Two zones and a conduit

Two security zones, supervisory and control, joined by a single conduit with a firewall at its center. A rule table shows the source (HMI), destination (PLC), protocol (Modbus TCP on port 502), allowed operations (reads and approved writes), the firewall rule ID (FW-OT-021) and logging of permits and denies.