LogoLogo
DownloadGet a QuoteConnect with Us
  • Introduction
    • What is Thinfinity® Workspace
    • About this Document
  • Product Overview
    • Architecture Components
    • Load Balancing
    • Deployment Scenarios Overview
    • Connectivity
      • Remote Desktop Access
      • Remote Application Access
      • Terminal Access
    • RPAM and Resource Reservation
    • Cloud Manager
    • Audit Logging
    • User Analytics
  • Getting Started
    • Basic Installation
    • Accessing Thinfinity® Workspace in Your Browser
    • Connection Types
      • Remote Desktop Connection
      • Remote App Connection
      • Remote Intranet Web App Connection
      • Telnet SSH Connection
    • Configuration
    • Security
    • Beyond the Basics
  • Reference
    • Thinfinity® Workspace Configuration Manager
      • General Tab
      • Broker Tab
      • Authentication Tab
        • Methods Tab
          • API Access Settings
          • RADIUS Settings
          • SAML Settings
          • OAuth 2.0 Settings
          • External DLL
        • Mappings Tab
        • 2FA Tab
        • Directory Services Tab
          • Local Computer Users Settings
          • Local Computer Users
          • Local Thinfinity IdP Settings
          • Computer Domain Settings
          • External Domain Settings
      • Access Profiles Tab
        • The [+] Access Profile
        • Desktop Access Profiles
          • RDC Access Profile
            • Core Settings
            • User Experience Settings
          • ThinVNC Access Profile
          • VNC/RFB Access Profile
            • User Experience Settings
        • Application Access Profiles
          • Remote App Access Profile
            • Core Settings
          • Web App Access Profiles
            • Web Link Access Profile
            • WAG Access Profile
          • VirtualUI App Access Profile
            • Core Settings
        • Web Folder Access Profile
        • Terminal Access Profiles
          • z/Scope Classic Access Profile
          • Telnet/SSH Access Profile
            • Core Settings
            • User Experience Settings
        • Label
        • Access Control Settings
      • VirtualUI Tab
      • Folders Tab
      • Permissions Tab
      • Protection Tab
      • Notifications Tab
      • Database Tab
      • z/Scope Classic Tab
      • Services Tab
      • License Tab
    • Thinfinity® Workspace Web Manager
      • Access Profiles
        • Desktop Access Profiles
          • RDC Access Profile
            • Core Settings
            • User Experience Settings
          • VNC
            • Core Settings
            • User Experience Settings
          • Thinfinity VNC
            • Core Settings
        • Application Access Profiles
          • Remote App
          • Web App
            • Web Application Gateway (WAG)
            • Web Link
          • VirtualUI App
        • Web Folder Access Profile
          • Core Settings
        • Terminal Access Profiles
          • Telnet SSH Terminal
          • Multi Terminal
        • Access Control Settings - Web Manager
      • Addons
        • Analytics
        • Brokers Monitor
        • Audit Log
        • Recordings
        • Members
        • Reports
        • Resource Reservation
    • Thinfinity® Gateway
  • Configuration
    • RBAC and Resource Reservation
      • Configuring the Resource Reservation Feature
      • Role Definition with Permissions Groups
      • Granting Approver or Requester Role to a User
      • Enabling Resource Reservation
      • Granting a User Access to a Single Access Profile
      • Granting Access Permissions for a Group of Access Profiles
      • Grouping Access Profiles Under a Label
      • Restricting Access to a Resource
      • Exception Days - No Booking Allowed
      • Booking a Resource
      • Approving a Booking Request
    • Security
      • Managing the SSL Certificate
        • Creating a Self-Signed Certificate
        • Creating a CA Certificate Request
        • Importing a Certificate
        • Using ACME Certificates
      • Session Recording
        • Viewing Recorded Sessions
    • User Experience
      • Bidirectional Audio Redirection
      • Customizing the Thinfinity® Workspace Toolbar
        • Using web.settings.js
        • Using the SDK 'connect' Method
        • Extend the Thinfinity® Workspace Toolbar
      • Customize Translation
      • GFX and H.264 Support
        • Enabling H.264 for an Access Profile
        • Preparing a Remote Desktop for H.264 Support
      • How to Enable Multi-Monitor
      • Multi-Touch Redirection
      • Redirecting Devices
      • Remote FX
      • Enhanced Browser and DPI Support
        • Display Model Inheritance
        • Properties Reference Tables
        • The Calculation Process
        • Example
    • Extended Features
      • Remote Active Directory
        • How to Install and Configure Thinfinity® Remote AD Services
        • Active Directory Credentials Mapping
      • WebBridge - Direct File Transfer
        • Installing Thinfinity® WebBridge
        • Using WebBridge
      • Silent Install Options
    • License Server Manager
      • Proxy Activation
      • Get a New Trial Serial Number
      • Activate a Serial Number Online
      • Activate a Serial Number Offline
      • Registering a License with License Server Manager
  • Deployment Scenarios
    • Single Machine Deployment
    • Distributed Deployment
    • Multitenant - Several Subdomains
    • Implementing Secondary Brokers Scenarios
      • Resource Pools
      • OT Networks
      • Multitenant - Single Domain
  • Integrations
    • Integrating Thinfinity® Workspace
    • External Authentication
      • API Key
    • Customizing the Web Interface
      • Customizing the Logo
      • Organizing custom files
    • One-Time-URL (OTURL)
      • Customizing OTURL Connection
      • Enabling Features
  • Mobile Devices
    • Mobile Devices
    • Accessing Thinfinity® Workspace
    • Mouse Control
    • Keyboards and Toolbars
    • Gestures
Powered by GitBook
On this page
  • Diagram of the Deployment
  • Deployment Explanation
  • Use Cases

Was this helpful?

  1. Deployment Scenarios
  2. Implementing Secondary Brokers Scenarios

OT Networks

PreviousResource PoolsNextMultitenant - Single Domain

Last updated 2 months ago

Was this helpful?

Thinfinity® Workspace is a key product for managing OT Networks by supporting isolated and secure tenants, where devices and other resources do not require extensive access and only need maintenance. Typically, these resources include manufacturing machines such as CNCs or PLCs, among others, that do not require constant programming.

Diagram of the Deployment

The OT Network is a private environment used to access isolated networks. These networks are not designed for high-traffic demands and are contained within tenants that include:

  • Secondary Brokers: Each broker is responsible for managing a specific workstation to operate designated machines.

  • End resources: For example, PLC or CNC machines used in the manufacturing process.

Deployment Explanation

The Gateway serves as the entry point for users accessing a domain deployed by the Primary Broker. It handles user authentication requests and identifies which resource they want to access.

  • If the resources are part of the IT Network, the Primary Broker will authorize access and redirect the request to the Secondary Broker, who will manage access to the specific resource and ensure the user maintains a stable connection.

  • If the resources the user wants to access belong to the OT Network, special permissions will be required, as these networks have a high level of security, restricting access to only certain domain members. Typically, access to OT resources is done locally to avoid exposing the controlled machines to external risks.

Use Cases

The most common use case is in the manufacturing industry, where a network with high priority, security, and isolation from the rest is required, as the machinery used for product manufacturing follows an operational routine that should preferably not be interrupted to maintain the workflow. This network is usually accessible to a small number of people and typically only locally to avoid compromising its security.