Configure traffic mirroring

This article is one in a series of articles describing the deployment path for OT monitoring with Microsoft Defender for IoT and provides an overview of the procedures for configuring traffic mirroring in your network.

Diagram of a progress bar with Network level deployment highlighted.


Before you configure traffic mirroring, make sure that you've decided on a traffic mirroring method. For more information, see Prepare an OT site deployment.

Traffic mirroring processes

Use one of the following procedures to configure traffic mirroring in your network:

SPAN ports:

Virtual switches:

Defender for IoT also supports traffic mirroring with TAP configurations. For more information, see Active or passive aggregation (TAP).

Next steps