Profinet: Mediate the rift between control engineering and IT

Control engineers need to know that IT is not the enemy, and IT needs to know that Ethernet on the plant floor is not Ethernet in the office.


Setting up trusted zones is part of a layered strategy of network cyber security. Courtesy: PI North AmericaSadly, the rift between control engineers and IT staff is well known. This rift needs to be healed. Here is an attempt at mediation.

Message to control engineers: IT is not your enemy.

Message to IT: Ethernet on the plant floor is not like Ethernet in the office.


Message to control engineers

While IT does not understand the unique requirements of the plant floor or the industrial protocols that run there, they do understand cybersecurity and IT-oriented Ethernet protocols that are applicable to their world and yours. These are protocols developed in the IT world, but which you can leverage. These are protocols that allow diagnostic data to be extracted. This data can speed troubleshooting and even prevent downtime. Simple network management protocol (SNMP) and link layer discovery protocol (LLDL) are the foremost of these protocols. The former allows retry counts, bandwidth, and other useful data to be extracted and acted upon. LLDP allows network topology to be determined automatically.

Since Ethernet can support multiple protocols at the same time, SNMP, LLDP, HTTP, and Profinet (and some other industrial protocols) can all coexist on the same network.

Cybersecurity is not just isolating your network; it's applying processes and procedures as well as technology. IT can help with both.

The environment, the need for speed and determinism, and the importance of uptime will be foreign to IT. You probably have one foot on the office carpet and the other on the concrete plant floor. You can foster that relationship with IT. You can start by explaining the differences in your requirements as set out below.

Message to IT

Ethernet requirements for the control engineer differ from yours in these ways:

  • Speed: While email can arrive in seconds, control messages need to arrive in milliseconds or even microseconds.
  • Determinism: Control messages must arrive in a predictable, repeatable time frame.
  • The environment: Have you seen the atmosphere out there? There is oily vapor in the air. It's hot and humid. And you can't see the electromagnetic interference, but it's out there too. It's not at all like the air-conditioned office environment.
  • Uptime: When the production line stops, the flow of money into the company stops. This is generally regarded as a bad thing.

How do industrial Ethernets handle things differently to account for these requirements? They take special steps to ensure timely messaging. They account for the environment by using devices and cabling that can survive in the harsh environment. They prioritize uptime.

Now that you recognize the unique requirements of the plant floor control engineers, you are in a position to help them keep the plant running.

How to work together

Meet in the middle, at a firewall. That's a simplistic solution that is especially sensible in small plants. On the office side of the firewall, the network is the responsibility of the IT department; on the plant side, control engineering. But work together on network security.

Larger plants may need to have a separate plant IT department. Seed it with resources from both IT and control engineering.

Work together. Your company will be more successful when you do.

- Carl Henning is deputy director of PI North America, the organization that provides education about the Profinet Ethernet protocol and Profibus networks. Edited by Mark T. Hoske, content manager, CFE Media, Control Engineering,

ONLINE July article archives

ONLINE extra

For additional information on the differences between office and industrial Ethernet, PI North America has a white paper available called "Profinet and IT." 

No comments
The Engineers' Choice Awards highlight some of the best new control, instrumentation and automation products as chosen by...
The System Integrator Giants program lists the top 100 system integrators among companies listed in CFE Media's Global System Integrator Database.
The Engineering Leaders Under 40 program identifies and gives recognition to young engineers who...
This eGuide illustrates solutions, applications and benefits of machine vision systems.
Learn how to increase device reliability in harsh environments and decrease unplanned system downtime.
This eGuide contains a series of articles and videos that considers theoretical and practical; immediate needs and a look into the future.
Salary and career survey: Benchmarks and advice; Designing controls; Remote data collection, historians; Control valve advances; Hannover Messe; Control Engineering International
System integration: Best practices and technologies to help; Virtualization virtues; Cyber security advice; Motor system efficiency, savings; Product exclusives; Road to Hannover
Collaborative robotics: How to improve safety, return on investment; Industrial Internet of Things, Industrie 4.0: World views; High-performance HMI, Information Integration: OPC and OMG
This article collection contains several articles on the Industrial Internet of Things (IIoT) and how it is transforming manufacturing.
PLCs, robots, and the quest for a single controller; how OEE is key to automation solutions.

Find and connect with the most suitable service provider for your unique application. Start searching the Global System Integrator Database Now!

Getting to the bottom of subsea repairs: Older pipelines need more attention, and operators need a repair strategy; OTC preview; Offshore production difficult - and crucial
Digital oilfields: Integrated HMI/SCADA systems enable smarter data acquisition; Real-world impact of simulation; Electric actuator technology prospers in production fields
Special report: U.S. natural gas; LNG transport technologies evolve to meet market demand; Understanding new methane regulations; Predictive maintenance for gas pipeline compressors
click me