Application servers are used across many different sectors to host various diverse software applications necessary to supporting the ICS. Example functions can include data analytics and reporting, alarm management, and the management/coordination of different control servers. The application server typically runs on a modern server operating system (e.g., MS Windows Server).
| Name | Sectors | Description |
|---|---|---|
| File Server | General |
Server designed to house files within the ICS environment and/or securely transfer files between the ICS and enterprise networks. |
| License Server | General |
Vendor-specific server that operates and maintains application licenses for different ICS applications to prevent computers from reaching across the ICS/enterprise network boundary directly. |
| Update / Patch Management Server | General |
Server capable of providing updates and/or patches to computers with general purpose operating systems (e.g. MS Windows or Linux) within the ICS environment to prevent computers from reaching across the ICS/enterprise network boundary directly. |
| Domain Controller (DC) | General |
MS Windows server used for enforcing security policies and role-based access control (RBAC) rules and managing identity and access management (IAM) policies within a network. |
| Database Server | General |
MS Windows (primarily) server used for tracking long-term point information, control sheets, license information, trends, etc. Paired with a Domain Controller and in some cases may be installed on the same machine functioning as a domain controller. MS SQL & Oracle are common types of database software found. |
| Alarm Collector | General |
Server that is a target of device/server alarms for a distributed system. Some workstations or servers may have the job as the alarm collector and may only be a process/service running on the machine. |
| Asset Management Server | General |
A vendor-specific piece of software that collects information about vendor hardware or allows for configuration of that hardware (i.e., FactoryTalk Asset Center). May also be known as: Field Device Management. |
| Telemetry Server | General |
Servers that collect Layer 2 communications or information and send via Layer 3 to other network segments or outside the control zone for collection (examples: PI Feeder, Remote Data Server). |