Public and private sector

SCADA export to the office network

The direction that matters is out. Everything that wants to come back in is a separate decision with its own owner.

Area
Data diodes
Architecture patterns
1
Products used
4

The problem

What makes it hard

Process data has to reach operations, planning and reporting. Without a one-way path, every route out is also a route in to the control system.

Availability outranks confidentiality here. A control system must not stop because a security product is inconvenient — which makes the failure-mode analysis more important in this environment than anywhere else.

How it is built

OT export out, control or updates in

Two links in opposite directions, each with its own approval and its own decision owner.

See the full pattern
Two links in opposite directions, each with its own approval. Not one bidirectional path.OT networkOffice networkSCADA/historianDiode outDiode inAnalysis and reportingPatch sourcemeasurements outupdates in,its owndecision
Two links in opposite directions, each with its own approval. Not one bidirectional path.OT networkOffice networkSCADA/historianDiode outDiode inAnalysis andreportingPatch sourcemeasurementsoutupdates in,its owndecision
  • One-way path
  • Data path
Two links in opposite directions, each with its own approval. Not one bidirectional path.

In the catalogue

Equipment from the catalogue

Built from: Data Diode Rugged 1 Gbit MM 60-00-7132, Data Diode Rugged 100 Mbit MM 60-00-7133, Data Diode Bidirectional 1 Gbit Dual AC 60-00-7563 and 1 more below.

Rugged

Data Diode Rugged 1 Gbit MM

Secure one-way (simplex) hardware-based connection between two networks, ensuring that no data can ever flow…

Product no 60-00-7132

Rugged

Data Diode Rugged 100 Mbit MM

Secure one-way (simplex) hardware-based connection between two networks, ensuring that no data can ever flow…

Product no 60-00-7133

Standard

Data Diode Bidirectional 1 Gbit Dual AC

Secure two-way communication using a fully hardware-based design that removes any risk of data flowing in the…

Product no 60-00-7563

Standard

Data Diode Bidirectional 1 Gbit Dual DC

Secure two-way communication using a fully hardware-based design that removes any risk of data flowing in the…

Product no 60-00-7564

Reading and references

Explained in

Named customer references are not published. What we can show is the solution area this environment belongs to, and the reasoning behind the design.

Sector

Environments

Environments with the same problem

The technology is the same; the buying process usually is not.

Hands soldering a circuit board under a work lamp

Next step

Describe your environment

If yours is close to this one but not the same, that difference is usually where the design decisions are. Tell us what it looks like.

Verified credentials

All certifications