OT environments run on equipment that predates modern security. Windows XP systems, proprietary HMIs, PLCs that haven’t been updated in decades. WALLIX connects to all of them without requiring agents, patches, or modifications to your production systems.
THE CHALLENGE
Why Agent-Based Security Fails in OT
HOW IT WORKS
WALLIX acts as a gateway between users and OT assets. All connections flow through the gateway using standard protocols – no software installation required on target systems.
WALLIX speaks the native protocol of each target system. RDP for Windows, SSH for Linux, VNC for graphical consoles, Telnet for legacy devices, HTTP/S for web interfaces. No translation or conversion required.
All security functions run on the gateway, not the target. Authentication, session recording, real-time monitoring, and policy enforcement happen at the gateway layer without touching the endpoint.
WALLIX stores and manages credentials for target systems. When a user connects, the gateway injects the appropriate credentials automatically. Users never need direct access to system passwords.
Every session is recorded at the protocol level. For graphical sessions, this means video-style capture. For text sessions, full command logging. All without any software on the target system.
IMPACT
A direct comparison of standart Agent Based and WALLIX Agentless Access
| Aspect | Agent-Based | WALLIX Agentless |
|---|---|---|
| Legacy Support | ❌ Limited to supported OS | ✅ Any system with network access |
| Deployment Impact | ❌ Requires system changes | ✅ Zero changes to endpoints |
| Production Risk | ❌ Agent issues affect systems | ✅ No impact on target systems |
| Maintenance | ❌ Update agents on all devices | ✅ Update gateway only |
| Protocol Coverage | ❌ Agent-specific protocols | ✅ All standard OT protocols |
| Vendor Approval | ❌ May void warranties | ✅ No vendor concerns |
CAPABILITIES
The technical foundations that enable agentless access to OT environments.
RDP access to any Windows version including XP, Server 2003, and newer. Full graphical session recording and control.
SSH access with command logging, session recording, and real-time monitoring. Support for all major distributions.
Telnet and SSH access to switches, routers, firewalls, and industrial network equipment. Full command capture.
HTTP/HTTPS access to web-based management consoles, HMI web interfaces, and cloud-connected devices.
FAQ
How does WALLIX connect to systems that only have serial interfaces?
For systems with serial-only interfaces, WALLIX works with serial-to-network converters. The gateway connects to the converter, which handles the serial communication.
For systems with serial-only interfaces, WALLIX works with serial-to-network converters. The gateway connects to the converter, which handles the serial communication.
Many proprietary interfaces are accessed via standard protocols like RDP, VNC, or HTTP. For truly proprietary protocols, WALLIX can often proxy the connection.
Does agentless mean less security than agent-based solutions?
No. Agentless access through WALLIX provides strong security through centralised authentication, session recording, and access control.
Can we still use WALLIX if some systems do support agents?
Absolutely. WALLIX works equally well with modern and legacy systems. You get a consistent access management approach across your entire environment.
See how WALLIX connects to your industrial systems without agents or modifications.
