An industrial facility wants to ensure that only authorized communication reaches its PLCs while minimizing...

ISA/IEC 62443 recommends protocol-aware security controls for IACS networks to protect real-time communications.

Step 1: ICS protocol awareness

IACS-specific firewalls understand industrial protocols such as Modbus, DNP3, and IEC 61850, allowing precise control without breaking deterministic behavior.

Step 2: Deep packet inspection (DPI)

DPI enables inspection of commands and function codes, blocking unauthorized actions while allowing legitimate traffic.

Step 3: Why other options are unsuitable

General-purpose firewalls lack protocol awareness. Data diodes restrict bidirectional control. Basic packet filters cannot inspect commands.

Therefore, the correct choice is IACS-specific firewall with deep packet inspection.