* [Blog](https://origin-researchcenter.paloaltonetworks.com/blog) * [Network Security](https://origin-researchcenter.paloaltonetworks.com/blog/network-security/) * [Announcement](https://origin-researchcenter.paloaltonetworks.com/blog/category/announcement/) * A Leader in Secure Remote... # A Leader in Secure Remote Access for OT/ICS [](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Forigin-researchcenter.paloaltonetworks.com%2Fblog%2Fnetwork-security%2Fa-leader-in-secure-remote-access-for-ot-ics%2F) [](https://twitter.com/share?text=A+Leader+in+Secure+Remote+Access+for+OT%2FICS&url=https%3A%2F%2Forigin-researchcenter.paloaltonetworks.com%2Fblog%2Fnetwork-security%2Fa-leader-in-secure-remote-access-for-ot-ics%2F) [](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Forigin-researchcenter.paloaltonetworks.com%2Fblog%2Fnetwork-security%2Fa-leader-in-secure-remote-access-for-ot-ics%2F&title=A+Leader+in+Secure+Remote+Access+for+OT%2FICS&summary=&source=) [](https://www.paloaltonetworks.com//www.reddit.com/submit?url=https://origin-researchcenter.paloaltonetworks.com/blog/network-security/a-leader-in-secure-remote-access-for-ot-ics/&ts=markdown) \[\](mailto:?subject=A Leader in Secure Remote Access for OT/ICS) Link copied By [Qiang Huang](https://www.paloaltonetworks.com/blog/author/qiang-huang/?ts=markdown "Posts by Qiang Huang") Dec 15, 2025 5 minutes [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown) [Industrial OT Security](https://www.paloaltonetworks.com/blog/network-security/category/industrial-ot-security/?ts=markdown) [Strata Network Security Platform](https://www.paloaltonetworks.com/blog/network-security/category/strata-network-security-platform/?ts=markdown) [secure remote access](https://www.paloaltonetworks.com/blog/tag/secure-remote-access/?ts=markdown) Palo Alto Networks has been named an [Overall Leader in the 2025 KuppingerCole Leadership Compass for Secure Remote Access for OT/ICS](https://b2b-insight.biz-tech-insights.com/whitepaper/LP-FY26Q2-CDSS-device-security-PANW-1-land.html). The report also recognizes us as an Innovation Leader, Product Leader and Market Leader. We believe this recognition reflects a market that is quickly shifting toward unified security platforms capable of protecting industrial environments as remote connectivity grows. ![](https://www.paloaltonetworks.com/blog/wp-content/uploads/2025/12/word-image-349646-1.png) # The Shift Toward Modern and Resilient Access Secure remote access has become essential to how industrial organizations operate. Field technicians, OEM partners and service providers rely on fast and safe connectivity to support plants, substations and production lines. KuppingerCole reinforces this shift toward broader adoption with the following observation. *"The SRA market for OT and ICS is shifting from niche deployments to a foundational element of industrial cybersecurity."* This perspective aligns with trends we hear from industrial leaders and customers across a wide range of environments. As connectivity reaches more assets and more workers, organizations want flexible access that can support a range of operational needs, from just-in-time access for third parties to full VPN connectivity for users who require broader reach. Older tools often exposed broad portions of the environment and operated outside enterprise identity and governance processes, which limited visibility and created gaps in auditability. As remote access becomes a standard part of daily operations and security teams take on a larger role in OT security, organizations are prioritizing approaches that unify policy, improve monitoring and strengthen control over how access is granted and used. # A Unified Platform for Modern Industrial Access We believe our placement as an Overall Leader reflects our ability to deliver secure access across both modern and aging OT environments through a single operational model. Through the Strata platform, Palo Alto Networks brings NGFW, SASE and cloud management together in one comprehensive approach. This supports both centralized and distributed operations while giving different user groups the flexibility they need. The platform supports two secure access paths: just-in-time access via Prisma Browser™ and agent-based access via GlobalProtect. Both options can apply continuous inspection and OT-focused workflows to help organizations strengthen access controls without adding operational friction. ## Securing Access to Reduce Lateral Movement Secure remote access has become a key control point for protecting industrial operations. By applying continuous verification and enforcing least-privileged access, the Strata platform reduces unnecessary exposure and helps prevent threats from moving laterally across interconnected environments. This allows user connectivity to support operational resilience while providing the detailed audit trails essential for safeguarding critical systems. ## Key Capabilities That Matter in the Field To us, being named an Innovation Leader highlights the value of an approach that emphasizes simplicity, consistency and best in class security. The capabilities recognized in the report address needs that appear widely across industrial environments. ### Just-In-Time Access [Prisma Browser™](https://www.paloaltonetworks.com/sase/prisma-browser) provides secure access through the browser with no agent required. This creates a smooth and intuitive experience for contractors and third-party vendors by reducing the risks associated with persistent connections. ### Native Application Support for Industrial Protocols The Strata platform provides native support for common OT access methods including RDP, SSH and VNC. This gives users a direct way to reach the systems they need while maintaining strong controls around who can connect and when. ### Role-Based Access Across the Environment Access is scoped to the specific users and assets involved and granted only for the time required. This supports precise and well-defined access patterns that help shrink the attack surface. ### Advanced Threat Inspection Continuous inspection is applied throughout each session and supported by[Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention) and [Advanced WildFire^Ⓡ^](https://www.paloaltonetworks.com/network-security/advanced-wildfire). These capabilities help identify unusual or risky activity early in the connection flow and add another layer of security to remote access sessions without adding friction for users. ### Session Recording That Supports Audit and Compliance Every session is monitored and recorded with safeguards that prevent credential misuse and unauthorized screen capture. This framework supports regulatory requirements such as IEC 62443 and NIS2 and strengthens internal oversight. ![](https://www.paloaltonetworks.com/blog/wp-content/uploads/2025/12/word-image-349646-2.png) # Moving Past Legacy Limitations Many organizations are looking for secure remote access that adjusts to user identity and operational context while remaining straightforward to deploy. Industrial environments often blend legacy systems with modern equipment, which makes consistency and ease of use especially important. A unified approach can reduce the burden of managing multiple tools. Bringing policies and credentials together in one place supports consistent enforcement across both remote and on-site environments. A single cloud-based interface also helps lower operational overhead by streamlining everyday administration. # A Practical Path Forward for Industrial Leaders As operations become more connected and distributed, leaders are evaluating approaches that provide clearer visibility and well-defined access paths without adding complexity. They want teams and partners to work efficiently while maintaining the level of control required for critical environments. Palo Alto Networks offers capabilities designed to support these needs across a range of industrial settings. Our aim is to give customers useful insight into access activity and the structures needed to manage remote connectivity with confidence as their environments evolve. [Download the full 2025 KuppingerCole Leadership Compass](https://b2b-insight.biz-tech-insights.com/whitepaper/LP-FY26Q2-CDSS-device-security-PANW-1-land.html) to see why we were named an Overall Leader. *** ** * ** *** ## Related Blogs ### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Cloud NGFW](https://www.paloaltonetworks.com/blog/network-security/category/cloud-ngfw/?ts=markdown), [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown), [Strata Network Security Platform](https://www.paloaltonetworks.com/blog/network-security/category/strata-network-security-platform/?ts=markdown) [#### What Is a Hybrid Mesh Firewall and Why It Matters](https://origin-researchcenter.paloaltonetworks.com/blog/2025/08/hybrid-mesh-firewall-and-why-it-matters/) ### [AI Security](https://www.paloaltonetworks.com/blog/category/ai-security/?ts=markdown), [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Hybrid Cloud Data Center](https://www.paloaltonetworks.com/blog/network-security/category/hybrid-cloud-data-center/?ts=markdown), [IoT Security](https://www.paloaltonetworks.com/blog/network-security/category/iot-security/?ts=markdown), [Network Perimeter](https://www.paloaltonetworks.com/blog/network-security/category/network-perimeter/?ts=markdown), [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown), [Strata Network Security Platform](https://www.paloaltonetworks.com/blog/network-security/category/strata-network-security-platform/?ts=markdown), [Zero Trust Security](https://www.paloaltonetworks.com/blog/network-security/category/zero-trust-security/?ts=markdown) [#### Palo Alto Networks Leads the Way with Quantum and Multicloud Security](https://origin-researchcenter.paloaltonetworks.com/blog/2025/08/paves-way-for-quantum-ready-security/) ### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/category/next-generation-firewalls/?ts=markdown), [Strata Network Security Platform](https://www.paloaltonetworks.com/blog/network-security/category/strata-network-security-platform/?ts=markdown) [#### A Leader in IDC MarketScape for Enterprise Hybrid Firewall Solutions](https://origin-researchcenter.paloaltonetworks.com/blog/network-security/a-leader-in-idc-marketscape-for-enterprise-hybrid-firewall-solutions/) ### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Event](https://www.paloaltonetworks.com/blog/category/event/?ts=markdown), [News \& Events](https://www.paloaltonetworks.com/blog/sase/category/news-events/?ts=markdown), [Strata Network Security Platform](https://www.paloaltonetworks.com/blog/network-security/category/strata-network-security-platform/?ts=markdown) [#### InterSECt --- The Fast Lane to a Secure Future Starts Here](https://origin-researchcenter.paloaltonetworks.com/blog/2025/05/intersect-fast-lane-secure-future-starts-here/) ### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Strata Network Security Platform](https://www.paloaltonetworks.com/blog/network-security/category/strata-network-security-platform/?ts=markdown) [#### CRN 2025 Security 100 List names Palo Alto Networks](https://origin-researchcenter.paloaltonetworks.com/blog/network-security/palo-alto-networks-network-security-on-crn-2025-security-100-list/) ### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Industrial OT Security](https://www.paloaltonetworks.com/blog/network-security/category/industrial-ot-security/?ts=markdown), [IoT Security](https://www.paloaltonetworks.com/blog/network-security/category/iot-security/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown) [#### Forrester Names Palo Alto Networks a Leader in OT Security](https://origin-researchcenter.paloaltonetworks.com/blog/2024/06/forrester-names-leader-in-ot-security/) ### Subscribe to Network Security Blogs! Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more. ![spinner](https://origin-researchcenter.paloaltonetworks.com/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up Please enter a valid email. By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder. This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply. {#footer} {#footer} ## Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown) * [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown) ## Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) ## Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language