MetaDefender
Media Firewall™
The MetaDefender Media Firewall is a critical component in a defense-in-depth removable media cybersecurity strategy for IT and OT.
Next-Level Removable Media Security Enforcement for Critical Systems
OPSWAT’s MetaDefender Media Firewall works with MetaDefender Kiosk as a simple, plug-and-play appliance to secure critical host systems from the threats of removable media-borne cyberattacks—without tampering with their integrity.
MetaDefender Media Firewall ensures that boot sectors and file contents of inserted portable media are inspected, audited, sanitized, and approved prior to use.
Key Advantages
- Accepts common forms of removable media (USB-A, USB-C, SD, MicroSD, and CF)
- Automatically blocks unprocessed or compromised files
- Provides Boot Sector protection for host system
- Requires no software installation on the SCADA/HMI host system
- Media Firewall works with MetaDefender Kiosk to ensure a manifest of audited files via a public key site certificate that can be programmed onto the appliance prior to operation
- Enforce policy, regulation, and standards compliance with NERC CIP, NIST 800-53, ISA 62443, ISO 27001, and more
A Critical Line of Defense
Unlock Endpoint Functionality
Make the most out of your machine’s capabilities. With MetaDefender Media Firewall connected to your endpoint, there’s no need to disable media ports.
Defense-in-Depth
MetaDefender Media Firewall adds an additional layer of protection to your removable media strategy, securing endpoints from unscanned media.
Reduced Risk
Prevent removable media-borne cyberthreats with MetaDefender Media Firewall connected to your endpoints.
Globally Trusted to Defend What’s Critical
MetaDefender Media Firewall is an added layer of defense that enforces the proven protection of MetaDefender Kiosk. That security is powered by industry-leading technology that’s purpose-built to detect, analyze, and eliminate known and unknown threats and zero-day attacks on removable media before it reaches critical environments.
Emulation-Based Sandbox*
Fast and reliable threat prevention not dependent on a golden image.
*Sandbox only available on select Kiosk models
Content Disarm and Reconstruction (Deep CDR)
Recursively sanitize 200+ file types and remove 100% of potential threats.
Proactive Data Loss Prevention (DLP)
Remove, redact, or watermark sensitive data in files before it enters your network.
Multiscanning
Scan files with 30+ antivirus engines and detect over 99% of known malware.
Vulnerability Detection
Uncover vulnerabilities in installers, binaries, or applications before they are installed.
Threat Intelligence
Detect zero-day malware and more Indicators of Compromise (IOCs) with adaptive threat analysis technology.
Country of Origin
Determine the geographic origin of files and data to enforce compliance.
Reduce Your Security Risk Today
Data can physically bypass even the most comprehensive security measures and directly impact critical host systems without a defense-in-depth strategy. Removable media security doesn’t stop at Kiosk—enforce it with MetaDefender Media Firewall.
MetaDefender Media Firewall Specifications
Supported Media Types
|
1x USB 3.0 Type C, 1x USB 3.0 Type A, 1x SD card slot, 1x Micro SD card Slot, 1x CF card slot
|
Regulatory
|
FCC, IC, VCCI, UKCA, CE, UL/cUL
|
Supported File Formats
|
FAT, NTFS, Ext
|
Power
|
12VDC 36W power supply
|
Mounting
|
VESA 75
|
Material
|
Metal and ABS
|
Dimensions
|
200mm x 180mm x 45mm (D x W x H)
|
Weight
|
1,068 g
|
Proven Security
MetaDefender Media Firewall has undergone rigorous testing, receiving operational certifications as it pertains to product certification programs accredited by the U.S. Occupational Safety & Health Administration (OSHA), the American National Standards Institute (ANSI), the Standards Council of Canada (SCC), and more:
Safeguard Your Air-Gapped Network: Media Firewall in Action
Enforce Critical Infrastructure Security with Advanced Threat Protection
Protecting critical infrastructure requires more than just scanning media at entry points. This video demonstrates how MetaDefender Media Firewall provides an advanced security layer by scanning and verifying media before it reaches SCADA systems. In compliance with ISO 27001 and NIST 800-53 standards, the Media Firewall stops zero-day threats, tampered files, and malicious software from gaining access to air-gapped networks.
