Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

Before installing a cobot, inventory the shop’s connected equipment, map every communication path the robot actually needs, decide how to separate business IT from operational technology (OT), and review access and security settings with the integrator. Then validate the selected controller’s ports, protocols, timing, and capacity against its documentation. A generic internet speed test cannot establish readiness, and there is no universal bandwidth, latency, or network-topology requirement for an unspecified cobot.

What a network assessment should establish

A network assessment is a practical design check, not a search for a single speed-test score. Its purpose is to find out what the cobot must communicate with, which connections are necessary for production or support, where those connections cross trust boundaries, and how the shop will manage them.

This matters because a robot controller may interact with more than an arm. Depending on the installation, it could exchange data with a PLC, HMI, engineering computer, sensors, peripheral controllers, monitoring systems, or a remote support connection. The actual list depends on the robot model, software, integration, and the tasks the cell must perform.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

NIST’s 2023 publication Security Segmentation in a Small Manufacturing Environment describes a six-step approach and explains how segmentation can help manage asset inventory, communications, privileged and remote access, and network visibility. NIST’s Guide to Operational Technology (OT) Security, SP 800-82 Rev. 3, published September 28, 2023, emphasizes that OT has distinct performance, reliability, and safety requirements. Those principles are useful for a small shop, but they do not prescribe one network layout for every cobot.

#1 Best Overall
Sale
Omada IES208G, 8 Port Gigabit Easy Managed Industrial Switch
  • 8× Gigabit Ports (6× RJ45, 2× RJ45/SFP Combo)
  • Professional Industrial-Grade Design: -40~75°C Operating Temperature, 6kV Lighting Protection, and 1+1 Redundant Power Input
  • Abundant Features: VLAN, QoS, and STP/RSTP
  • Centralized Cloud Management via the Web or Omada App
  • Durable IP40 Aluminum Casing and DIN-rail / Wall-mount Design

As NIST puts it, the OT guide provides guidance on securing OT “while addressing their unique performance, reliability, and safety requirements.” That framing is important: a shop should not treat the cell as an ordinary office network, but it also should not apply controls without considering how they affect production and the safety design. The assessment should produce practical documents the people responsible for IT, OT, and integration can use—not just a pass/fail label.

1. Inventory the equipment and dependencies

Start with the equipment that will be installed or affected, then include the network infrastructure and services it depends on. Record what each device does and who is responsible for it. A device list is more useful when it distinguishes production-critical equipment from ordinary office devices and notes where equipment is physically located.

Include these assets

  • The cobot arm and its controller.
  • PLCs, HMIs, engineering or programming computers, and any dedicated operator stations.
  • Sensors, vision systems, grippers, and peripheral controllers that may exchange data with the robot or PLC.
  • Switches, routers, wireless access points, and any network links between the shop floor and office or internet connection.
  • Servers or services involved in name resolution, logging, backups, software updates, or production monitoring, if the installation uses them.
  • Remote support paths, including the equipment and accounts used to provide vendor or integrator access.

Record enough detail to make the inventory actionable

For each item, note its owner or support contact, location, operational purpose, known software or firmware version, network interface, and whether it is safety- or production-critical. If the version is unknown, mark it as unknown rather than assuming that a feature or setting is available. Ask the integrator which details must be confirmed for the chosen controller and software.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Inventory should cover current equipment as well as planned additions. An unused-looking computer, a wireless bridge, or a remote connection can still provide a path into the cell. NIST’s small-manufacturer segmentation guidance treats asset inventory as a foundation for deciding which protective measures and communication controls are appropriate.

Use the inventory to distinguish ownership and responsibility as well as hardware. For example, the person who administers a business router may not be the person who maintains the PLC or robot controller. Record who can approve a configuration change, who can restore it, and who should be contacted if a connection is lost. This avoids commissioning-day uncertainty about whether a device is in scope or whose permission is needed.

Also note dependencies that are easy to overlook because they are not physically inside the cell. If the proposed installation uses a backup destination, logging service, update source, or name service, identify it and document why it is needed. Do not add a dependency simply because it is common elsewhere; include it when the actual installation relies on it. This is the difference between a useful asset inventory and a generic list of everything in the building.

2. Draw the required communication map

For every connection the installation needs, document what is communicating, in which direction, by what protocol, and for what purpose. Separate continuous or time-sensitive control exchanges from programming, monitoring, production-data transfer, and remote service. This makes it easier to avoid broad access rules that allow more traffic than the integration requires.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Use a flow table

Source Destination Direction Protocol or interface Purpose Required timing or availability
Device initiating the exchange Device receiving it One-way or two-way, as applicable Confirm with the integrator Control, programming, monitoring, data, or support Document the actual operational need

The table is a worksheet, not a claim that every cobot uses the same interfaces. Ask the integrator to identify the ports and interfaces required for the exact robot model, controller, software version, PLC, fieldbus, and enabled extensions. Universal Robots cautions that some URCaps may require particular interfaces; check the relevant extension vendor’s requirements before disabling a service or closing a port.

Universal Robots documents Ethernet use for Modbus, EtherNet/IP, PROFINET, remote access, and control on its equipment. These are examples of possible uses, not a list of connections every cobot needs. Do not open every port “just in case.” Keep the documented reason for each required flow with the network configuration so that an integrator or shop administrator can review changes later.

Rank #2
MokerLink 8 Port Gigabit PoE Industrial DIN-Rail Ethernet Switch Managed, 2 SFP Ports, IEEE802.af/at 96W PoE+ Power, Web L2+ Managed IP40 Network Switch (-40 to 185°F), with Power Supply
  • This network switch include 8 gigabit ethernet ports, 2 gigabit SFP, switching capacity up to 20bps. Support automatic detection, full/half duplex MDI/MDI-X adaptive.
  • Easy-to-use web management interface, with rich L2+ functions, including 4K Vlan, 8K mac table, Qos, port security, speed control; IGMP; storm suppression; ring network, loop protection; etc.
  • The poe port 1-8 support IEEE802.3af/at standard, can connect multiple poe devices, such as POE camera, poe ap, etc. Please note that passive 24v poe is not supported. His POE input DC voltage is 48-57V, so please use a input voltage above 48V to provide POE, if it is 12V, it cannot provide POE
  • The shell is made of industrial-grade aluminum alloy, which is more sturdy, surface groove design, better heat dissipation, integrated DIN-rail/wall mount kit, installation and disassembly are very simple.IP40 protection grade, working temperature -40~75°C(-40~185°F), super robustness, anti-lightning, anti-static and anti-overload protection, adapt to various harsh environments
  • Dual power supply, automatic fault switching, anti-reverse connection does not damage the equipment, higher reliability, equipped with one UL-certified power adapter, can be used without additional purchase. Consumption CPU, no fan quiet operation,suitable for various networks, such as home office, computer room, warehouse, factory, compact control box and other industrial scenarios with Ethernet access

When completing the map, ask whether an exchange is initiated by the controller, another device, or both, and whether it is needed all the time or only for a defined task such as programming or vendor support. Record the reason in plain language as well as the technical protocol name. If someone later proposes a new rule, the map provides a basis to ask what production or support need it serves.

Do not treat a device’s physical presence on the same switch as proof that it needs unrestricted access to the controller. List necessary communications individually, then have the integrator confirm exact ports and protocol behavior. If a vendor extension or software feature changes the communication requirements, update the flow map rather than relying on a rule created for an earlier configuration.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

3. Decide where the network boundaries belong

Once the assets and flows are known, decide which devices can share a trust zone and which communications must cross a controlled boundary. The shop may need a separation between ordinary business devices, shop-floor OT, and the cobot cell. The right arrangement depends on existing equipment, staff capability, production needs, and the documented flows—not on a universal recipe.

NIST recommends characterizing, segmenting, and isolating IT and OT devices. Its OT guidance identifies factors such as management authority, trust, functional criticality, data flow, and physical location as relevant to those decisions. A dedicated OT segment, VLAN, firewall-controlled boundary, or another suitable design may be considered, but the available evidence does not establish a specific product or architecture as necessary for every installation.

Questions to answer before choosing a design

  • Which devices are managed by the business IT administrator, and which are managed by OT staff, the integrator, or a vendor?
  • Which devices need to exchange data directly, and which can communicate through a controlled boundary?
  • What access, if any, must office computers have to the controller or cell?
  • Does the cell need a connection to business services, the internet, or a vendor support path? If so, what is the operational reason?
  • Could a fault or unwanted change in an office network affect the production cell, or could a cell-related issue affect business devices?

Have the integrator and the person responsible for the shop network review the proposed boundaries together. A topology that is secure on paper but difficult for the shop to support can create operational problems; a simple design should still make necessary access and trust boundaries clear.

Segmentation is a way to group assets according to operational function, criticality, and cybersecurity needs. It is not synonymous with buying a particular switch, and a VLAN by itself should not be assumed to satisfy every security or operational requirement. Ask the people designing the installation to explain what boundary is being created, which traffic may cross it, and how the shop will administer it over time.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For a small operation, maintainability matters. If the staff who will own the network cannot identify the segments, understand the allowed flows, or make an approved change, the design may be hard to operate reliably. The goal is not to copy a large factory architecture but to make trust relationships and necessary communications explicit at a scale the shop can support.

4. Review credentials, services, and remote access

List who can reach the controller locally, from shop computers, from adjacent networks, and through remote support. For each route, record who needs it, what the access is for, who approves it, and how it will be managed. Keep remote support distinct from ordinary production communications so that the shop can make an informed decision about when it is available.

Universal Robots’ cybersecurity guidance recommends connecting only to trusted, secured networks; allowing only trusted local devices; limiting inbound connections from adjacent networks; and restricting outgoing connections to the smallest needed set of ports, protocols, and addresses. It also recommends changing default credentials, disabling unused services and SSH, and keeping software current. These recommendations are specific to that manufacturer’s guidance. Confirm the available controls and their effects in the selected cobot’s own documentation and software version before changing settings.

Rank #3
Industrial 𝟴 𝗣𝗼𝗿𝘁𝘀 𝗠𝗮𝗻𝗮𝗴𝗲𝗱 Gigabit Fiber Switch Web Management Switch with 100/1000M Adaptive 𝟮 𝗦𝗙𝗣 Slots Din Rail Small Smart Network Switch Support QOS, VLAN, IGMP 𝟭𝟮-𝟰𝟴𝗩 𝗗𝗖
  • 【𝗣𝗼𝗿𝘁 𝗖𝗼𝗻𝗳𝗶𝗴𝘂𝗿𝗮𝘁𝗶𝗼𝗻】Equipped with 8 10/100/1000Base-T RJ45 ports with Auto MDI/MDI-X and 2 SFP slot 100Base-FX or 1000Base-X dual mode (auto detection).

Universal Robots warns: “Connecting the robot to a network that is not properly secured, can introduce security and safety risks.” Its guidance also says: “Only connect your robot to a trusted and properly secured network.” Treat these as manufacturer-specific cautions, not a substitute for the selected robot maker’s instructions or the integrator’s safety review.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Do not disable a service merely because its name is unfamiliar. First confirm whether the controller, PLC, enabled extension, or support workflow depends on it. Record the approved settings and the reason for each exception, and make sure the person maintaining the network knows how to restore the configuration if a change disrupts commissioning or production.

For remote access, settle the practical questions before the connection is needed: who may request it, who authorizes it, what system or account is used, and who is responsible for ending or changing access when support is complete. The assessment should identify the path and the access need without assuming that every shop should expose the controller to the internet. Follow the selected manufacturer’s remote-access requirements and the shop’s own approval process.

Credentials and services are part of the operating configuration. Include their owner and review process in the commissioning handover so that a later software update, integrator visit, or staff change does not leave an undocumented account or an unreviewed service enabled. Any change should be checked against vendor documentation because a setting that is unnecessary in one installation may be required by another feature or integration.

5. Check interface compatibility, timing, and capacity

After the communication map is approved, compare it with the selected controller’s documentation and the integrator’s requirements. Check the physical connector and link speed, the required protocol, the PLC or scanner configuration, expected update or polling rate, and the load generated by other devices sharing the path. Assess the conditions during production rather than relying only on an idle network or a general internet speed test.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Universal Robots’ CB5 manual describes an Ethernet interface supporting 10–1000 Mb/s and identifies uses including Modbus, EtherNet/IP, PROFINET, remote access, and control. This is a controller-specific example. It does not mean a shop needs gigabit internet or that every cobot requires those protocols.

For another manufacturer-specific example, Universal Robots’ EtherNet/IP guide gives a valid requested packet interval (RPI) range of 2–3200 ms. The guide notes that shorter intervals consume more resources from the PLC, robot, and network, and recommends sufficient bandwidth between the scanner, robot, and other devices. That range belongs to the guide’s implementation; it is not a general minimum or target for all cobots. Ask the integrator to specify the required timing for the actual application and confirm the effect of the chosen value on the whole system.

Compatibility checks for the integrator

  • Which Ethernet ports, connectors, and supported link speeds apply to this controller?
  • Which protocol and communication role will each connection use?
  • What update rate, polling interval, or other timing requirement applies to each exchange?
  • What devices share the relevant network path, and how will production traffic affect it?
  • Are there required services or extension-specific interfaces that must remain enabled?
  • How will the team verify communication under expected production conditions?

Use the examples as prompts for verification, not as a sizing formula. The CB5 figure describes a controller interface; it is not the speed of an internet plan or a claim that a shop must operate at the maximum interface rate. Likewise, the EtherNet/IP RPI range is tied to a particular implementation and does not establish a universal cobot latency target. The right values depend on the exact application and connected equipment.

A test should use the actual communication path and operating configuration where practical. Ask the integrator what evidence will confirm that the required exchanges work under expected production conditions and what symptoms would indicate a network issue. The assessment should not assign a readiness score unless the selected vendor or integrator has defined a meaningful test and acceptance criteria for the application.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
LINOVISION Industrial 12 Ports L2+ Cloud Managed Solar PoE Switch
  • L2+ REMOTE CLOUD MANAGED PoE SWITCH-Supports L2+ management functions like VLAN, QoS, ACL, Static Routing and Link Aggregation; Automatic ONVIF cameras discovery; Remote monitor and control PoE ports from central Cloud, such as turn On/Off PoE, speed/ priority/ PoE budget settings.
  • DC8~DC57V POE VOLTAGE BOOSTER- Support DC8V-57V input and standard IEEE802.3af/at PoE output with built-in voltage booster.
  • 12 FULL GIGABIT PORTS- Provides 4x 45W and 4x 30W PoE Ports, 2x Gigabit Uplink Port and 2x Gigabit SFP ports;All ports 10/100/1000Mbps self-adaptive full duplex and Backpressure half-duplex flow control. Total PoE budget 240W@48V, or 180W@24V, or 70W@12V.
  • INDUSTRIAL DESIGN- IP40 Metal shell & fanless design. Support DIN-rail or wall mounted installation. Wide working temperature -40℉ to +167℉(-40℃ to 75℃), 4KV surge immunity and 6KV ESD protection.
  • NON-STOP POE SUPPLY- Support 2 channel DC12V-48V redundant power inputs and DIP Switch for PoE System Reset, ensure high reliability networking system.

If traffic or timing requirements are unclear, do not compensate by opening more ports or buying faster internet. Return to the device and flow list, identify the exchange that needs attention, and ask the integrator to state its interface, expected timing, and capacity needs. This keeps network changes tied to a documented production requirement.

6. Plan changes, outages, and support before commissioning

Agree in advance who is allowed to change switch, firewall, controller, or PLC settings, and who must approve a change that affects the cell. Keep a record of the approved configuration and arrange a backup and rollback method before commissioning. If a network change causes a problem, the shop should know how to return to the known configuration without improvising during production.

Also decide what happens if the controller or a required network link is unavailable. The integrator and shop should establish how production will be paused or otherwise handled, who diagnoses the fault, and how vendor access is arranged. The appropriate response depends on the machine, process, and safety design; do not treat a network plan as a substitute for the robot’s safety documentation or the integrator’s risk assessment. NIST’s OT guidance explicitly recognizes reliability and safety alongside performance as design concerns.

Make the handover usable: preserve the current asset list, approved flow map, relevant controller and software versions, configuration owner, support contact, and rollback approach together. When the network or robot configuration changes, note what changed and who approved it. That record can help distinguish an integration change from an unrelated shop-network change when troubleshooting begins.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Network availability is not itself a safety function. If loss of a link, controller communication, or external service could affect machine behavior, have the integrator explain the expected response and consult the robot’s safety documentation. Do not infer safe behavior from the existence of a firewall, network segment, or backup. The machine-specific safety design and risk assessment remain essential.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

7. Use the assessment to decide what to buy

Do not purchase network hardware based on the word “cobot” alone. First establish whether the documented design calls for a new switch, a managed switch, a cable run, or other equipment. NIST supports segmentation as a security approach, but that does not prove every cobot installation needs a managed switch.

If the approved design calls for a managed Ethernet switch, confirm port count, VLAN and management features, environmental suitability, and compatibility with the integrator before selecting one. If a cable run is required, its length, route, connector, and environment determine the appropriate specification; the robot model and controller documentation should be checked before ordering. Neither a generic switch category nor a generic cable description establishes suitability for an unspecified shop.

A managed industrial Ethernet switch with VLAN support is a possible category to consider only when the design calls for those capabilities. Check the actual number of ports and management features needed, the operating environment, and compatibility with the rest of the installation. A cable is similarly conditional: the run, connector, route, and environment matter. No universal cable type or switch purchase can be recommended without those site and model details.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

If outside help is needed, the relevant service category is OT network assessment, industrial networking, or cobot integration. Choose a provider based on the shop’s specific needs and verify its qualifications, scope, and support terms independently. Do not assume that a product or service category is required simply because the shop is installing a collaborative robot.

Best Value
Sale
NETGEAR 8 Port PoE Gigabit Ethernet Easy Smart Managed Switch (GS308EP)
  • GIGABIT ETHERNET PORTS: Features 8 x 1.0Gbps Ethernet ports for high-speed connectivity. Auto-negotiating ports detect the optimal speed for connected devices and work with existing Cat5e or Cat6 Ethernet cables.
  • POWER-OVER-ETHERNET (PoE): Includes 8 PoE+ ports with 62W total power budget, plus uninterrupted PoE and per-port PoE controls for managed power delivery.
  • EASY SMART MANAGED NETWORK SWITCH: Intuitive software interface offers Easy Smart Managed Essentials capabilities to configure VLANs, prioritize traffic with QoS, monitor ports, and manage network security for small businesses.
  • FLEXIBLE MOUNTING OPTIONS: Compact metal design supports desktop or wall-mount placement for versatile installation.
  • SILENT & ENERGY-EFFICIENT OPERATION: Fanless design ensures silent performance, while IEEE 802.3az Energy Efficient Ethernet reduces power consumption without compromising high-speed network performance.

When is the network assessment ready to sign off?

Before commissioning, the shop should be able to show a current asset inventory, a communication map reviewed with the integrator, and a documented decision about network boundaries. The exact controller and software requirements should be confirmed, access and security settings should have an owner, and the team should have an approved change and rollback plan. If a required interface, flow, timing value, or support path remains uncertain, resolve it with the integrator before treating the network as ready.

Sign-off is more useful when it records open items rather than concealing them. For each unresolved question, identify who will answer it and whether it must be resolved before commissioning. Confirm that the final flow map reflects enabled protocols and extensions, and that any equipment purchase follows the approved design. The assessment is a planning and coordination tool, not a guarantee that every network fault or security risk has been eliminated.

NIST announced an initial public draft of SP 800-82 Rev. 4 on September 21, 2026, with comments open through November 30, 2026. As of October 13, 2026, that is draft material; the finalized NIST OT guidance identified here is SP 800-82 Rev. 3, published September 28, 2023.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Frequently Asked Questions

How fast does a network need to be for a cobot?

There is no universal bandwidth or latency requirement for an unspecified cobot. Confirm the selected controller’s interface, required protocols, timing, and capacity with its manual and integrator. Universal Robots’ CB5 manual, for example, describes Ethernet at 10–1000 Mb/s; that is a model-specific interface specification, not a general internet-speed recommendation.

Does installing a cobot mean I need a managed switch or VLAN?

Not necessarily. Segmentation can help manage assets and communications, but the appropriate topology depends on the shop’s equipment, trust boundaries, staff, and documented communication needs. Buy a managed switch only if the approved design calls for its features, and verify port count, management capabilities, environmental suitability, and compatibility.

Should the robot controller be connected to the internet?

Only if the installation has a documented operational or support need for that connection. Map the path, identify who approves and uses it, and follow the selected manufacturer’s security guidance. Universal Robots advises connecting only to trusted, properly secured networks and limiting connections to what is needed; confirm requirements for the actual robot.

Can I disable SSH or close ports I do not recognize?

Do not change settings solely because a service or port is unfamiliar. Universal Robots recommends disabling unused services and SSH, but its guidance also warns that some URCaps need particular interfaces. Check the exact controller, software, extension, and support requirements with the manufacturer or integrator before changing access.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What does the 2–3200 ms RPI range mean for my installation?

It is the requested packet interval range in Universal Robots’ EtherNet/IP guide, not a universal cobot timing specification. The guide notes shorter intervals use more resources from the PLC, robot, and network. Ask the integrator to determine the appropriate timing for the actual devices and application.

Which NIST OT guidance is finalized as of October 13, 2026?

NIST SP 800-82 Rev. 3 was published September 28, 2023. NIST announced an initial public draft of Rev. 4 on September 21, 2026, with comments open through November 30, 2026; on October 13, 2026, Rev. 4 was draft material rather than finalized guidance.

The Bottom Line

Assess the network by inventorying the devices and dependencies, documenting each required communication path, choosing supportable boundaries between business IT and OT, and reviewing credentials, services, and remote access. Then verify the exact controller’s interfaces, protocols, timing, and capacity with its documentation and integrator. There is no one-size-fits-all speed, topology, or hardware purchase: make changes and buy equipment only when the installation’s documented requirements support them.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.