Hexagon PAS

PAS Alarm Management Platform Integration

Through OWA File Transfer Agent and SMTP Connector

Talk to an expert

Alarm rationalization and nuisance reduction

Real-time operator situational awareness

Cross-system alarm aggregation and normalization

Compliance with ISA 18.2 alarm standards

Hexagon PAS introduction

Hexagon PAS (PlantState Integrity) is an advanced alarm management platform designed to improve operator situational awareness and ensure safe, reliable industrial operations. It collects, analyzes and rationalizes alarms and events from multiple control systems, helping reduce alarm floods, eliminate nuisance alarms and prioritize critical events. 

By contextualizing alarms with process data, operational limits and system states, PAS transforms raw event streams into actionable insights, enabling operators to detect and respond effectively to abnormal situations while maintaining compliance with industry standards.

OT Cybersecurity Challenges

Key Cybersecurity Challenges to Overcome

Operational Imperatives Driving OT/IT Convergence
PAS centralizes alarm data from multiple control systems, requiring reliable cross-network data flows
Alarm rationalization and ISA 18.2 compliance require continuous access to real-time alarm and event data
Delayed or incomplete alarm replication undermines situational awareness and response times
The Cybersecurity Risks of Traditional Integration
Two-way protocols create persistent attack paths into OT
Firewalls lack context for industrial data flows and rely on rules that cannot prevent zero-day or unknown threats
Monitoring systems become high-value pivot targets
Why Cyberium's OWA is a Natural Fit for Securing Critical OT Infrastructures equipped with Hexagon PAS?
01

Beyond Firewall™, Airgap-grade and certified Network Segmentation built for PAS

02

Real-time, zero-latency data and metadata synchronization

03

Multi-sites, full-feature PAS integration at industrial scale across all monitored assets

How It Works
Architecture diagram showing how Cyberium OWA securely replicates Hexagon PAS alarms and detail files from OT to IT networks through a hardware-enforced optical data diode, using dual data paths: SFTP-based File Transfer Agent for detail files and SMTP Connector for real-time alarm notifications.
Cyberium OWA architecture combines a hardware-enforced one-way gateway with SMTP connectivity and file-based transfer agents to securely transmit Hexagon PAS alarms and related detail files across OT and IT environments. Alarm notifications are forwarded in real time through the OWA SMTP Connector, while the associated detail files are transferred separately through the OWA File Transfer Agent across the Data Diode — ensuring complete event visibility with zero inbound exposure.

Outcomes & benefits

Secure OT/IT Convergence Without Compromise

Solution Brief

Zero Attack Surface from IT to OT

Eliminate inbound risks by removing all bidirectional connectivity paths

Real-Time, Lossless Data Synchronization

Sub-second replication of PAS alarm data without latency or data inconsistency

Continuous Operations with No Downtime

High availability architecture with no maintenance windows or disruptions

Reduced Complexity and Operating Costs

Simplified architectures and up to 66% reduction in PAS infrastructure costs

OWA x Hexagon PAS Integration Reference Cases
Browse all OT Cases
  • Critical OT & Industry 4.0
  • OWA 2U/3U
  • Hexagon PAS
  • File Transfer Agent, SMTP

Secure OT Alarm Dispatch to Remote Engineers

We secure the Critical

— connecting what should stay isolated.
Talk to an Expert
Explore OWA