The firewall can be added between the DeltaV network and a plant LAN as shown here.
The firewall can be added between the DeltaV network, a demilitarized zone (DMZ), and the plant LAN.