This document provides a high-level reference architecture for OT and IoT device security in Industrial Control Systems (ICS) using Palo Alto Networks’ Next-generation firewalls, the Strata Logging Service (formerly known as Cortex Data Lake), and IoT Security Service.