Why would you need to update your CNC machine anyway? Surely such a device is locked down and wouldn't fall prey to the kinds of vulnerabilities a corporate PC would. Presumably you're referring to the fact your CNC machine is setup to be operated remotely? The risk of someone accessing your CNC machine is probably lesser than that of someone infiltrating a corporate network and wreaking havoc on files, stealing information and credentials.
I'm in the same boat where I work with XP running on our CNC machines. You can only lock them down so much and still have support from the manufacturer. It's just a standard xp box like any office pc would be running. The machines are all on the office network and are connected to the internet. It is just too valuable to keep them off the network. The foreman who is operating the machine can look at shop drawings on the manager's computer. Someone in the office draws a piece of furniture in sketchup and can export a cut list directly the the CNC machine ready to run. Run a sheet of material on the machine and it deducts it from the materials inventory. etc etc etc
Comments
Why would you need to update your CNC machine anyway? Surely such a device is locked down and wouldn't fall prey to the kinds of vulnerabilities a corporate PC would. Presumably you're referring to the fact your CNC machine is setup to be operated remotely? The risk of someone accessing your CNC machine is probably lesser than that of someone infiltrating a corporate network and wreaking havoc on files, stealing information and credentials.
I'm in the same boat where I work with XP running on our CNC machines. You can only lock them down so much and still have support from the manufacturer. It's just a standard xp box like any office pc would be running. The machines are all on the office network and are connected to the internet. It is just too valuable to keep them off the network. The foreman who is operating the machine can look at shop drawings on the manager's computer. Someone in the office draws a piece of furniture in sketchup and can export a cut list directly the the CNC machine ready to run. Run a sheet of material on the machine and it deducts it from the materials inventory. etc etc etc
Sounds like a good use-case for a VLAN.
By all means let the XP machines communicate with the inventory server and the blueprints NAS, but don't let them route to the Internet.