.png?width=200&height=59&name=IPTellogo-byline-2020-dark-v2-pnd-optimised-500%20(1).png "IPTellogo-byline-2020-dark-v2-pnd-optimised-500 (1)")
Water, power and gas networks are some of the hardest to run well. They're spread across huge areas, full of industrial and IoT equipment, and a failure can make the evening news. In this blog, we'll look at the challenges utilities face and how a co-managed service helps secure, monitor and modernise these critical networks.
Utility Networks: What Makes Them Different?
Utility networks combine scale, specialist equipment and very little tolerance for failure. A water, power or gas utility may have hundreds of sites spread over a vast area, each with programmable logic controllers (PLCs), legacy kit and IoT devices, and each needing remote access as well as connectivity for staff on site.
The hardware is different too. Networking equipment at utility sites often runs on 48V, so small form factor switches are needed, frequently rated for high temperatures and fanless to avoid drawing in dust. It has to be tough, but also easy to swap when something does fail.
Every site has its own personality. A water treatment plant might need Wi-Fi across a large outdoor area of processing tanks to support call assist, while an electrical substation might need equipment rated for a hazardous environment. That mix is why we approach utilities as their own discipline, and why site knowledge is part of running these networks well.
Co-Managed: Augmenting Your Teams
A managed service for a utility should add to your team, not replace it. We'll never stand in for your field crews, but our managed services can add network experience, know-how and capacity. In our co-managed model you keep full administrative access for the life of the agreement, and both teams work from the same operational picture.
Utilities are often stretched for people and specialist skills, particularly during a network refresh. Bringing some order to the network is usually the first win.
That starts with a structured transition: discovery, tooling, a risk register and a remediation plan, followed by knowledge transfer and formal operational acceptance. Most transitions take four to twelve weeks. Along the way we can build out a full set of network diagrams, which on older networks can be the first up-to-date picture anyone has had for a while.
OT Security: Segmenting IT and Operational Technology
.png?width=173&height=173&name=What%20is%20Cisco%20SDA_%20(Instagram).png)
Utilities run two networks side by side: IT and operational technology (OT). On both, equipment is often ageing, rarely patched and sometimes no longer fully understood, which leaves it exposed. Moving from flat networks to proper segmentation is one of the most valuable security improvements a utility can make.
Cisco SD-Access fabric is one way to get there, segmenting the network by identity rather than relying on a flat design. It's a significant shift, and it pays to have a partner who has done it before.
Our Cisco Campus Access managed service covers Catalyst 9000 switching and wireless through Catalyst Center, and its Critical tier adds management of your SD-Access fabric for zero-trust segmentation, together with our Cisco ISE managed service. On ISE, Critical adds TrustSec and SGT policy, SD-Access fabric authentication and threat-centric quarantine.
Not sure where to begin? Our network security assessment is a quick way to see where the biggest gaps are.
Close Monitoring: Watching Every Remote Site
When sites are scattered across a wide area, close monitoring is what stops a small fault from becoming a major outage. Alerts are designed to sound before an issue turns serious, so our engineers can get to it early, and Highlight gives both teams a live view of device health, performance and open incidents.
Not every failure gives warning, of course. When hardware fails outright, the challenge is working out what has actually failed amid a flood of alarms. Our monitoring is set up as a hierarchy: when a major event occurs, lower-level alerts are suppressed and the top alert can raise a ticket automatically. Then we work with your team to diagnose the issue and agree next steps.
For mission-critical and OT environments, the Critical tier provides 24x7 incident response with a named Level 3 engineer and a named Customer Success Manager. And where sites depend on internet or cloud services, ThousandEyes can be added to see the paths you don't own.
Pro-Tip: Before monitoring goes live, rank your sites by how long each can tolerate an outage. That ranking shapes alert priorities, escalation paths and where redundancy is worth the spend, and it's far easier to agree calmly than in the middle of an incident.
Lifecycle: Keeping Equipment Current
.png?width=173&height=173&name=Project%20Glasswing%20(Instagram%20Post).png)
Resilient utility networks need equipment and software that are kept current. Leaving a device alone because it has run happily for years is tempting, but it will almost certainly carry known bugs that leave it open to attack. A lifecycle approach replaces that risk with planned, rolling upgrades in agreed change windows.
We track software currency and end-of-life milestones across the equipment we manage, test new releases before they reach production, and help you plan refreshes before they become risks. These are basics of running a network, yet they're often the first thing to slip when a team is overstretched.
On the Critical tier, risk-based patching puts the most important updates first. Resilience also means removing single points of failure and retiring ageing hardware, and both belong on the agenda at your regular service reviews, alongside capacity and your technology roadmap.
Utilities Managed Services: FAQs
What Are Utilities Managed Services?
A managed network service for water, power and gas utilities that covers monitoring, incident response, security and lifecycle management across many remote sites, working alongside your own IT and OT teams rather than replacing them.
Can a Managed Service Provider Support OT Networks?
Yes. Our Critical tier is designed for mission-critical and operational technology environments, with 24x7 incident response, a named Level 3 engineer and risk-based patching. Your OT staff keep full access throughout.
How Do You Improve Security on a Flat Utility Network?
Usually by segmenting it. Cisco SD-Access fabric with Cisco ISE separates devices and users by identity, and we can manage both. A network security assessment is a sensible first step.
Will We Lose Control of Our Network?
No. Under our co-managed model your administrative access stays in place for as long as the agreement runs, and our engineers and yours share one operational view.
Utilities Managed Services: Summary
Utilities run some of the most demanding networks there are: many remote sites, industrial and IoT equipment, and an OT environment where an outage can make headlines. A co-managed service adds close monitoring, segmentation, lifecycle discipline and 24x7 cover where it's needed, freeing your own team to focus on projects and the supply of water, power or gas.
Need Help With Utilities Managed Services?
If that's useful, see how we support utilities, find out more about our Cisco Powered managed services or make an enquiry. Our free 10-minute Build Your Business Case assessment will suggest the right tier and put a figure on what's at stake across your sites. You can also reach us at sales@iptel.com.au.