Network segmentation with a next-generation firewall (NGFW) is a critical first step in securing an operational technology (OT) network. Industrial firewalls for OT networks typically demand a tough exterior while also containing specific, purpose- built controls and cybersecurity for unique industrial (non-IT) networks. Because networks and cybersecurity are not static, cybersecurity controls must be updated and refined to provide real-time protection in an ever-changing industrial and critical infrastructure threat landscape. Below are five key considerations in choosing an industrial (OT) firewall.