Fend's Data Diodes are Now Part of the MetaDefender PlatformMetaDefender
Unidirectional Security Gateway™
Unidirectional Security Gateway for IT and OT
MetaDefender Unidirectional Security Gateway provides access to real-time OT data and enables secure data transfer to the OT environment without compromising the security and integrity of your critical production systems.
Guaranteed Payload Delivery
Anti-Overrun Control
Easy to Deploy
Deploys Quickly and Seamlessly
High Availability
& Minimize Data Loss
No Return Path
Simple to Operate
Scalable
Hardware-Enforced
Unidirectional Data Flow
Space-Efficient and Easily Rack-Mounted
- Airtight protection for OT/ICS-to-IT communication
- Secure, segmented, unidirectional data paths
- True protocol break, non-routable connection
- Assured delivery with no data loss
- Easy deployment and operation
- Prevent malicious C&C communications from the OT network
- Protect networks, devices, historians, SCADA, DCS, HMIs, and PLCs
- Seamless integration with MetaDefender Kiosk and Managed File Transfer
- Secure the transfer of software updates and other files to the protected domain
- Common Criteria EAL4+ Certified
| Configurations | ||
|---|---|---|
| Configurations | Throughput | 100 Mbps, 1 Gbps, or 10 Gbps |
| Electrical | ||
| Electrical | Redundant Power Supply | 250W |
| Voltage | 100-240VAC, auto ranging | |
| Power Consumption | 150W typical | |
| Hardware | ||
| Hardware | Dimensions | 2x 19 x 1.75 x 15.75” (483 x 44 x 400mm) |
| Weight | 2x 27lb (12.2kg) | |
| Operating Temp | 32 – 131°F (0 – 55°C) | |
| MTBF | >50,000 hours | |
| Mounting | 1U rack kit included | |
| Other Specifications | ||
| Other Specifications | Connectivity | 2x USB for connecting provided crypto keys |
| Tested Latency1 | 0.6ms TCP, 0.7ms UDP | |
| Protocol & Certification | ||
| Protocol & Certification | Industrial | Modbus, OPC (UA, DA, A&E), MQTT, IEC104 DNP3, AVEVA, PI historian, ICCP |
| IT | UDP, TCP, HTTP, HTTPS, SMTP Video/audio stream transfer Ethernet packet transfer | |
| IT Monitoring | Log Transfer, SNMP Traps, SPAN, SYSLOG, SIEM integration via SYSLOG, Screen view | |
| File System | FTP, FTPS, SFTP, Folder and file transfer/copy, Windows File Share, SMB, CIFS, Antivirus updates, Patch (WSUS) updates | |
| Environmental Compliance |
FCC Class A Mark, BIS, FCC, IC CE, WPC, RoHS, REACH | |
| Certification | Common Criteria EAL 4+ FCC/CE/UKCA | |
Unidirectional Security Gateway Deployment
MetaDefender Unidirectional Security Gateway enforces one way data flows while guaranteeing payload delivery and preventing data loss, avoiding the need for data retransmission.
“NetWall has helped us enhance work efficiency, simplify regulatory compliance, and reduce operational risks—ultimately helping to protect our operations and reputation.”
From Fast to Gigafast, Solutions for Every Industrial Enterprise
MetaDefender Unidirectional Security Gateway is a preconfigured appliance:
- 2 19" 1U rack mounted servers
- Includes PCIe cards, data link cable, USB security dongles, and management console
Scalable Industrial Cybersecurity
Easy to Deploy
Preconfigured platform deploys quickly and seamlessly.
Highly Scalable
We offer a 100Mbps base platform that can be field upgraded to 1Gbps. Additionally, we offer an option for 10Gbps delivered on enterprise servers.
Simple to Operate
Ready for use in minutes after one-time initial setup. No firewall audit or configuration needed.
Transparent to Users
Fast and high-fidelity data replication means there is no need to alter work procedures of corporate users.
Enables Regulatory Compliance
Supports compliance with Industrial Cybersecurity standards: NERC CIP – NIST CSF, ICS, 800-82, 800-53 – IEC 62443 – NRC 5.71 – CFATS ISO 27001, 27032, 27103 – ANSSI – IIC SF and more
Full Support for Industrial Protocols
Includes TCP, UDP, HTTPS, FTP, SFTP, FTPS, SMB, Windows file Share, CIFS, SMTP, Video, Aveva Pi, Modbus, OPC DA/AE/UA, MQTT, DNP3, IEC-104, ICCP, and Screen View.
MetaDefender NetWall vs. Firewall, Router Rules & VLANS
True unidirectional behavior, with no possibility of routable connections to protected zone.
| Feature | MetaDefender NetWall | Networking Solutions |
|---|---|---|
| Routing configuration | ||
| Protocol break, completely removed from TCP/IP connection | ||
| Meets functional requirements of data diodes | ||
| Guaranteed delivery with non-repudiable data movement | ||
| No complex rule-building | ||
| Guaranteed prevention of malware propagation | ||
| No ARP, BGP, TCP/IP handshake |
“OPSWAT's solutions not only protect the critical assets of businesses but also provide the necessary tools and information to improve cybersecurity strategies.”
Looking To Learn More About MetaDefender Unidirectional Security Gateway?
Explore documentation, articles, and blogs for more information about the MetaDefender Unidirectional Security Gateway.
