Public and private sector

Replacing an air gap

Mapping the flows comes before choosing the product — the air gap is upheld by manual work that is rarely counted as cost.

Area
Data diodes
Architecture patterns
1
Products used
3

The problem

What makes it hard

An air gap is not free. It is upheld with USB sticks, manual re-keying and exceptions, and it erodes quietly. The diode gives an auditable, logged and sized path where there used to be an unregulated one.

This is the environment where the decision is organisational rather than technical. You exchange an absolute but eroded guarantee for a narrower but real one. Said plainly, that is a good trade. Left unsaid, the proposal gets rejected for the right reasons.

How it is built

File lock between domains

From a USB stick to a one-way transfer, with the human decision made explicit rather than assumed.

See the full pattern
Media is carried in, validated in a staging zone, and only then released onward.OutsideStaging zoneProtected domainUSB mediaMicrotowerValidation and disarmTarget systemafter validationpassesthe staging zone isnot reachable frominside
Media is carried in, validated in a staging zone, and only then released onward.OutsideStaging zoneProtected domainUSB mediaMicrotowerValidation and disarmTarget systemafter validation passesthe staging zoneis not reachablefrom inside
  • One-way path
  • Data path
  • Path that does not exist
Media is carried in, validated in a staging zone, and only then released onward.

In the catalogue

Equipment from the catalogue

Built from: Data Diode Secure 1 Gbit MM TEMPEST 60-00-7303, Data Diode Secure 1 Gbit SM 60-00-8362 and Data Diode Middleware (DDMW) 60-00-7367.

TEMPEST Level A · RÖS U1

Data Diode Secure 1 Gbit MM TEMPEST

Data rate
1 Gbps
Wavelength
Multimode 850 nm
Input, LC
1000 BaseSX

Product no 60-00-7303

Standard

Data Diode Secure 1 Gbit SM

Data rate
1 Gbps
Wavelength
Singlemode 1310 nm
Input, LC
1000 BaseLX

Product no 60-00-8362

Standard

Data Diode Middleware (DDMW)

Software solution for transferring data over data diodes in such a controlled manner. It consists of a sender…

Product no 60-00-7367

Reading and references

Explained in

Named customer references are not published. What we can show is the solution area this environment belongs to, and the reasoning behind the design.

Sector

Environments

Environments with the same problem

The technology is the same; the buying process usually is not.

Hands soldering a circuit board under a work lamp

Next step

Describe your environment

If yours is close to this one but not the same, that difference is usually where the design decisions are. Tell us what it looks like.

Verified credentials

All certifications