Public and private sector

Log export to a SOC

The one flow where the diode is cheaper and simpler than the alternative — which is why it is almost always the right first installation.

Area
Data diodes
Architecture patterns
1
Products used
2

The problem

What makes it hard

The log receiver is an attractive target and normally has network routes to everything it collects from. The diode makes a compromised SOC not a way back into the monitored systems, and makes the logs impossible to delete from behind.

This is the one flow where the diode is cheaper and simpler than the alternative — no middleware is needed, the protocol is already one-way, and the chain of custody gets stronger as a side effect. That is why it is almost always the right first installation.

How it is built

Log export and evidence retention

Syslog passes natively without middleware, and the chain of custody gets stronger as a side effect.

See the full pattern
Logs leave the monitored network. A compromised SOC is not a way back in.Monitored networkSOCSystem logsSyslog collectorSIEMEvidence archive, WORMdiode, syslogpasses nativelylogs cannot bedeleted from behind
Logs leave the monitored network. A compromised SOC is not a way back in.Monitored networkSOCSystem logsSyslog collectorSIEMEvidence archive,WORMdiode, syslog passesnativelylogs cannot bedeleted frombehind
  • One-way path
  • Data path
  • Path that does not exist
Logs leave the monitored network. A compromised SOC is not a way back in.

In the catalogue

Equipment from the catalogue

Built from: Data Diode Secure 100 Mbit MM 60-00-7304 and Data Diode Secure 100 Mbit SM 60-00-8363.

Standard

Data Diode Secure 100 Mbit MM

Data rate
100 Mbps
Wavelength
Multimode 1310 nm

Product no 60-00-7304

Standard

Data Diode Secure 100 Mbit SM

Data rate
100 Mbps
Wavelength
Singlemode 1310 nm

Product no 60-00-8363

Reading and references

Explained in

Named customer references are not published. What we can show is the solution area this environment belongs to, and the reasoning behind the design.

Sector

Environments

Environments with the same problem

The technology is the same; the buying process usually is not.

Hands soldering a circuit board under a work lamp

Next step

Describe your environment

If yours is close to this one but not the same, that difference is usually where the design decisions are. Tell us what it looks like.

Verified credentials

All certifications