With Ken's approach you should be able to determine exactly what is wrong.
However, I approach this problem a bit differently in each of the control networks I design. I ALWAYS put a router in place to create separate networks for the control devices, the HMI's, the information network LAN, and any WAN connection. Then I route only those ports or protocols between networks that I know have to cross networks. This absolutely ensures the control network will NEVER be affected by any other traffic.
A good router will tell you where all your traffic is occurring, and, if you segment as I suggested above, which ports or protocols are attempting to cross network segments. Then you simply forward the appropriate traffic exactly as you need. I have been using the Zyxel (Zywall 2+ for small networks, USG 100/200 for larger networks) for a few years and have never been disappointed. They have a great GUI so you never have to learn some cryptic language like Cisco's IOS. And the Zywalls have never failed me - either with features or hardware failures. I use them in all my industrial designs (even though they are not an industrial-rated device). There are many 'good' routers that will do what you need as long as you spend the time to figure them out.