A factory needs a network that runs continuously through shifts, clearly separates the office network from the machine network, and has system records ready when customers or the parent group request a review.
Are you facing any of these?
Line stoppage from network faults
A small fault in a switch or Wi-Fi can stop work across a whole area.
Office and machines on one network
An incident or malware on an office computer can spread to the production area.
Audited but short of documentation
Network diagrams, equipment lists and access policies are scattered or no longer current.
Main scope
And more besides, depending on what fits your situation.
IT and OT separation
An internal firewall segments office, machines, servers and guests and controls traffic between zones.
A redundant network core
A core ring with a pair of firewalls in HA, so losing a link or a device keeps things running.
Wi-Fi for halls, warehouses and offices
Coverage surveyed on site, centrally managed, with smooth roaming.
Cameras and access control
Brought into the same infrastructure but on a separate network.
Off-site backup
Production and office data have a copy elsewhere, with restore tests.
System documentation
Network diagrams, asset lists, access policies and operating guides.
How the system is usually organized
- A core ring of two or more switches, with an HA firewall pair at the edge
- Separate zones: office, machines (OT), servers, DMZ, guests
- Site-to-site VPN to the group or branches when needed
- Central monitoring and early alerts
The specific architecture is set after the survey, depending on your size and current setup.
4 clear steps from the start
- SurveyIdentify work shifts and the points that must not stop.
- DesignArchitecture, cost estimate and an implementation schedule by shift or weekend.
- DeploymentDone in phases, tested carefully before cutover.
- HandoverDocumentation, training and post-implementation support.
Frequently asked questions
Can you implement while the factory is running?
Yes. Work is split into phases and placed at times with the least impact, such as between shifts, weekends or days off. The specific schedule is agreed after the survey.
What about older machines that use their own protocols?
We do not interfere with how the machines run. Older equipment is placed in its own zone with controlled access in and out, rather than forcing a machine replacement.
Do you support both Vietnamese and English?
Yes. We can communicate technically and write reports in both Vietnamese and English when you work with an overseas IT team.
What should we prepare to be ready for a group audit?
Usually a network diagram, equipment list, access policies, backups and logs. We help you build and update this set of documents and point out what to fix first.
Reference vendors and product codes for this solution
By specific need and size. Codes are for reference; COREIT fixes the model and successor versions after the survey, and can use equivalent equipment from other vendors to suit the budget.
| Need | Smaller sites | Medium and large sites |
|---|---|---|
| Edge firewall and production zoning | Fortinet FortiGate 70G or 90G | FortiGate 200G / 400F as an HA pair; Palo Alto PA-1400 |
| Industrial switches on the shop floor | Cisco Catalyst IE3300 or Moxa EDS series | Cisco Catalyst IE3400 on the floor; Catalyst 9300 or Aruba CX 8325 at the core |
| Factory and outdoor Wi-Fi | HPE Aruba AP-635 indoors, AP-577 outdoors | Aruba AP-735 and AP-687, managed with Aruba Central |
| Isolating machine networks (OT) | FortiGate Rugged 70F at the machine-area edge | FortiGate HA with Cisco Catalyst IE3400, zoned by production line |
| Power and server room | APC Smart-UPS SMT1500RMI2UC or Eaton 5P 1550 | APC SRT3000RMXLI / SRT5KRMXLI or Eaton 9PX, configured N+1 |
| Production data backup | Synology Active Backup | Veeam Backup & Replication with an offsite copy |
Xem quy trình dịch vụ kỹ thuật → · Need help configuring or tuning equipment you already own? See device support →
Want to know where to start?
Take the 2-minute quick assessment, or leave your details and an engineer will call you back with free advice.
IT infrastructure assessment (2 min) Get advice