[Strata] Direction: a map that covers more (traffic, firewalls, cloud, OT)

[0b3l1X-SolidGeeks]

Ideas that widen what the map covers: real traffic, firewalls, the cloud, the physical layer and industrial systems. Effort: 🟢 low · 🟡 medium · 🔴 high. Part of the Strata ideas, not of the roadmap.

1. Observed versus declared flows 🔴 — Import real traffic (NetFlow/IPFIX, firewall logs) and compare it with the map: undeclared flows, unused rules.
2. Firewall rule review and generation 🔴 — Compare the real configuration with the map (shadowed, unused or overly broad rules) and generate change requests for several vendors.
3. Cloud and hybrid 🔴 — AWS, Azure and GCP connectors (VPCs, subnets, security groups), shown as zones linked to the internal network.
4. Active discovery 🟡 — Find the assets and ports missing from the map and propose them for review: shadow IT.
5. Physical layer and sites 🔴 — Rooms, racks, connected switch ports (LLDP/SNMP), and a geographic map of the sites.
6. Industrial systems (OT) 🔴 — Levels aligned with the Purdue model, industrial protocols (Modbus, S7, OPC UA), IEC 62443 zones and conduits. The stacked levels of Strata fit the Purdue model naturally.

Comment with your firewalls, cloud providers or industrial protocols: connectors are written for real setups. 👍 this post if this direction matters to you.