Attachment 04 Purdue Level Information.pdf
PDF 548 KB Posted
- Solicitation number
- SP4702-26-R-XXXX
- Issued by
-
Defense Logistics Agency
About this file
This is an operational technology (OT) network architecture diagram for the Defense Logistics Agency (DLA) that illustrates a five-level hierarchical structure integrating both IT and OT systems. The diagram depicts the DLA DISA 4ENO (4th Enterprise Network Operations) infrastructure, organized into five operational zones spanning from IT Level 5 (Business/Support Zone) down through OT Level 0 (Process Control Instrumentation).
The architecture includes Archive/File Servers and DLA ERP Tools and Services at the IT levels, which support enterprise business functions including Internet access, email, customer-facing web servers, CRM systems, HR systems, and enterprise document management. The IT/OT boundary is marked by the OT DMZ, which contains HBSS and other security management tools including Carbon Black, patch management servers, and anti-virus systems. The operational technology portion comprises five levels: J64 Operations Support (Level 3) for managing DLA OT operations and monitoring; Supervisory Control LAN (Level 2) for real-time control system operations including workstations, HMIs, and data historians; Control Devices (Level 1) containing PLCs, RTUs, and programmable relays; and Process Control Instrumentation (Level 0) incorporating sensors, actuators, motors, and field instrumentation devices that interface between cyber and physical processes. This tiered approach facilitates functional separation while enabling controlled data sharing between zones to support DLA's industrial control systems operations.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
OT
LEVEL 0
DLA Enterprise Business Network DLA Applications used to support Enterprise Business and User Goals. Items typically found in this zone include: Internet Access Points, Email Servers, DLA Customer Facing Web Servers, CRM Systems, HR Systems, Enterprise Document Management Systems and Remote Access VPN endpoints.
DLA Enterprise Network DISA Absorbable IT Shared Services for DLA business unit or subsidiaries. Items typically found in this zone include: Local File and Print Servers, Communications and Phone Systems, DLA Site Directories, DLA Site Specific Remote Access Solutions, Security Event Aggregators, and Site-Specific Internet Access Points.
DMZ for OT DLA series of function specific zones where services and data can be shared between the zones. Items typically found in this zone include: HBSS, Carbon Black, Patch Management Servers, Anti-Virus Management Systems, Site Specific Applications Servers, Jump Server Environments, Business Intelligence Systems, Backend Databases for Site Specific Applications, and Development Systems.
Supervisory Control LAN Includes the functions involved in operating the real-time control system. Items typically found in this zone include: Control Center Operation Workstations (WS), Human Machine Interfaces (HMI), Engineering Workstations, Security Event Collectors, Operations Alarm Systems, Communications Front Ends, Data Historians, and Network/Application Administrator Workstations.
Control Devices Includes the functions involved at the site-specific operating environments. Item typically found in this zone include: Dedicated Operator Workstations, Programmable Logic Controllers (PLCs), Control Processors, Programmable Relays, Remote Terminal Units (RTUs), Remote Interface Units (RIUs) and Process Specific Micro-controllers.
Process Control Instrumentation Includes the functions involved in transitioning from cyber to physical and from physical to cyber. Item typically found in this zone include: Sensors, Actuators, Motors, Process Specific Automation Machinery and Field instrumentation devices.
J64 Operations Support Includes the functions involved in managing the DLA OT operations and monitoring environment. Items typically found in this zone include: Operations Scheduling, Tracking Tools, T&D Operations, Simulation, and Modeling Tools, ForeScout and other Analysis Tools, Replicated Historians, and Data Visualization and VM Utilities. Dedicated J64 operations specific IT services e.g., DHCP, LDAP, DNS, and authorized file servers.
DLA ERP Tools and Services
Archive/File Servers
J64 Operations Management
Control System Supervisory Controls
PLC/RTU IP
Communication
Safety and Instrumented
Systems
I/O from Sensors
HBSS
OT
LEVEL 1
OT
LEVEL 2
OT
LEVEL 3
IT
LEVEL 4
IT
LEVEL 5
OT DMZDM
Z
Pr oc es s
Co nt ro ls/
IC
S
In du st ria l Co nt ro l S ys te m s (
IC
S) O pe ra tio n
Zo ne
Bu sin es s Z on e
DL
A
DI
SA
4E N
O
TB
D
DO
TN
ET
O pe ra tio na l T ec hn ol og y
DL
A
En te rp ris e
DM
Z
Slide Number 1
File details come from the government source that posted it. Updated .