Water-treatment zones and conduits

A water treatment network architecture in five conduits: enterprise queries to a DMZ historian replica, vendor access through a jump host, remote RTU telemetry through an encrypted WAN to an MQTT broker (TCP 8883), SCADA HMI to a treatment process PLC behind a cell firewall, and an independent safety system with hardwired shutdown and a status-only gateway.