OPSWAT DataDiode ComparisonGuide 2021
OPSWAT DataDiode ComparisonGuide 2021
With the rise of industrial IoT and digitization, unidirectional security gateways are increasingly being
deployed by private enterprises to securely transmit data generated by industrial control and safety
systems for nuclear power plants and other electrical power generating facilities, manufacturing
facilities, and transport systems to other networks (including the public Internet) while protecting the
networks containing these systems from attack.
OPSWAT MetaDefender™ can be easily integrated with OPSWAT’s NetWall™ Unidirectional Security
Gateway, as well as solutions from many leading vendors to provide a higher level of security and
visibility over the data brought into your organization. Data first enters through MetaDefender Kiosk
where a user with predetermined security clearance is allowed to scan data inserted into the Kiosk with
MetaDefender Core Multiscanning, Deep Content Disarm and Reconstruction (CDR), Proactive Data Loss
Prevention (DLP), and File-Based Vulnerability Assessment technologies.
If no threats are found, the data is allowed to pass through the unidirectional security gateway and enter
the secure network where it is stored in MetaDefender Vault. The user can then access the allowed files.
Any files brought into the organization are logged in MetaDefender Vault for audit purposes.
The research needed to select the right unidirectional security gateway for your use case and
environment can be daunting. To make this process easier, we did the research for you and consolidated
it in one place.
This newly updated version of the guide contains comparative information on the features of over 30
industry-leading data diode products, including:
▪ Product description ▪ Data masking capabilities
▪ Value proposition ▪ Physical dimensions
▪ Technology ▪ Sales and support contact information
▪ Certifications awarded ▪ Guest user support
▪ Supported transfer protocols ▪ Documented integration with OPSWAT
▪ Supported encryption standards MetaDefender
▪ Throughput
For more information about MetaDefender Kiosk, MetaDefender Vault, and the Unidirectional Security
Gateway and Data Diode vendors integrated with OPSWAT please contact us.
Page 1 OPSWAT.com
Unidirectional Security Gateway
Product Description NetWall USG provides access to real-time OT data and enables secure data transfers
Technical Support
to the OT environment without compromising the security and integrity of your critical
production systems, providing assured delivery scalability, and ease of deployment. Tampa, FL, USA
San Francisco, CA, USA
Unique value ▪ Assured delivery mechanism for reliable operation and bandwidth conservation London, UK
proposition ▪ Scalable bandwidth supporting up to 10Gbit/sec using a license upgrade Europe: France, Hungary,
▪ Supports real-time replication of industrial data, Industrial/IT protocols, file transfers Romania, Spain
▪ Cost-effective, easy to deploy pre-configured platform Israel
▪ Available as Hardware as a service: Platinum Support, HW updates every 3yrs APAC: Japan, Singapore,
Taiwan, Vietnam
SKU #NWAPP-50M-UNI, #NWAPP-100M-UNI, #NWAPP-1G-UNI, #NWAPP-10G-UNI
Guest Mode Yes, compatible with MetaDefender Kiosk Vault guest mode
Data masking NetWall utilizes a full protocol break between the networks and removes identifying IP
header information from the payload, maintaining the integrity of the OT network.
Input/output support Separate Ethernet connections for network traffic and remote administration
▪ Physical connectors: 8P8C (RJ45)
Content filtering Full integration with MetaDefender Core – Multi-AV, CDR, DLP, File Vulnerabilities, IP
Reputation, URL Reputation, Sandbox, Malware Analysis
Page 2 OPSWAT.com
Unidirectional Security Gateway
Product Description NetWall USG provides access to real-time OT data and enables secure data transfers
Technical Support
to the OT environment without compromising the security and integrity of your critical
production systems, providing assured delivery scalability, and ease of deployment. Tampa, FL, USA
San Francisco, CA, USA
Unique value ▪ Assured delivery mechanism for reliable operation and bandwidth conservation London, UK
proposition ▪ Proprietary mechanism to permit data replies for select applications Europe: France, Hungary,
▪ Scalable bandwidth supporting up to 1Gbit/sec using a license upgrade Romania, Spain
▪ Supports real-time replication of industrial data, Industrial/IT protocols, file transfers Israel
▪ Cost-effective, easy to deploy pre-configured platform APAC: Japan, Singapore,
▪ Available as Hardware as a service: Platinum Support, HW updates every 3yrs Taiwan, Vietnam
Guest Mode Yes, compatible with MetaDefender Kiosk Vault guest mode
Data masking NetWall utilizes a full protocol break between the networks and removes identifying IP
header information from the payload, maintaining the integrity of the OT network.
Input/output support Separate Ethernet connections for network traffic and remote administration
▪ Physical connectors: 8P8C (RJ45)
▪ Supports speeds of: 50Mbit/s, 100Mbit/s, 1Gbit/s, 10Gbit/s
Content filtering Full integration with MetaDefender Core – Multi-AV, CDR, DLP, File Vulnerabilities, IP
Reputation, URL Reputation, Sandbox, Malware Analysis
Page 3 OPSWAT.com
Unidirectional Security Gateway
Encryption standards ▪ Encryption standard fail over and services/protocols main according to protocol
▪ SFTP Certificate handling
▪ Signed software
Guest Mode -
Weight 9 kg
Voltage 2x 100-240 V AC, 50-60Hz (Separate power inlets for Upstream and Downstream
interfaces)
Input/output support Network data ports (Upstream + Downstream): 2x Gigabit Ethernet 8P8C (RJ45)
Administration (Upstream, Downstream): 2x Gigabit Ethernet 8P8C (RJ45), VGA, USB 2.0
Page 4 OPSWAT.com
Unidirectional Security Gateway
Guest Mode -
MD Kiosk Integration No
MD Vault Integration No
Weight 2.2 kg
Input/output support Network data (Upstream + Downstream) 2x Gigabit Ethernet 8P8C (RJ45)
Page 5 OPSWAT.com
Unidirectional Security Gateway
Product Description DD1G series offer high performance and secure data transfer for IT/OT integration.
Technical Support
Unique value Offers full 1 Gbps data throughput and includes stand alone devices and DIN rail Malmö, Sweden
proposition mounting.
Sales Contact
SKU BSP-DD18605
[email protected]
Certifications Under evaluation +46702030677
Transfer Protocols ▪ Layer 2 diode e.g. unidirectional protocols, e.g. UDP Main Markets Served
▪ External proxy servers may be required
EU & EMEA
Encryption standards N/A only HW diod
Guest Mode -
Data masking No
MD Kiosk Integration No
MD Vault Integration No
Weight 0.6 kg
Input/output support Network data (Upstream + Downstream) 2x Gigabit Ethernet 8P8C (RJ45)
Page 6 OPSWAT.com
Unidirectional Security Gateway
Certifications Common Criteria EAL5+, NATO IAPC, DK Center for Cyber Security NATO SECRET / National Main Markets Served
SECRET, ISO-15408 EMEA, NATO, via partners or on
request
Transfer Protocols SMTP, FTP, SFTP, SMB, NFS forwarding and mirroring, NTP, TCP, UDP, REST API Forwarder
HTTP and HTTPS, NiFi, SysLog, Windows Share.
MD Vault Integration Yes and even Vault to Vault (documentation not published)
Weight 9.6 Kg
Voltage 110/220 V AC
Content filtering OPSWAT Partner, MetaDefender, Deep CDR, Egate,SANDBOX etc. (Windows and LINUX) +
any 3rd party filter (REST API integration)
Page 7 OPSWAT.com
Unidirectional Security Gateway
Certifications Numerous Environmental Specification tests according to MIL-STD Main Markets Served
EMEA, NATO, via partners or on
Transfer Protocols All filebased exchange.
request
Encryption standards N/A
MD Vault Integration Yes and even Vault to Vault (documentation not published)
Voltage 12 to 32V DC
Content filtering NA OPSWAT Partner, MetaDefender, Deep CDR, Egate,SANDBOX etc. (Windows and LINUX)
+ any 3rd party filter (REST API integration)
Page 8 OPSWAT.com
Unidirectional Security Gateway
Certifications Numerous Environmental Specification tests according to MIL-STD Main Markets Served
EMEA, NATO, via partners or on
Transfer Protocols SMTP, FTP, SFTP, SMB, NFS forwarding and mirroring, NTP, TCP, UDP, REST API Forwarder
request
HTTP and HTTPS, NiFi, SysLog, Windows Share.
MD Vault Integration Yes and even Vault to Vault (documentation not published)
Voltage 12 to 32V DC
Content filtering OPSWAT Partner, MetaDefender, Deep CDR, Egate,SANDBOX etc. (Windows and LINUX) +
any 3rd party filter (REST API integration)
Page 9 OPSWAT.com
Unidirectional Security Gateway
MD Vault Integration Yes and even Vault to Vault (documentation not published)
Weight 19.2 Kg
Voltage 110/220 V AC
Content filtering OPSWAT Partner, MetaDefender, Deep CDR, Egate,SANDBOX etc. (Windows and LINUX) +
any 3rd party filter (REST API integration)
Page 10 OPSWAT.com
Unidirectional Security Gateway
Unique value ▪ Policy and rule based file check and tranmission control. Sales Contact
proposition ▪ Data classification and tagging by type, content or meta-data.
[email protected]
▪ XML, JSON and YAML validation with spesific schemes.
+90 (800) 888 60 91
▪ One-way Web API mirroring.
▪ Data encryption, compression and data masking.
▪ LDAP integration on both sides. Main Markets Served
▪ Web based UI for management and file transmission services. EMEA, NATO-Zone, Central Asia,
▪ Inbound and outbound SMTP integration. Europe
▪ Quarantine and Archive feature.
▪ VRRP and LACP support.
▪ TX and RX Modules can be configured with different security policies.
SKU DFX-1G-P
Transfer Protocols SFTP/SCP, HTTP/HTTPS, UDP, SYSLOG, SMTP, WSUS Updates, File/Directory Mirroring
Guest Mode * This feature is under development but not released yet.
MD Kiosk Integration * This feature is not tested yet but seems MetaDefender Kiosk supports sending
Processed files via SFTP service of DataFlowX (both with user-prompted logon and
predefined credentials)
MD Vault Integration No
Weight 22.0 kg
Export restrictions No
Page 11 OPSWAT.com
Unidirectional Security Gateway
Unique value ▪ Policy and rule based file check and tranmission control. Sales Contact
proposition ▪ Data classification and tagging by type, content or meta-data.
[email protected]
▪ XML, JSON and YAML validation with spesific schemes.
+90 (800) 888 60 91
▪ One-way Web API mirroring.
▪ Data encryption, compression and data masking.
▪ LDAP integration on both sides. Main Markets Served
▪ Web based UI for management and file transmission services. EMEA, NATO-Zone, Central Asia,
▪ Inbound and outbound SMTP integration. Europe
▪ Quarantine and Archive feature.
▪ VRRP and LACP support.
▪ TX and RX Modules can be configured with different security policies.
SKU DFX-10G-P
Transfer Protocols SFTP/SCP, HTTP/HTTPS, UDP, SYSLOG, SMTP, WSUS Updates, File/Directory Mirroring
Guest Mode * This feature is under development but not released yet.
MD Kiosk Integration * This feature is not tested yet but seems MetaDefender Kiosk supports sending
Processed files via SFTP service of DataFlowX (both with user-prompted logon and
predefined credentials)
MD Vault Integration No
Weight 22.0 kg
Export restrictions No
Page 12 OPSWAT.com
Unidirectional Security Gateway
Unique value ▪ HTTP/HTTPS protocol breaking and delivering via data diodes without any backward Sales Contact
proposition connection ability.
[email protected]
▪ Uses DFX diode cards to deliver and fetch data.
+90 (800) 888 60 91
▪ Supports SSL interception
▪ Supports traffic logging
▪ Supports ACLs based on clients, request methods, targets. Main Markets Served
▪ Traffic matching and content replacement. EMEA, NATO-Zone, Central Asia,
▪ Supports several instances with different configurations and security policies. Europe
▪ VRRP and LACP support
SKU DBX-1G-P
Certifications -
Encryption standards -
Weight 22.0 kg
Export restrictions No
Page 13 OPSWAT.com
Unidirectional Security Gateway
Unique value ▪ HTTP/HTTPS protocol breaking and delivering via data diodes without any backward Sales Contact
proposition connection ability.
[email protected]
▪ Uses DFX diode cards to deliver and fetch data.
+90 (800) 888 60 91
▪ Supports SSL interception
▪ Supports traffic logging
▪ Supports ACLs based on clients, request methods, targets. Main Markets Served
▪ Traffic matching and content replacement. EMEA, NATO-Zone, Central Asia,
▪ Supports several instances with different configurations and security policies. Europe
▪ VRRP and LACP support
SKU DBX-10G-P
Certifications -
Encryption standards -
Weight 22.0 kg
Export restrictions No
Page 14 OPSWAT.com
Unidirectional Security Gateway
Product DataDiode
Fox-IT
Diode Technology Our data diode is a pure hardware unit with fiber optical connections to the proxy servers
Product Description Cross-boundary network protection for Government, Defence, and Critical Infrastructure
Technical Support
Unique value Protect confidential information, IP and assets. Only worldwide Data Diode with active Delft, The Netherlands
proposition EAL7+ certification
Sales Contact
SKU Call for details
T +31 (0)15 284 79 99
Certifications EAL 7+, NATO, TOP SECRET, NITES [email protected]
Transfer Protocols SMB/CIFS, (S)FTP(E(S)), SCP, SMTP, NTP, TCP, UDP, Syslog, HTTP, local files, etc. Main Markets Served
Encryption standards All commonly used encryption schemes are supported. Global
Guest Mode -
MD Kiosk Integration No
Physical Dimension 19" rack mountable unit. Measures in mm: 482x142x44 (both 1 and 10 Gbps models)
Input/output support Inbound connector: Duplex LC. Outbound connector Simplex LC (both 1 and 10 Gbps
models)
Page 15 OPSWAT.com
Unidirectional Security Gateway
Product Description Ultra-secure HSM based embeddable data diode. Made for industrial environment with
Technical Support
customizable physical interfaces and protocols.
WW from Tel Aviv, Israel
Unique value Protected within HSM secure enclaves. Identities, Roles and Policies based access
proposition control - customizable to control access and data flow; Ultra-low power embeddable to Sales Contact
custom form factor. Full secure remote configuration and firmware update. Rechargable [email protected]
battery enables operation without external power. +1-201-285-4957
SKU HU20VAOP-DD1
Main Markets Served
Certifications - Global
Transfer Protocols TCP, UDP, Streaming data
Encryption standards ▪ Hash: SHA-224, SHA-256, SHA-384, SHA-512, SHA3 (Keccak), SHA3-224, SHA3-256,
SHA3-384, SHA3-512, BLAKE2b, RIPEMD-160, Poly1305
▪ Symmetric: AES, DES, 3DES, ChaCha20, Camellia
▪ Asymmetric: RSA, DSS, DH, EDH, ECDH-ECDSA, ECDHE-ECDSA, ECDH-RSA, ECDHE-RSA
▪ Curves: Curve25519, Ed25519, secp256k1, NIST, BRAINPOOL, KOBLITZ
▪ Key Derivation: HMAC, PBKDF2
▪ Random: Physical QRNG
▪ Supports secure firmware upgrades for any algorithm.
MD Kiosk Integration No
MD Vault Integration No
Weight 0.5 kg
Input/output support USB2.0 Host/Device x1, 100Mbs RJ45 x1, IrDA 100kbs x1 - option, GPIOs configurable
communication interface via DB connector (UART, SPI, Parallel, ...)
Content filtering -
Page 16 OPSWAT.com
Unidirectional Security Gateway
Product Description Customizable ultra-secure HSM based data diode server. Optional secure side channel
Technical Support
for controlled and limited reverse access (as addt'l HW vault in HSM, or standalone
pluggable HW module, or separate standalone solution) WW from Tel Aviv, Israel
Unique value Protected within HSM secure enclaves; Identities, Roles and Policies based access Sales Contact
proposition controlfully - customizable to control access and data flow; Full secure remote [email protected]
configuration and firmware update. Optional ultra secure reverse HW channel +1-201-285-4957
SKU HU20VAOP-DD2
Main Markets Served
Certifications - Global
Transfer Protocols TCP, UDP, REST API
Encryption standards ▪ Hash: SHA-224, SHA-256, SHA-384, SHA-512, SHA3 (Keccak), SHA3-224, SHA3-256,
SHA3-384, SHA3-512, BLAKE2b, RIPEMD-160, Poly1305
▪ Symmetric: AES, DES, 3DES, ChaCha20, Camellia
▪ Asymmetric: RSA, DSS, DH, EDH, ECDH-ECDSA, ECDHE-ECDSA, ECDH-RSA, ECDHE-RSA
▪ Curves: Curve25519, Ed25519, secp256k1, NIST, BRAINPOOL, KOBLITZ
▪ Key Derivation: HMAC, PBKDF2
▪ Random: Physical QRNG
▪ Supports secure firmware upgrades for any algorithm.
MD Kiosk Integration No
MD Vault Integration No
Weight 6 kg
Input/output support 1GbE RJ45 x2, USB2.0 type A Host x2, Custom interfaces upon Request
Page 17 OPSWAT.com
Unidirectional Security Gateway
Product Description High performance, customizable ultra-secure HSM based data diode server. Optional
Technical Support
secure side channel for controlled and limited reverse access (as addt'l HW vault in HSM,
or standalone pluggable HW module, or separate standalone solution) WW from Tel Aviv, Israel
Unique value Protected within HSM secure enclaves. Identities, Roles and Policies based access Sales Contact
proposition control - fully customizable to control access and data; Full secure remote configuration [email protected]
and firmware update. Accelerated crypto algorithms performance. Optional ultra secure +1-201-285-4957
reverse HW channel
Encryption standards ▪ Hash: SHA-224, SHA-256, SHA-384, SHA-512, SHA3 (Keccak), SHA3-224, SHA3-256,
SHA3-384, SHA3-512, BLAKE2b, RIPEMD-160, Poly1305
▪ Symmetric: AES, DES, 3DES, ChaCha20, Camellia Asymmetric: RSA, DSS, DH, EDH,
ECDH-ECDSA, ECDHE-ECDSA, ECDH-RSA, ECDHE-RSA
▪ Curves: Curve25519, Ed25519, secp256k1, NIST, BRAINPOOL, KOBLITZ
▪ Key Derivation: HMAC, PBKDF2
▪ Random: Physical QRNG
▪ Supports secure firmware upgrades for any algorithm.
MD Kiosk Integration No
MD Vault Integration No
Weight 6 kg
Input/output support 10GbE SFP x4, 1GbE RJ45 x2, USB2.0 type A Host x4 Custom interfaces upon Request
Page 18 OPSWAT.com
Unidirectional Security Gateway
Product Description The SDoT SDD is a next generation data diode which ensures logical separation of
Technical Support
networks without a return channel due to its unique and evaluated security architecture.
Side channel attacks are prevented through the minimized kernel. The SDoT diode Cologne, Germany
allows fast and high-performance unidirectional data transfer via numerous protocols in
a compact form factor between two security domains. It also offers additional functions Sales Contact
such as HTTP response status codes. [email protected]
+49.221.70912.0
Unique value Fastest military grade software based data diode in the world with German, EU and NATO
proposition SECRET accreditation available in semi-ruggedized 19" 1U or compact housing optimized
Main Markets Served
for use in vehicles / harsh environments.
Global
SKU 1510000
Guest Mode No
Data masking TEMPEST Zone 1-3 SDIP 27 Level B Zone 2-3 SDIP 27 Level C
MD Kiosk Integration No
MD Vault Integration No
Page 19 OPSWAT.com
Unidirectional Security Gateway
Product Description Bi-directional security gateway that supports filtering of structured (XML, binary code,
Technical Support
JREAP, Profibus, S7 Protocol, Modbus, etc.) and unstructured data objets (e.g. JPEG,
DOCX, XLS) between security domains that guarantees a logical separation at all times. Cologne, Germany
It can also be configured as unidirectional data diode.
Sales Contact
Unique value Highly flexible bi-directional Security Gateway with German, EU and NATO SECRET [email protected]
proposition accreditation and EAL4+ certification. Available in semi-ruggedized 19" 1U or compact +49.221.70912.0
hoursing optmized for use in vehicles / harsh environments.
Guest Mode No
Data masking TEMPEST Zone 1-3 SDIP 27 Level B Zone 2-3 SDIP 27 Level C
MD Kiosk Integration No
MD Vault Integration No
Page 20 OPSWAT.com
Unidirectional Security Gateway
Product Description As an element of data centric security (DCS) or data centric audit and protection (DCAP)
Technical Support
conepts, the SDoT Labelling Service takes over the role of classifying sensitive data and
verifying labels. The XML security labels are cryptographically bound to any structured Cologne, Germany
or unstructured data object. Combined with an SDoT Security Gateway it is possible
to model complex cross domain solutions with a broad range of data objects and bi- Sales Contact
directional exchange of data between systems, departments, organizations or nations. [email protected]
The SDoT Labelling Services allows manual or automatic data classification with XML +49.221.70912.0
security labels. The SDoT Labelling Service is available as a virtual machine or hardware
appliance. An open API enables any whitelisted user to classify data with tamper proof Main Markets Served
labels from any application. Global
Unique value Application independent data classification with tamper proof, NATO STANAG 4774/8
proposition compliant XML security labels to complement the SDoT Security Gateway for
unstructured data filtering between security domains.
SKU 1215100
Guest Mode No
Data masking TEMPEST Zone 1-3 SDIP 27 Level B Zone 2-3 SDIP 27 Level C
Page 21 OPSWAT.com
Unidirectional Security Gateway
Product Description Provide unhackable / impassable physical barrier through physical one-way data
transmission network adaptor installed in H/W-enforced system. Patented technology / Technical Support
algorithm for automatic error detection and data re-transmission solves all problems Seoul, South Korea
occuring in normal data diode systems.
Sales Contact
Unique value ▪ Automatic error detection on transmitted data, network connectivity, RX and its
proposition associated system. T +82-2-576-4736
▪ Automatic data re-transmission through data buffering when errors occur. M +82-10-9424-2041
[email protected]
SKU 1
Certifications Common Criteria (EAL2), Good Software (Level1), KC, TTA, Government preferential Main Markets Served
purchase product (Good invention), Domestic/global patent, ISO, Innobiz Global
Data masking Saving the administrator indentification code and perform the data encyption for
sensitive data protection
Weight 7 kg
Content filtering ▪ Malicious code detection and raw packet filtering for network stream (IP, Port, FTP,
SFTP, HTTPS(s), Modbus etc)
▪ Malicious code detection in the file.
▪ Suspicious code analysis through static analysis
Page 22 OPSWAT.com
Unidirectional Security Gateway
Product Description Provide unhackable / impassable physical barrier through physical one-way data
transmission network adaptor installed in H/W-enforced system. Patented technology / Technical Support
algorithm for automatic error detection and data re-transmission solves all problems Seoul, South Korea
occuring in normal data diode systems.
Sales Contact
Unique value ▪ Automatic error detection on transmitted data, network connectivity, RX and its
proposition associated system. T +82-2-576-4736
▪ Automatic data re-transmission through data buffering when errors occur. M +82-10-9424-2041
[email protected]
SKU 2
Certifications Common Criteria (EAL2), Good Software (Level1), KC, TTA, Government preferential Main Markets Served
purchase product (Good invention), Domestic/global patent, ISO, Innobiz Global
Data masking Saving the administrator indentification code and perform the data encyption for
sensitive data protection
Physical Dimension Tx system: 438 × 44 × 480 (W×H×D, mm), Rx system: 438 × 44 × 480 (W×H×D, mm)
Content filtering ▪ Malicious code detection and raw packet filtering for network stream (IP, Port, FTP,
SFTP, HTTPS(s), Modbus etc)
▪ Malicious code dection in the file.
▪ Suspicious code analysis through static analysis
Page 23 OPSWAT.com
Unidirectional Security Gateway
Product Description Provide unhackable / impassable physical barrier through physical one-way data
transmission network adaptor installed in H/W-enforced system. Patented technology / Technical Support
algorithm for automatic error detection and data re-transmission solves all problems Seoul, South Korea
occuring in normal data diode systems.
Sales Contact
Unique value ▪ Automatic error detection on transmitted data, network connectivity, RX and its
proposition associated system. T +82-2-576-4736
▪ Automatic data re-transmission through data buffering when errors occur. M +82-10-9424-2041
[email protected]
SKU 2
Certifications Common Criteria (EAL2), Good Software (Level1), KC, TTA, Government preferential Main Markets Served
purchase product (Good invention), Domestic/global patent, ISO, Innobiz Global
Data masking Saving the administrator indentification code and perform the data encyption for
sensitive data protection
Physical Dimension Tx system: 438 × 44 × 450 (W×H×D, mm), Rx system: 438 × 44 × 450 (W×H×D, mm)
Content filtering ▪ Malicious code detection and raw packet filtering for network stream (IP, Port, FTP,
SFTP, HTTPS(s), Modbus etc)
▪ Malicious code detection in the file.
▪ Suspicious code analysis through static analysis
Page 24 OPSWAT.com
Unidirectional Security Gateway
Product nNetTrust
NNSP Co., Ltd.
Diode Technology Physical uni-directional network adaptor with optical port
Product Description Deliver collected information (data, file, software update, patch, etc.) from external
network into internal security network after executing suspicious code analysis and Technical Support
malicious code inspection at clean system Seoul, South Korea
Unique value ▪ Consists of 3 different proxy servers in one cabinet (Tx, Rx, Clean System).
▪ Deliver information safely by an automatic switched turned on by configured
Sales Contact
proposition
schedule. T +82-2-576-4736
▪ Protect not only the internal security network from external attack but also M +82-10-9424-2041
completely block leakage of internal data due to one-way data transmission function. [email protected]
▪ Key software functions of nNet Diode included such as automatic error detection and
smart data re-transmission. Main Markets Served
SKU 1 Global
Data masking Saving the administrator indentification code and perform the data encyption for
sensitive data protection
Weight 10 kg
Content filtering ▪ Malicious code detection and raw packet filtering for network stream (IP, Port, FTP,
SFTP, HTTPS(s), Modbus etc)
▪ Malicious code detection in the file.
▪ Suspicious code analysis through static analysis
Page 25 OPSWAT.com
Unidirectional Security Gateway
Product Description DiOTa is a compact (DIN rail), scalable, single-purpose data diode that provides secure,
Technical Support
one-way data transfers of low volumes of data, with an intuitive user interface.
Danbury, CT, USA
Unique value 1. Single hardware appliance (not multiple, separate components for the complete Columbia, MD, USA
proposition solution) London, UK
2. Compact and scalable Abu Dhabi, UAE
3. Affordable cost
Sales Contact
SKU Single Purpose
[email protected]
Certifications ▪ FCC Class B compliance (203) 894-9342
▪ CE mark
▪ CB certificate Main Markets Served
▪ IEC/EN 62368-1
Global
▪ CAN/CSA-C22.2 62368-1:2014
▪ VCCI
▪ TUV
▪ Based on EAL certified technology
Data masking Owl utilizes a protocol break between the networks and removes identifying IP header
information from the payload, maintaining the integrity of the OT network.
Weight 1 lb / 0.45 kg
Input/output support Separate ethernet connections for network data and administrative functions
▪ Physical connectors: 8P8C (RJ45)
▪ Supports 10BASE-T, 100BASE-TX
Export restrictions Must comply with U.S. Export Administration Regulations (EAR), 15 C.F.R. Parts 730-772
Page 26 OPSWAT.com
Unidirectional Security Gateway
Product OPDS-100D
Owl Cyber Defense
Diode Technology Owl DualDiode Communication Card (Digital Isolator)
Product Description Designed specifically for industrial control deployments in harsh environments, the
Technical Support
compact (DIN rail) OPDS-100D provides secure, simultaneous, one-way data transfers of
low to medium volumes of data. Danbury, CT, USA
Columbia, MD, USA
Unique value 1. Scalable and compact London, UK
proposition 2. Designed specifically for harsh industrial environments and supports extreme Abu Dhabi, UAE
temperatures and shock vibration
Sales Contact
SKU Multi-Purpose
[email protected]
Certifications ▪ FCC Class A compliance w (203) 894-9342
▪ CE Mark
▪ CB Certificate: Report 31780392.001 Main Markets Served
▪ EN 60950-1:2006 +A11:2009 A1:2009
Global
▪ A1:2010 + A12:2011 + A2:2013
▪ UL 60950-1:2007 R10.14
▪ CAN/CSA-C22.2 NO.60950-1-
▪ 07+A1:2011+A2:2014
▪ International Common Criteria Certification - EAL Certified
▪ VCCI
Data masking Owl utilizes a protocol break between the networks and removes identifying IP header
information from the payload, maintaining the integrity of the OT network.
Input/output support Separate ethernet connections for network data and administrative functions
▪ Physical connectors: 8P8C (RJ45)
▪ Supports 10BASE-T, 100BASE-TX
Export restrictions Must comply with U.S. Export Administration Regulations (EAR), 15 C.F.R. Parts 730-772
Page 27 OPSWAT.com
Unidirectional Security Gateway
Product OPDS-100
Owl Cyber Defense
Diode Technology Owl DualDiode Communication Card (Digital Isolator)
Product Description The OPDS-100 is a standard, all in one, 1U rack-mountable data diode that provides a
Technical Support
deterministic, one-way link with an absolute protocol break, ensuring the highest level
of security available to address applications requiring low to moderate data throughput. Danbury, CT, USA
Columbia, MD, USA
Unique value 1. All-in-one, standard, 1U appliance (smaller than most competitors and all London, UK
proposition components are in a single unit) Abu Dhabi, UAE
2. Supports protocols like MQTT, OPC UA, and other commonly used protocols)
3. Flexible bandwidth upgrading if requirements increase and large range of Sales Contact
throughput options [email protected]
(203) 894-9342
SKU Multi-Purpose
Data masking Owl utilizes a protocol break between the networks and removes identifying IP header
information from the payload, maintaining the integrity of the OT network.
Export restrictions Must comply with U.S. Export Administration Regulations (EAR), 15 C.F.R. Parts 730-772
Page 28 OPSWAT.com
Unidirectional Security Gateway
Product OPDS-1O00
Owl Cyber Defense
Diode Technology Owl DualDiode Communication Card (Optical)
Product Description The OPDS-1000 supports secure, one-way data transfers of multiple data types and
Technical Support
formats concurrently. Optimized for more demanding industrial control applications, it
supports link rates of 104 Mbps, 155 Mbps, 310 Mbps, 630 Mbps, or 1 Gbps. Danbury, CT, USA
Columbia, MD, USA
Unique value 1. All-in-one, standard, 1U appliance (smaller than most competitors and all London, UK
proposition components are in a single unit) Abu Dhabi, UAE
2. Supports protocols like MQTT, OPC UA, and other commonly used protocols)
3. Flexible bandwidth upgrading if requirements increase and large range of Sales Contact
throughput options [email protected]
(203) 894-9342
SKU Multi-Purpose
Transfer Protocols UDP, TCP/IP, SNMP, SMTP, NTP, SFTP and FTP
Data masking Owl utilizes a protocol break between the networks and removes identifying IP header
information from the payload, maintaining the integrity of the OT network.
Input/output support Separate Ethernet connections for network traffic and remote administration
▪ Physical connectors: 8P8C (RJ45)
▪ Supports speeds of: 104 Mbps, 155 Mbps, 310 Mbps, 630 Mbps, & 1 Gbps
Export restrictions Must comply with U.S. Export Administration Regulations (EAR), 15 C.F.R. Parts 730-772
Page 29 OPSWAT.com
Unidirectional Security Gateway
Product EPDS
Owl Cyber Defense
Diode Technology Owl DualDiode Communication Card (Optical)
Product Description Consisting of a pair (2) Dell PowerEdge servers, EPDS maintains process control network
Technical Support
isolation, while enabling critical information sharing with networks outside the electronic
security perimeter. Supports link speeds of 155 Mbps, 1.25/2.5 Gbps, and 10 Gbps. Danbury, CT, USA
Columbia, MD, USA
Unique value 1. Supports high link speeds London, UK
proposition 2. Utilizes 2 dell servers and maintains process control network isolaton Abu Dhabi, UAE
Enterprise server certification is provided by the server manufacturer Main Markets Served
Transfer Protocols UDP, TCP/IP, SNMP, SMTP, NTP, SFTP and FTP Global
Data masking Owl utilizes a protocol break between the networks and removes identifying IP header
information from the payload, maintaining the integrity of the OT network.
Export restrictions Must comply with U.S. Export Administration Regulations (EAR), 15 C.F.R. Parts 730-772
Page 30 OPSWAT.com
Unidirectional Security Gateway
Product Description With the hardware-based Kindi Data Diode, critical networks are isolated and the
Technical Support
transmission of cyber threats from open ports is physically prevented.
Ankara & Turkey
Unique value Thanks to its chip-based structure, it is not affected by zero-day threats, can't be re-
proposition configured with any SW attack. Bandwidth is 10Gbps and can use %99.8 of it. Sales Contact
[email protected]
SKU DataDiode10G
+90 (312) 397 54 54
Certifications Common Criteria EAL4 + certification is in the approval process.
Main Markets Served
Transfer Protocols UDP, TCP/IP, SNMP, SMTP, NTP, SFTP and FTP
Global, EMEA, UE, Turkic Council
Encryption standards AES 256bt GCM mode (Line Encryption Support)
Guest Mode -
MD Kiosk Integration No
MD Vault Integration No
Voltage 12 V
Export restrictions -
Page 31 OPSWAT.com
Unidirectional Security Gateway
Product Description Worlds first industrial grade data diode with a safety assessment and security level 3
Technical Support
(SL3) certification (IEC 62443).
Designed and made by SIEMENS in Germany. USA: 1-800-793-SAFE
Global: +49 531 226 4613
Unique value Security level 3 (SL3) - IEC 62443 sc-railinfrastructure.mobility@
proposition Safety assessment for mission and safety critical applications siemens.com
High reliability [email protected]
Long lifecycle support
Sales Contact
SKU A2V00002748719
Andres G. Guilarte
Certifications Security level 3 (SL3) - IEC 62443 [email protected]
Safety assessment
CB scheme Main Markets Served
CE North America, LATAM, EMEA, APAC
Transfer Protocols OPC UA, Modbus, OPC Foundation (DA, A&E), FTP, PCAPng, DNP3, TCP, UDP, SMTP, NTP,
Syslog, REST API
Encryption standards -
Guest Mode No
Page 32 OPSWAT.com
Unidirectional Security Gateway
Product Description Binary Armor is an endpoint cybersecurity solution that provides bi-directional security
Technical Support
and content filtering across all communications layers.
Ryan Baumann
Unique value Binary Armor automatically responds to the state of your system, adjusting its deep [email protected]
proposition content inspection and filtering based on changes in operational and risk posture 1-720-572-2597)
MD Kiosk Integration No
MD Vault Integration No
Weight 1.32 lb
Input/output support Ethernet (RJ45) x2, RS-232 (DB9) x1, TTL GPIO x2
Content filtering Deep content inspection validates every bite of every message, filtering all data in
transit
Page 33 OPSWAT.com
Unidirectional Security Gateway
Product Vsecure
Terafence
Diode Technology Proprietary hardware based “diode” like functionality
Product Description Providing Air-Gap level security for CCTV assets isolating them from any form of Cyber or
Technical Support
Networ/Cloud based attacks
[email protected]
Unique value Air-Gap level of protection while maintaining CCTV end-device functionality by allowing
proposition heavily filtered commands to reach the end-device without compromising the Air-Gap Sales Contact
isolation. [email protected]
SKU Vsecure-20, Vsecure-50
Main Markets Served
Certifications - Global, North America, EMEA, APAC,
EU
Transfer Protocols RTSP/TCP
Guest Mode No
MD Kiosk Integration No
MD Vault Integration No
Weight 3Kg
Voltage 12VDC
Page 34 OPSWAT.com
Unidirectional Security Gateway
Product MBsecure+
Terafence
Diode Technology Proprietary hardware based “diode” like functionality
Product Description Providing Air-Gap level security for ICS/SCADA assets isolating them from any form of Technical Support
Cyber or Network/Cloud based attacks
[email protected]
Unique value Air-Gap level of protection while maintaining ICS process functionality by allowing
proposition heavily filtered commands to reach the end-device without compromising the Air-Gap Sales Contact
isolation. [email protected]
SKU MBsecure+
Main Markets Served
Certifications - Global, North America, EMEA, APAC,
EU
Transfer Protocols Modbus/RTU, SYSLOG, SMTP, MQTT
Guest Mode No
MD Kiosk Integration No
MD Vault Integration No
Weight 450gr
Voltage 12VDC
Page 35 OPSWAT.com
Unidirectional Security Gateway
Product A4Gate
Terafence
Diode Technology Proprietary hardware based “diode” like functionality
Product Description Providing Air-Gap level security for Industry 4.0 assets isolating them from any form of
Technical Support
Cyber or Network/Cloud based attacks
[email protected]
Unique value Cyber Security for Industry 4.0 applications allowing data upload to cloud applications
proposition without exposing the network to any from of Cyber or network/Cloud based attacks Sales Contact
[email protected]
SKU A4Gate
Guest Mode No
MD Kiosk Integration No
MD Vault Integration No
Weight 2.1Kg
Voltage 12-48VDC
Page 36 OPSWAT.com
Unidirectional Security Gateway
Guest Mode -
Data masking No
MD Kiosk Integration No
MD Vault Integration No
Weight 1.5 kg
Content filtering File Typ & size filtering, XML filtering, Web service filtering + External CF Integrations
Page 37 OPSWAT.com
Unidirectional Security Gateway
Guest Mode -
Data masking -
MD Kiosk Integration No
MD Vault Integration No
Physical Dimension -
Weight -
Voltage -
Operating temp -
Input/output support -
Content filtering -
Export restrictions -
Page 38 OPSWAT.com
Unidirectional Security Gateway
Guest Mode -
Data masking -
MD Kiosk Integration No
MD Vault Integration No
Physical Dimension -
Weight -
Voltage -
Operating temp -
Input/output support -
Content filtering -
Export restrictions -
Page 39 OPSWAT.com
Unidirectional Security Gateway
Guest Mode -
Data masking -
MD Kiosk Integration No
MD Vault Integration No
Physical Dimension -
Weight -
Voltage -
Operating temp -
Input/output support -
Content filtering -
Export restrictions -
Page 40 OPSWAT.com
About OPSWAT
OPSWAT is a global leader in critical infrastructure cybersecurity that helps protect the world’s
mission-critical organizations from malware and zero-day attacks. To minimize the risk of
compromise, OPSWAT Critical Infrastructure Protection solutions enable both public and private
organizations to implement processes that ensure the secure transfer of files and devices to and
from critical networks.
More than 1,000 organizations worldwide spanning Financial Services, Defense, Manufacturing,
Energy, Aerospace, and Transportation Systems trust OPSWAT to secure their files and devices;
ensure compliance with industry and government-driven policies and regulations, and protect their
reputation, finances, employees and relationships from cyber-driven disruption.
Cross-Domain
Secure Access
Solutions
Network Access
File Upload Security
Control
©2021 OPSWAT, Inc. All rights reserved. OPSWAT, MetaDefender, the OPSWAT Logo, the O Logo, Trust no file, Trust no device, and Trust no file. Trust no device. are OPSWAT.com/contact
trademarks of OPSWAT, Inc. Revised 2022-Jan-10