Implementing ICS Firewall with Tofino When to Use - When deploying zone-level firewall protection directly in front of critical PLCs or RTUs - When requiring deep packet inspection of industrial protocols (Modbus, EtherNet/IP, OPC, S7comm) - When implementing IEC 62443 zone and conduit boundaries with protocol-aware enforcement - When protecting legacy PLCs that cannot be patched and need compensating controls - When segmenting control network zones without disrupting existing industrial communications Do not use for enterprise IT firewall deployment, for perimeter firewall between IT and OT…