--- sourceDocument: Brazil Operational Technology Management sourceDocumentLink: https://www.servicenow.com/docs/r/operational-technology Release : - brazil ft:locale : - en-US ft:publication_title : - Brazil Operational Technology Management ft:clusterId : - optm bundleId : - optm workflow : - Technology --- # Automated Mapping Across Zone-based IP Network Groups # Automated Mapping Across Zone-based IP Network Groups {#ariaid-title1} Release version: Brazil Updated September 10, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 4 minutes to read Automate mapping of Operational Technology (OT) devices to the production process using the Automated Mapping Across Zone-based IP Network Groups (AMAZING) feature.​ When OT managers experience vulnerabilities or must manage workflow involving OT devices, the context of how the OT device connects to the production process it automates is critical to prioritizing work.  Automatic mapping of OT devices to ISA equipment model entities enables the view of device-to-process relationships. Note: Only one subnet range according to site is supported. Two different sites can have the same subnet; for example, 192.168.101.0/24. But multiple subnets of the same range are not supported for the same site. It is recommended that you use manual mapping in this scenario. ## Key benefits {#automate-mappings-between-ot-assets-and-equipment-model-entity__section_ufr_fpp_mtb} * Upload and store OT subnets from authoritative sources (such as NetDB or Firewalls) as records in a ServiceNow instance. * Automate assignment of OT devices to ISA entity using IP addresses and OT subnet. * Minimize issues with reuse of private IP address ranges across multiple sites. * Use discovered subnets in copy-paste networks to help uniquely identify OT devices for mapping. {#automate-mappings-between-ot-assets-and-equipment-model-entity__ul_pg5_wjx_ktb} Industrial networks use subnets to divide private IP address space, with each subnet aligned to a production process or equipment entity. For example, a canning line runs on a 192.168.101.0/24 network where all equipment was programmed by the integrator. IPs for control systems and OT devices are hard-coded into the automation software. When the subnet maps to a canning line in the Atlanta site, detected PLCs with IPs like 192.168.101.66 are automatically mapped to that line. The mapping feature relates each subnet to an equipment model entity. You can map OT devices to associated subnets based on imported IP addresses from OT-certified integrations or Discovery for Operational Technology. ## Types of mapping {#automate-mappings-between-ot-assets-and-equipment-model-entity__section_tn2_2p2_h3c} The following types of mapping are supported in the AMAZING feature.{#automate-mappings-between-ot-assets-and-equipment-model-entity__table_ugv_pp2_h3c__entry__2} | Type | Description | |-|-| | IP Network | Subset of IP addresses in a subnet. Note: IP network mapping isn't supported in a copy-paste network. | | IP Range | Entire subnet, in CIDR notation Note: IP range mapping isn't supported in a copy-paste network. | | Discovered Subnet | Discovered subnet in your OT network. Note: Discovered subnet mapping is supported in a copy-paste network. | [Table 1. AMAZING mapping types] {#automate-mappings-between-ot-assets-and-equipment-model-entity__table_ugv_pp2_h3c} ## Using discovered subnets to uniquely identify devices {#automate-mappings-between-ot-assets-and-equipment-model-entity__section_b3j_w32_h3c} Copy-paste networks create difficulty uniquely identifying OT devices and mapping them to equipment model entities. At some sites, the same IP subnet range applies to multiple equipment model entities, causing ambiguity about device mapping. Configure the discovered subnet to identify unique devices and their equipment model entities for more accurate mapping. By using discovered subnets with the AMAZING feature, you can uniquely identify OT devices in a copy-paste network. The logic is as follows: 1. When OT device data is populated from a Service Graph Connector, the subnet and managed network must be populated in the IP Address \[cmdb_ci_ip_address\] table using the Netmask and Network partition identifier fields. The Network partition identifier field is important to the mapping process because it's always unique to an OT device. 2. The Discovered subnet and Managed network fields must also be populated in the OT device data for mapping to continue. {#automate-mappings-between-ot-assets-and-equipment-model-entity__ol_wvf_kk2_h3c} The AMAZING feature retrieves all configuration items (CIs) associated with a particular site. The IP address details, including the Netmask and Network partition ID fields, are obtained. Using the IP address details, the feature determines the discovered subnet then checks if the selected subnet and the managed network match the discovered subnet. If a match is found, the Automated by :: Automates relationship is established between the CI and the equipment model entity to effectively map the OT device to the correct entity. The discovered subnets live in the OT Discovered Subnets \[sn_ot_discovered_subnet\] table available with the Industrial Core. This table leverages the following attributes to help refine OT device mapping accuracy: * CIDR * Discovered Managed Network * Site {#automate-mappings-between-ot-assets-and-equipment-model-entity__ul_upp_jj3_g3c} For more information about Industrial Core, see [Industrial Core plugin](https://www.servicenow.com/docs/~oUasW14yjLqPWNLtg2KtA "The Industrial Core plugin contains the class mappings needed for the Operational Technology (OT) certified Service Graph Connectors."). You can also manually create a discovered subnet. For more information, see the [Create an OT discovered subnet](https://www.servicenow.com/docs/XRAQDMyDWFAuIb7Yv4pwaw "Create an Operational Technology (OT) discovered subnet to use during OT subnet mapping to help identify OT devices and assign them to the correct equipment model entity."). ## Automated mapping feature personas {#automate-mappings-between-ot-assets-and-equipment-model-entity__section_m41_drw_mtb} The automated mapping feature is aimed at the following personas.{#automate-mappings-between-ot-assets-and-equipment-model-entity__table_ivx_4nv_xbc__entry__2} | Persona | Description | |-|-| | System Admin | The System Administrator performs these tasks: * Imports data into the OT subnet to Equipment Model Entity Mapping table * Activates, schedules, or manually triggers the OT Subnet Mapping scheduled flow {#automate-mappings-between-ot-assets-and-equipment-model-entity__ul_hmz_pnv_xbc} | | ISA Admin | The ISA admin manually triggers the Map all OT devices UI action from the OT Subnet Mapping list view. | | ISA Editor | The ISA editor performs these tasks: * Manually creates and updates OT subnet mapping entries for specific sites * Maps individual OT devices to an equipment model entity from an OT device record * Maps multiple OT devices to an equipment model entity from an OT subnet mapping record {#automate-mappings-between-ot-assets-and-equipment-model-entity__ul_lmz_pnv_xbc} | [Table 2. Personas for automated mapping] {#automate-mappings-between-ot-assets-and-equipment-model-entity__table_ivx_4nv_xbc} ## Plugins {#automate-mappings-between-ot-assets-and-equipment-model-entity__section_g5x_sjv_mtb} Enabling the mapping feature requires the following plugins: * [Operational Technology Manager](https://www.servicenow.com/docs/adbc3uLN7Tju4QqXp6wn7A "The Operational Technology Manager application creates the foundational data and relationships that enable your organization to use the ServiceNow Operational Technology solution. Operational Technology Manager supports the use of the Configuration Management Database (CMDB), Service Graph Connectors, and Discovery applications in the ServiceNow AI Platform.") * [Industrial Process Manager](https://www.servicenow.com/docs/2MdRHrFJQo6R7EDjiWbZ0A "Use the Industrial Process Manager application to create the ISA-95 Equipment Model data foundation that is required for the ServiceNow Operational Technology solution. The Industrial Process Manager enables you to create your own version of the equipment models in each of your sites.") * [Industrial Core](https://www.servicenow.com/docs/~oUasW14yjLqPWNLtg2KtA "The Industrial Core plugin contains the class mappings needed for the Operational Technology (OT) certified Service Graph Connectors.") If the required plugins are installed, an ISA administrator can access the subnet mapping feature from the Industrial Process Manager application menu on the ServiceNow AI Platform. * **[Workflow for the automated mapping feature](https://www.servicenow.com/docs/ZPWh541vyfs4xNDc52NBIg)** The Industrial Process Manager includes an automated flow for the automated mapping feature. * **[Configure Automated Mapping of OT devices using guided setup](https://www.servicenow.com/docs/Vm_f1zjTE0UvJpKSwFWudg)** Use the Industrial Process Manager guided setup to automatically map OT devices to the ISA equipment model entity. * **[Configure the OT Subnet Mapping scheduled flow](https://www.servicenow.com/docs/0XC3gDupVyXSeWWrNtvqjw)** Configure the OT device mapping flow to automatically map OT devices to sites and equipment model entities. * **[Automatically map all OT devices to an equipment model entity](https://www.servicenow.com/docs/qDi8mOlCoqCK1AxWRX1uxA)** An Operational Technology (OT) Amazing admin can trigger automated mapping of all OT devices to the appropriate ISA equipment model entity. * **[Create an OT discovered subnet](https://www.servicenow.com/docs/XRAQDMyDWFAuIb7Yv4pwaw)** Create an Operational Technology (OT) discovered subnet to use during OT subnet mapping to help identify OT devices and assign them to the correct equipment model entity. * **[View OT devices not assigned to a site](https://www.servicenow.com/docs/D4S3KT61aKfBpYzQDQzO~g)** View the list of Operational Technology (OT) devices that aren't assigned to a site. * **[View unmapped OT devices](https://www.servicenow.com/docs/MG76p6YVQGEH0yZJMoQafQ)** View a list of Operational Technology (OT) devices with IP addresses that aren't mapped to any equipment model entity. * **[View OT subnet mappings](https://www.servicenow.com/docs/2c1EFX2Tw83rRqMRLFB3aA)** View all mapped OT subnets assigned to an equipment model entity. * **[View all mapped OT devices](https://www.servicenow.com/docs/Q25j0OjHV_IHgwxK7DmkhQ)** View a list of all the Operational Technology (OT) devices that are mapped to an equipment model entity.