DeepInspect 2.7.1: Bringing OT Networks into Your SIEM

DeepInspect 2.7.1: Bringing OT Network Visibility into Your SIEM

Greater visibility into industrial networks, native support for three additional protocols, and stronger IT/OT security integration.

You can’t protect what you can’t see. Electrical substations, building automation systems, and smart meters are critical to the infrastructure we rely on every day. Yet the industrial protocols they use to communicate can remain outside the scope of Security Operations Center (SOC) monitoring.

With DeepInspect 2.7.1, GOOSE, BACnet, and DLMS/COSEM are now natively supported by the SIEM Integration feature. Information and security events generated by these protocols can be forwarded directly to existing SIEM platforms, allowing analysts to correlate activity across OT and IT environments. The result is greater visibility across the infrastructure, stronger threat detection and incident investigation capabilities, and a more unified approach to IT/OT security monitoring.

Three Protocols. New Opportunities for Protection.

GOOSE: Greater Visibility into Power Grids

Part of the IEC 61850 standard, GOOSE is used to exchange time-critical messages between automation and protection devices in electrical substations. Monitoring this traffic helps identify anomalous activity in environments where reliable, real-time communication is essential.

Target markets: Electricity transmission and distribution, renewable energy facilities, energy storage systems, large industrial sites with their own substations, and railway electrification.

BACnet: Securing Smart Buildings

BACnet is widely used in building automation systems, including HVAC, lighting, access control, and other building services. These systems may be connected to corporate networks, making visibility into their communications an important part of security monitoring.

Target markets: Hospitals and healthcare facilities, airports and railway stations, data centers, corporate offices and campuses, universities, shopping malls, hotels, sports facilities, and public buildings.

DLMS/COSEM: Bringing Visibility to Smart Metering

DLMS/COSEM is used to exchange data with smart meters. Securing communications in these environments helps protect sensitive data, support accurate measurements, and maintain the reliability of distribution services.

Target markets: Electricity, gas, and water distribution, district heating, multi-utility providers, smart metering operators, and smart grid operators.

What’s New in DeepInspect 2.7.1?

Native support for these three protocols extends DeepInspect’s SIEM integration capabilities, bringing more OT communications into the security monitoring picture.

  • Native support, ready to use: GOOSE, BACnet, and DLMS/COSEM are supported natively, with no additional development or custom configuration required to enable them through SIEM Integration.

  • A unified view of IT and OT security: Events from industrial environments and IT infrastructure can be brought together in a single SIEM platform, helping organizations get more value from their existing security tools and streamline monitoring, analysis, and incident response.

  • More effective threat detection and investigations: Correlating IT and OT security events helps analysts spot anomalous behavior, identify potential threats spanning both environments, and reconstruct event sequences with greater context.

  • Fewer blind spots across OT environments: Expanded protocol support improves visibility into electrical infrastructure, building automation systems, and smart metering environments, helping organizations monitor a broader range of OT assets and communications.

  • Simplified, container-based deployment: The new Podman-based installer streamlines installation and deployment, using a containerized approach designed to support efficient resource use and simplify platform management and maintenance.

What’s Next? DeepInspect 3.0 Is on the Horizon

DeepInspect continues to evolve, and the next major milestone is already in sight. Planned for early 2027, DeepInspect 3.0 will introduce a redesigned graphical interface, a refreshed user experience, and new features.

The countdown is on. More details are coming soon.

Make Your OT Network Visible. Turn Visibility into Security.

From power grids and hospitals to smart metering infrastructure, DeepInspect 2.7.1 expands the range of environments where industrial telemetry can support security monitoring and incident response.

Ready to see what DeepInspect can do for your infrastructure?

Request a demo of DeepInspect 2.7.1