A network tap is a passive device that copies traffic from a network link to monitoring equipment without interrupting normal communications. It enables reliable visibility into industrial control-system traffic for diagnostics, security monitoring, and incident investigation.