Systems and methods for operational technology device agent relay

A non-transitory computer readable medium storing instructions that, when executed by processing circuitry, cause the processing circuitry to perform operations comprising:

• receiving, from an endpoint management agent relay running on a first host device in a first subnet of an operational technology (OT network), at an endpoint management agent running on a second host device in a second subnet of the OT network, a driver associated with a target device in the second subnet of the OT network, wherein the driver enables the endpoint management agent to interface with the target device;
• executing the driver;
• receiving, from the endpoint management agent relay, a command to perform a task with the target device via the driver;
• performing the task via the driver, wherein the task comprises collecting data from the target device;
• and
• transmitting, to endpoint management agent relay, the data collected from the target device during performance of the task.

A method, comprising:

• receiving, at an endpoint management agent relay running on a first host device in a first subnet of an operational technology (OT network), a driver for an endpoint management agent running on a second host device in a second subnet of the OT network, wherein the driver is associated with a target device in the second subnet of the OT network, and wherein the driver enables the endpoint management agent to interface with the target device;
• transmitting the driver from the endpoint management agent relay running on the first host device to the endpoint management agent running on the second host device;
• executing the driver via the endpoint management agent running on the second host device;
• receiving, at the endpoint management agent relay running on the first host device, a command for the endpoint management agent to perform a task with the target device in the second subnet via the driver;
• transmitting the command from the endpoint management agent relay running on the first host device to the endpoint management agent running on the second host device;
• performing the task via the endpoint management agent running on the second host device, wherein the task comprises collecting data from the target device;
• and
• transmitting, from the endpoint management agent running on the second host device, to the endpoint management agent relay running on the first host device, the data collected from the target device during performance of the task;
• and
• transmitting the data from the endpoint management agent relay running on the first host device.