---
title: Building Defensible Boundaries | Dragos Whitepaper
description: Learn how to see what your firewall, router, and switch configurations permit between IT and OT, and validate your boundaries in six steps.
image: https://hub.dragos.com/hubfs/Segmentation_WP_v2_1200x630_LinkedIn.png
---

[![Dragos\_Logo\_reversed\_TEAL-146](https://hub.dragos.com/hs-fs/hubfs/111%20Logos%20-%20Dragos/Dragos_Logo_reversed_TEAL-146.png?width=165&height=38&name=Dragos_Logo_reversed_TEAL-146.png "Dragos_Logo_reversed_TEAL-146")](https://www.dragos.com/?hsLang=en)

Whitepaper

## Building Defensible Boundaries

See what your firewall, router, and switch configurations permit, so you can trust your boundaries instead of assuming them.

Most OT cyber incidents start in IT and cross the IT/OT boundary. Every OT network has a design, a set of configurations, and the traffic that moves through it, and over time those three drift apart. This whitepaper shows how to find the gaps before an attacker does..

81%  
of Dragos architecture reviews found poor IT/OT segmentation.

 

73%  
of Dragos incident response cases involved compromised VPN or jump host credentials.

![Segmentation\_WP\_PDF\_Cover](https://hub.dragos.com/hs-fs/hubfs/Segmentation_WP_PDF_Cover.png?width=1545&height=2000&name=Segmentation_WP_PDF_Cover.png "Segmentation_WP_PDF_Cover")

### Inside the Whitepaper

- Six steps to validate a boundary, from identifying your highest-impact systems to keeping the evidence
- How a 2025 VOLTZITE campaign used a cellular gateway to reach engineering workstations
- Four decisions for every unexpected path: keep, narrow, remove, or accept for now
- What NERC CIP-005, TSA, SOCI, and NIS2 expect you to show, and how to have it ready

### Get the Whitepaper

[![SKIP](https://hub.dragos.com/hubfs/Canva%20images/Heading%20(4).png)](https://cta-service-cms2.hubspot.com/web-interactives/public/v1/track/click?encryptedPayload=AVxigLK06IgxvjMsaw%2BCNkVsh26L4NpXskroKEDvFb%2FY0cm6HteiXLIca%2B8uBmPHGk92T50f8rmarlqIPapSRGxw6%2FRgqbcZkDltv%2BAsz3tD8HwG7JELSyUTjFOBJzdCn8foHsRvzNWKwdjz1dLBJNT1DOK9BmJdmRTakSZLa20AeyasrLeutVnaJYcTCLcrrBMTAVSfe97g8fVGPxVYGypS%2FRwcd0gorvMlkRa%2B%2FBfp1yTwE6E0IqULNkUC8oVw%2FdK2%2Fg%3D%3D&portalId=5943619)

# Explore our Resources

Expand your intel and cybersecurity skill sets with resources and training from your ally. Our unprecedented ICS/OT knowledge and expertise are at the ready through our robust catalogue of whitepapers, playbooks, webinars, report, and other resources for every challenge.

[![Dragos-YIR26-Report-Social-Graphics\_LinkedIn-1200x628-Final](https://hub.dragos.com/hs-fs/hubfs/312-Year-in-Review/2026/Dragos-YIR26-Report-Social-Graphics_LinkedIn-1200x628-Final.png?width=1200&height=628&name=Dragos-YIR26-Report-Social-Graphics_LinkedIn-1200x628-Final.png)](https://www.dragos.com/ot-cybersecurity-year-in-review?hsLang=en)

REPORT

##### [2026 Dragos OT/ICS Cybersecurity Report](https://www.dragos.com/ot-cybersecurity-year-in-review?hsLang=en)

[![Global Electric Cyber Threat Perspective](https://hub.dragos.com/hs-fs/hubfs/Global%20Electric%20Threat%20Perspective%20(1200x628)@2x.png?width=1200&height=628&name=Global%20Electric%20Threat%20Perspective%20(1200x628)@2x.png)](https://hub.dragos.com/report/global-electric-cyber-threat-perspective?hsLang=en)

REPORT

##### [Global Electric Cyber Threat Perspective](https://hub.dragos.com/report/global-electric-cyber-threat-perspective?hsLang=en)

[![Segmentation\_Datasheet\_Cover\_snapshot](https://hub.dragos.com/hs-fs/hubfs/Segmentation_Datasheet_Cover_snapshot.webp?width=1000&height=563&name=Segmentation_Datasheet_Cover_snapshot.webp)](https://dragos.brightspotcdn.com/ff/c4/31bf55f8496b8b094e21b9997ae1/dragos-segmentation-datasheet.pdf)

DATASHEET

##### [Prove Your xOT Segmentation Holds](https://dragos.brightspotcdn.com/ff/c4/31bf55f8496b8b094e21b9997ae1/dragos-segmentation-datasheet.pdf)

### See the Dragos Platform in Action

[Request a demo](https://www.dragos.com/request-a-demo/?hsLang=en)

COPYRIGHT © 2026 DRAGOS, INC., ALL RIGHTS RESERVED.  
For information about how we collect, use, share or otherwise process information about you, please see our [privacy policy](https://www.dragos.com/privacy/?hsLang=en). and [Terms of Service](https://www.dragos.com/terms/?hsLang=en) for more information.

![](https://urldefense.com/v3/__https://s.ml-attr.com/getuid?https*3a*2f*2fattr.ml-api.io*2f*3fdomain*3ddragos.com*26pId*3d*24UID__;JSUlJSUlJSUl!!ObtO0C2TD-k!Vfd64U6OpsMuW83nQ96X9YyxWiTq6RmXYsH_63ZnjCJK00aDGxSTUBPUyTamgAOc$)