NextGen Firewalls, Anomaly Detection, IPS, and Industrial Gateway devices are adding deep packet inspection (DPI) "support" for ICS protocols ... a positive trend. However support is in quotes because this can range from full protocol support to checking only a single byte in the protocol. How is an asset owner to know how deep is the DPI? This session will provide ideas on how to answer that important question, beginning by introducing the terms of the control plane and data plane as applied to ICS protocols. It will continue by identifying different types of protocol communication and qualitatively rate the security importance of each type. This will provide advice on what to consider for your RFP and product evaluations.