

MetaDefender Optical Diode™
Hardware Enforced One-way Transfer for IT and OT Environments
MetaDefender Optical Diode is OPSWAT’s data diode solution, providing a reliable transfer of data over a hardware enforced one-way communications link, enabling secure data transfer between isolated networks. To support the concurrent transfer of multiple data types, MetaDefender Optical Diode ensures the security and integrity of your critical assets.
Redundant Optical Connection
Anti-Overrun Control
Easy to Deploy
Data Diode
Deploys Quickly and Seamlessly
High Availability
& Minimize Data Loss
No Return Path
Simple to Operate
Scalable
Hardware-Enforced
Unidirectional Data Flow
Optical Diode 1U
- Airtight protection for OT/ICS-to-IT communication
- Secure, segmented, unidirectional data paths
- True protocol break, non-routable connection
- Redundant optical connection for unsurpassed reliability
- Easy to deploy and operate data diode
- Seamlessly integrates with MetaDefender Kiosk, Core, and Managed File Transfer
Optical Diode DIN Rail
- Airtight protection for OT/ICS-to-IT communication
- Secure, segmented, unidirectional data paths
- True protocol break, non-routable connection
- Redundant optical connection for unsurpassed reliability
- Easy to deploy and operate data diode
- Seamlessly integrates with MetaDefender Kiosk, Core, and Managed File Transfer
- Common Criteria EAL4+ certified
- C1D2 Certified
XE, SE, CE (Fend)
- Full optical isolation
- All-in-one design
- On-diode protocol conversion (e.g. Modbus to JSON)
- Native support for FTP, TCP, UDP, and more
- Easy to deploy and operate data diode
- Compact, rugged, fanless design for industrial applications
Configurations | ||
---|---|---|
Configurations | Throughput | 100 Mbps, 1 Gbps, or 10 Gbps |
Electrical | ||
Electrical | Redundant Power Supply | 250W |
Voltage | 100-240VAC, auto ranging | |
Power Consumption | 150W typical | |
Hardware | ||
Hardware | Dimensions | 2x 19 x 1.75 x 15.75” (483 x 44 x 400mm) |
Weight | 2x 27lb (12.2kg) | |
Operating Temp | 32 – 131°F (0 – 55°C) | |
MTBF | >50,000 hours | |
Mounting | 1U rack kit included | |
Other Specifications | ||
Other Specifications | Connectivity (Input) | Ethernet |
Connectivity (Output) | Ethernet | |
Tested Latency1 | 0.6ms TCP, 0.7ms UDP | |
Protocol & Certification | ||
Protocol & Certification | Industrial | Modbus, OPC (UA, DA, A&E), MQTT, IEC104 DNP3, AVEVA, PI historian, ICCP |
IT | UDP, TCP, HTTP, HTTPS, SMTP Video/audio stream transfer Ethernet packet transfer | |
IT Monitoring | Log Transfer, SNMP Traps, SPAN, SYSLOG, SIEM integration via SYSLOG, Screen view | |
File System | FTP, FTPS, SFTP, Folder and file transfer/copy, Windows File Share, SMB, CIFS, Antivirus updates, Patch (WSUS) updates | |
Environmental Compliance |
FCC Class A Mark, BIS, FCC, IC CE, WPC, RoHS, REACH | |
Certification | Common Criteria EAL 4+ FCC/CE/UKCA |
Configurations | ||
---|---|---|
Configurations | Throughput | 10 Mbps to 50 Mbps |
Electrical | ||
Electrical | Redundant Power Supply | n/a |
Voltage | 12-36VDC | |
Power Consumption | 19.55W | |
Hardware | ||
Hardware | Dimensions | 2x 2.5 x 7.32 x 6.3” (65 x 186 x 160mm) |
Weight | 2x 4.85lb (2.2kg) | |
Operating Temp | -40 to 158°F (-40 to 70°C) | |
MTBF | >50,000 hours | |
Mounting | No additional harware needed | |
Other Specifications | ||
Other Specifications | Connectivity (Input) | Ethernet |
Connectivity (Output) | Ethernet | |
Tested Latency1 | 0.6ms TCP, 0.7ms UDP | |
Protocol & Certification | ||
Protocol & Certification | Industrial | Modbus, OPC (UA, DA, A&E), MQTT, IEC104 DNP3, ICCP |
IT | UDP, TCP, HTTP, HTTPS, SMTP Video/audio stream transfer Ethernet packet transfer | |
IT Monitoring | Log Transfer, SNMP Traps, SPAN, SYSLOG, SIEM integration via SYSLOG, Screen view | |
File System | FTP, FTPS, SFTP, Folder and file transfer/copy, Windows File Share, SMB, CIFS, Antivirus updates, Patch (WSUS) updates | |
Environmental Compliance |
FCC Class A CE Mark, BIS, FCC, IC CE, WPC, RoHS, REACH | |
Certification | C1D2, Common Criteria EAL 4+2 FCC/CE/UKCA |
Configurations | ||
---|---|---|
Configurations | Throughput | 5 or 15 Mbps |
Electrical | ||
Electrical | Independent Power Supplies | 2X 100-240VAC 1.0A in, 12VDC 1.5A out |
Voltage | 12-48VDC | |
Power Consumption | 4W | |
Hardware | ||
Hardware | Dimensions | 5.1 x 5.8 x 1.6" (130 x 148 x 41 mm) |
Weight | 1 lb (0.5kg) | |
Operating Temp | -22 to 158°F (-30 to 70°C) | |
MTBF | >50,000 hours | |
Mounting | Optional DIN-rail or wall-mount | |
Other Specifications | ||
Other Specifications | Connectivity (Input) | Ethernet, Serial RS-485 |
Connectivity (Output) | Ethernet | |
Tested Latency1 | Less than 1 ms TCP/UDP | |
Protocol & Certification | ||
Protocol & Certification | Industrial | Modbus IP, BACnet, LON-IP (Conversion to JSON/MQTT on Output) |
IT | UDP, TCP | |
IT Monitoring | Send log files or SYSLOG over UDP | |
File System | FTP, FTPS, SFTP | |
Environmental Compliance | CE, Intertek, RoHS | |
Certification | Tested by the US DoD ESTCP, Army, Navy |
Configurations | ||
---|---|---|
Configurations | Throughput | 5 or 15 Mbps |
Electrical | ||
Electrical | Independent Power Supplies | 2X 100-240VAC 1.0A in, 12VDC 1.5A out |
Voltage | 12-48VDC | |
Power Consumption | 4W | |
Hardware | ||
Hardware | Dimensions | 5.1 x 5.8 x 1.6" (130 x 148 x 41 mm) |
Weight | 1 lb (0.5kg) | |
Operating Temp | -22 to 158°F (-30 to 70°C) | |
MTBF | >50,000 hours | |
Mounting | Optional DIN-rail or wall-mount | |
Other Specifications | ||
Other Specifications | Connectivity (Input) | Ethernet, Serial RS-485 |
Connectivity (Output) | Ethernet, Serial RS-485 | |
Tested Latency1 | Less than 1 ms TCP/UDP | |
Protocol & Certification | ||
Protocol & Certification | Industrial | Modbus IP, Modbus RTU, BACnet, LON-IP (Conversion to JSON/MQTT on Output) |
IT | UDP, TCP | |
IT Monitoring | Send log files or SYSLOG over UDP | |
File System | FTP, FTPS, SFTP | |
Environmental Compliance | CE, Intertek, RoHS | |
Certification | Tested by the US DoD ESTCP, Army, Navy |
Configurations | ||
---|---|---|
Configurations | Throughput | 5 or 15 Mbps |
Electrical | ||
Electrical | Independent Power Supplies | 2X 100-240VAC 1.0A in, 12VDC 1.5A out |
Voltage | 12-48VDC | |
Power Consumption | 8W | |
Hardware | ||
Hardware | Dimensions | 5.1 x 5.8 x 1.6" (130 x 148 x 41 mm) |
Weight | 1 lb (0.5kg) | |
Operating Temp | -22 to 158°F (-30 to 70°C) | |
MTBF | >50,000 hours | |
Mounting | Optional DIN-rail or wall-mount | |
Other Specifications | ||
Other Specifications | Connectivity (Input) | Ethernet, Serial RS-485 |
Connectivity (Output) | Ethernet, cellular | |
Tested Latency1 | Less than 1 ms TCP/UDP | |
Protocol & Certification | ||
Protocol & Certification | Industrial | Modbus IP, BACnet, LON-IP (Conversion to JSON/MQTT on Output) |
IT | UDP, TCP | |
IT Monitoring | Send log files or SYSLOG over UDP | |
File System | FTP, FTPS, SFTP | |
Environmental Compliance | CE, Intertek, RoHS | |
Certification | Tested by the US DoD ESTCP, Army, Navy |
Optical Diode Deployment
MetaDefender Optical Diode provides access to real-time OT data and enables secure IT/OT data and file transfers without the risk of introducing security threats to critical OT production networks and assets.
From Fast to Gigafast, Solutions for Every Industrial Enterprise
MetaDefender Optical Diode is a preconfigured data diode:
- 2 19" 1U rack mounted or din rail servers
- Includes an optical data cable and USB security dongles. It is field upgradable by software licensing.
Scalable Industrial Cybersecurity
Easy to Deploy
Preconfigured platform deploys quickly and seamlessly.
Transparent to Users
Fast and high-fidelity data replication means there is no need to alter work procedures of corporate users.
Highly Scalable
We offer a 100Mbps base platform that can be field upgraded to 1Gbps. Additionally, we offer an option for 10Gbps delivered on enterprise servers. The 10Mbps din rail model is field upgradeable to 50Mbps.
Full Support for Industrial Protocols
Includes TCP, UDP, HTTPS, FTP, SFTP, FTPS, SMB, Windows file Share, CIFS, SMTP, Video, Aveva Pi (1U model only), Modbus, OPC DA/AE/UA, MQTT, DNP3, IEC-104, ICCP, and Screen View.
Enables Regulatory Compliance
Supports compliance with Industrial Cybersecurity standards: NERC CIP – NIST CSF, ICS, 800-82, 800-53 – IEC 62443 – NRC 5.71 – CFATS ISO 27001, 27032, 27103 – ANSSI – IIC SF and more
Certifications
MetaDefender Optical Diode is certified in Common Criteria EAL4+ and C1D2*.
*MetaDefender Optical Diode din rail model only. C1D2 certification as of November 2024.
MetaDefender Optical Diode vs. Firewall, Router Rules & VLANS
True unidirectional behavior, with no possibility of routable connections to protected zone.
Feature | MetaDefender Optical Diode | Networking Solutions |
---|---|---|
Routing configuration | ||
Protocol break, completely removed from TCP/IP connection | ||
Meets functional requirements of data diodes | ||
Guaranteed delivery with non-repudiable data movement | ||
No complex rule-building | ||
Guaranteed prevention of malware propagation | ||
No ARP, BGP, TCP/IP handshake |
“OPSWAT's solutions not only protect the critical assets of businesses but also provide the necessary tools and information to improve cybersecurity strategies.”
Looking To Learn More About MetaDefender Optical Diode?
Explore documentation, articles, and blogs for more information about OPSWAT’s data diode product family.