entirely in your browser; no rule ever leaves the page.

0 rules · 0 allow · 0 deny

Formats: ACTION SRC -> DST proto/port or CSV src,dst,proto,port,action. Zones: L0 L1 L2 L3 DMZ L4 L5 or any. Lines after # are comments.

Paste your OT firewall rules above, or load the sample.

Parsing and linting happen entirely in your browser.

🎉 New here? Use code WELCOME10 for 10% off any plan at checkout
OT Conduit / Firewall Ruleset Linter — Free ICS Rule Checker · PlayCISO