MetaDefender Kiosk
K3001 Premium

Trust at the point of entry

OPSWAT MetaDefender Kiosk K3001 Premium is a turn-key solution for securing data transfer across sensitive network domains in critical infrastructure. It is specially tailored and ruggedized to withstand physical challenges in harsh operating environments while protecting your organizations digital data workflows.

Insert. Process. Access.

  • Prevent unverified media from accessing your environment. 
  • Create and audit secure processes for data transfer via removable media.
  • Detect and prevent advanced threat and targeted attacks.
  • Support multiple media formats like USB, CD/DVD, mobile phones.
  • Maintain compliance with regulations like NERC CIP.
  • Localize user interface with customizable workflows. 
  • Integrate with multiple authentication methods.
  • Support 20+ types of encrypted media.

Features and benefits

The K3001 Premium software system includes multiple OPSWAT industry leading technologies proven to be effective against known and unknown threats - all offered with an easy-to-use interface to protect your organization.

Advanced threat detection

Removeable media are the most common vehicle for penetrating isolated network environments. With our multiscanning technology powered by 20 anti-malware engines, threat detection levels can exceed 99%.

K3001 Premium leverages multiscanning to improve detection rates, reduce outbreak exposure times, and avoid exposures caused by the potential limitations of a single vendor from any attack that can originate via weaponized removable media.

Clean & Reconstruct Suspicious Files

Deep Content Disarm & Reconstruction (Deep CDR) capabilities actively remove suspect and superfluous data from common file types—including .doc and .pdf—outputting clean, usable files.

K3001 Premium applies OPSWAT’s Deep CDR technology (ranked # 1 in the industry) to secure the data workflow in/out of your organization for preventing zero-day targeted attacks and unknown threats that are equipped with malware evasion technology such as Fully Undetectable malware, VMware detection, obfuscation and many others.

Secured Data Transfer

K3001 Premium can be integrated seamlessly with MetaDefender Vault for storing, tracking, and auditing files into a secure network. The Kiosk to Vault workflow creates a seamless process that simplifies the user experience in transmitting files across sensitive networks while maintaining high standards of security. 

After files enter MetaDefender Vault, they are scanned for potential malware infections and vulnerabilities. Files can be locked and evaluated continuously for outbreaks before they are made available to download, as virus definitions can be  updated frequently. Proactively, suspicious files will be sanitized and sensitive files will be redacted as policy allows. 

Prevent Sensitive Data Leakage

OPSWAT Proactive Data Loss Prevention (DLP) technologies can prevent potential data breaches and regulatory compliance violations by detecting and blocking sensitive data/personally identifiable information (PII). 

K3001 Premium uses Proactive DLP to search for a variety of sensitive information including credit card numbers, social security numbers, and user created keywords while documents are transferring in/out of your organization.

Ready to Deploy

Each kiosk is pre-configured for your deployment with a region-specific power cord, power protection, and an uninterruptible power supply. The K3001 comes standard with a pre-hardened operating system, pre-installed MetaDefender Kiosk software, Ethernet, Wi-Fi, and mounting accessories.

K3001 Premium supports most common portable media types, including floppy drives, with a variety of built-in media readers on the front of the kiosk.

Built to Protect Critical Infrastructure

Dual heavy-duty locks secure the main cabinet, and a separate heavy-duty lock secures a fully enclosed printer cabinet. K3001 Premium is keyed uniquely and specifically for your deployment. Internal floor mounting anchors ensure tamper-resistant permanent placement.

 The heavy duty power-coated steel enclosure with stainless steel and aluminum internal cabinetry is built to last. Active ventilation, low-profile antennae and exterior sealed ports for power and Ethernet make the K3001 Premium suitable for deployments in industrial and office locations.

Regulatory Compliance

With the continuously evolving regulatory requirements and executive orders, all industries are impacted by the risk of large fines and cybersecurity compliance has become a main driving force underlying a company's success. It is critical to invest resources to protect valuable assets in your critical infrastructure.

K3001 Premium helps create a secure data transfer process in/out of your critical networks which is fully auditable and secure with a user-friendly experience. It helps keep you compliant with regulations like NERC CIP 003-7, NEI 08-09, NIST 800-53, PCI DSS, and GDPR.

Specification

Form factors

Ruggedized, tamper-resistant casing

Media type support▪ 2 x USB Type C 
▪ 2 x USB 3.0 Type A 
▪ 15-in-1 card reader 
▪ CD/DVD/Blu-ray drive 
▪ 3.5" diskette
Regulatory▪ Safety: CE, BIS
▪ EMC: FCC, IC, CE, WPC
▪ Environmental: RoHS, REACH
CPUIntel Core i5-9500
RAM32 GB RAM
Hard drive256 GB SSD
Touchscreen19" display
DimensionsW 500mm/19.7" x H 1530mm/60.2" x D 395mm/15.6"
Weight70 kg/154 lbs

Deployment options

We have multiple recommended deployment options for K3001 Premium to scan removable media and remediate malicious content before they get into air-gapped and isolated secure networks.

Standalone Deployment

In this deployment scenario, removable media are allowed to be used inside the organization, however, they must be processed by the K3001 Premium. 

After user scans the content on the media, malicious files will be blocked/removed, sensitive data can be redacted, and only verified files can remain on the media to be carried forward into the secure areas. 

Deployed with MetaDefender Vault - Secure File Retrieval


In this scenario, K3001 Premium is deployed on the low security side of the entry networks. 

After user scans the content on the media, malicious files will be blocked/removed, sensitive data can be redacted and only verified files can be transferred to MetaDefender Vault, a secure storage product to store and enable the data download from inside. 

Optionally a data diode can be used to guarantee one-way transferring in between the Kiosk and Vault. Users can retrieve approved files from MetaDefender Vault for maintaining a media-less environment of high security networks. 

Deployed with OPSWAT Client - Enforced Media Usage

In this deployment scenario, removable media are allowed to be used inside the organization, however, they must be processed by the K3001 Premium and the usage must be enforced via an endpoint agent - OPSWAT Client. 

After user scans the content on the media, malicious files will be blocked/removed, sensitive data can be redacted, and only verified files can remain on the media to be carried forward into the secure areas. In case any unauthorized removable media are brought into the organization and inserted into devices that are protected by OPSWAT Client, the unverified media will be blocked entirely.

K3001 Premium - Trust Data Transfer in Your Environments