Firewall rule matrix

A seven-row firewall rule matrix (HMI to PLC over DNP3 or Modbus TCP permitted, historian to PLC over OPC UA or HTTPS permitted, engineering workstation conditional on a maintenance window, corporate PC denied, vendor through an MFA gateway conditional, jump host recorded and permitted, all other traffic denied and logged) next to a zone diagram numbering each flow.