Environments
Where the equipment is actually used
From embassies to substations: the settings our equipment is built for, with who runs each one, what makes it hard and the equipment it is built from.
- Environments
- 49
- For the public sector
- 40
- For the private sector
- 22
- Architecture patterns
- 26
Environments
By product area
Sector
Showing all 49 environments
Data diodes and one-way transfer
15 Environments
- Backup of a protected networkBackup is the only flow where the volume is large, completeness is absolute and the time window is set by someone else.
- Log export to a SOCThe one flow where the diode is cheaper and simpler than the alternative — which is why it is almost always the right first installation.
- SCADA export to the office networkThe direction that matters is out. Everything that wants to come back in is a separate decision with its own owner.
- Publishing between classification domainsThe hard part is not the transport but the release decision: who decides that this document may leave, and how is that recorded.
- Patch distribution into a closed networkThe direction runs towards the protected side, which inverts every assumption the other flows rest on.
- File lock and media transferThis is where people work around the protection when it becomes inconvenient — the design has to assume that.
- Sensor data from the fieldVibration, temperature range and DC supply, and no maintenance while deployed.
- Nuclear facilityThe regulator, not the operator, sets what has to be provable — and provability shapes the architecture.
- Financial market dataMulticast passes natively, which is exactly the distribution model market data uses.
- Vehicle and vessel installationThe rugged data diodes carry 810G and 461 data; no converter, extender or switch in the catalogue does.
- Evidence and forensic chainTransaction logs and per-transfer hash verification are what make the chain documentable.
- Medical technologyGalvanic isolation is a double argument here: security, and fiber neither picking up nor radiating interference near diagnostic equipment.
- Replacing an air gapMapping the flows comes before choosing the product — the air gap is upheld by manual work that is rarely counted as cost.
- Presentation across a domain boundaryThe shared display is the only common component — and therefore the only channel connecting the domains.
- Command post in a vehicle or containerMaintenance during operation does not exist. Spare parts strategy and lifecycle commitment are part of the architecture.
TEMPEST/RÖS and the secure workplace
12 Environments
- Embassy or mission in an urban settingThe environment offers no inherent protection: there is no controlled zone to count on.
- Command and control centreSeveral networks meet at one desk, and the operator must never have to think about which one is in front of them.
- Registry functionPaper is a zone exit that no network diagram shows.
- Briefing roomA shared room is harder than a single workstation, and the bridge for an external client is a deliberate compromise that must be decided in advance.
- Mobile command postThe zone moves with the vehicle, and the boundary is decided where the vehicle happens to stop.
- Naval vesselA hull is an electromagnetically dense environment where every cable run is shared with something else.
- Agency office in a shared buildingThe power supply belongs to the property, not to the tenant — and conducted emission does not need to pass through the wall.
- Research laboratoryResults have to leave the zone continuously, which makes the outflow the design problem rather than the workstation.
- Negotiation room in the private sectorThe threat is commercial rather than state-level, but the room is used by people who have never been briefed.
- The bank trading deskMany screens, many networks and no tolerance for a switching delay measured in seconds.
- Field workstationThere is no room, no wall and no property owner — the zone has to be carried along.
- Home workplace for classified workA home cannot be zoned. A thin client reduces the consequence but does not create a zone.
Fiber communication, teleprotection and OT
12 Environments
- Substation with teleprotectionDelay and channel asymmetry decide whether the protection trips correctly — the link is part of the protection scheme, not a service to it.
- Switching station with SCADA releaseMeasurements must leave the station without opening a way back in.
- Railway signalling installationVibration and a 40-year installation lifetime set the requirements, not the data rate.
- Water treatment and distributionThe distances between pumping stations are set by geography, and the budget has to be calculated rather than assumed.
- Process industryGround potential differences across a site are what break copper, and what fiber removes.
- Hospital: isolation near medical equipmentLeakage current, not data security, is the driver — and the catalogue answers for the technical room, not the patient-adjacent side.
- Data hall and cross-connect roomEvery passive component costs decibels, and a 1x8 switch costs up to 1.5 dB that nobody budgeted for.
- Link between buildings over public landThe operator’s later cross-connects eat your budget after handover, which is why the acceptance measurement matters.
- MineClassified areas require ATEX or IECEx, and the catalogue carries no such data.
- Wind farmLong loops and lightning exposure, with maintenance access measured in hours of travel.
- Power plant with high electromagnetic interferenceImmunity is the requirement, and it is the one figure the datasheet is expected to answer without discussion.
- Link between security domainsThe only environment where the absence of an electrical signature is the main argument rather than a side effect.
KVM, HDBaseT and secure video conferencing
10 Environments
- Control room with several networksShared peripherals are the channel between the domains, and an ordinary KVM switch shares EDID, USB state and sometimes memory.
- Emergency call centreRound-the-clock operation with no maintenance window: whatever is installed has to be replaceable while it runs.
- Operator station in process industryOT and IT on the same desk, with the operator responsible for keeping them apart.
- Boardroom in a protected companyThe people in the room have decision authority and no security training, and the equipment has to work without either.
- Embassy meeting roomEvery path is open at once: image, sound, USB and the network — and the room is used daily by people who are not technicians.
- Remote workplace towards a classified environmentMoving the computer moves the problem; it does not remove it, because the desk becomes an extension of the computer.
- Training facilityStudents bring their own devices, and a room designed for teaching is designed to be connected to.
- Control room with the computer in another fire cellThree separate drivers — fire, hygiene and security — lead to the same topology for different reasons.
- Hospital operating theatreSterility and leakage current decide what may be in the room, and the computer is not allowed to be.
- Shared AV equipment in a common meeting roomThe EDID table in the display is overwritten by the fourth computer connected, so the fifth gets a black screen — which is exactly the inconvenience that breeds the workaround.
Next step
Your environment not on the list?
Most of this catalogue started as a customer requirement that did not fit anything already on the shelf. Describe the setting and we will tell you what it takes.