TEMPEST Level A · RÖS U1
Data Diode Secure 1 Gbit MM TEMPEST
- Data rate
- 1 Gbps
- Wavelength
- Multimode 850 nm
- Input, LC
- 1000 BaseSX
Product no 60-00-7303
Public sector
Backup of a protected network
Backup is the only flow where the volume is large, completeness is absolute and the time window is set by someone else.
- Area
- Data diodes
- Architecture patterns
- 1
- Products used
- 4
The problem
What makes it hard
A backup environment is by definition a complete copy of everything valuable, and it is reachable from production. Ransomware travels along exactly that path — the attacker encrypts production and backup in one operation, because the backup server holds accounts, agents and network routes into everything. The diode puts the newest copy somewhere the production domain physically cannot reach back to.
Backup is the only flow in this catalogue where the volume is large, completeness is absolute and the time window is set by somebody else. A dropped syslog message is an inconvenience. A truncated backup is discovered at the restore, six months later.
How it is built
Backup over a data diode
Sizing against the backup window, the role of the middleware, and why restoring is the hard direction.
See the full pattern- One-way path
- Data path
- Path that does not exist
In the catalogue
Equipment from the catalogue
Built from: Data Diode Secure 1 Gbit MM TEMPEST 60-00-7303, Data Diode Secure 1 Gbit SM 60-00-8362, Rack 19" 3 HU 16 Slots SNMP 60-00-6918 and 1 more below.
Standard
Data Diode Secure 1 Gbit SM
- Data rate
- 1 Gbps
- Wavelength
- Singlemode 1310 nm
- Input, LC
- 1000 BaseLX
Product no 60-00-8362
Reading and references
Explained in
Named customer references are not published. What we can show is the solution area this environment belongs to, and the reasoning behind the design.
Environments
Environments with the same problem
The technology is the same; the buying process usually is not.
- Replacing an air gapMapping the flows comes before choosing the product — the air gap is upheld by manual work that is rarely counted as cost.
- Financial market dataMulticast passes natively, which is exactly the distribution model market data uses.
- Evidence and forensic chainTransaction logs and per-transfer hash verification are what make the chain documentable.
- Command and control centreSeveral networks meet at one desk, and the operator must never have to think about which one is in front of them.
Next step
Describe your environment
If yours is close to this one but not the same, that difference is usually where the design decisions are. Tell us what it looks like.
Verified credentials
All certifications- Swedish Armed ForcesM-numbered equipmentMain supplier, Total Defence
- Government of SwedenSupplier to Swedish authoritiesPolice · FMV · FOI
- NATOCertified TEMPEST supplierSDIP-27 · Level A & B
- ISO 9001 14001ISO certifiedQuality & environmentDownload certificate (JPG)
- SOFFDefence industry memberExport control frameworks
- Made in SwedenDesigned & built in StockholmSecure supply chain
