Cyrus

Unidirectional Gateway

The term unidirectional gateway is used to establish one-way communication between two networks. Today, due to the expansion of information systems and management software in organizations and factories, it is often necessary to transfer a series of information from the industrial network to the administrative network. But for security reasons, it is necessary to transfer this information in a safe and one-way way to prevent possible threats from entering the industrial network.

Cyrus Unidirectional Gateway product makes this communication one-way and guarantees the one-way communication between two networks in a hardware way, so that any mistake of the operator in the settings of this product cannot lead to two-way communication.

Although today, data diode is used as a tool for one-way communication between two networks, but the efficiency of this product is far beyond the performance of data diode.

Datadiode is a purely hardware product, but Cyrus Unidirectional Gateway is a combination of software and hardware, and for this reason, it has been able to cover the weak points of Datadiode. The data diode only transmits data in one direction and most software cannot communicate through it. But in the Cyrus Unidirectional Gateway product, we have been able to solve the problems in the use of data diodes by simulating the application services in the industrial network.

Why do we need Cyrus Unidirectional Gateway? One of the basic needs related to the control system, especially in SCADA networks, is to create a central monitoring system. Central management and visibility of network activity control and security monitoring have many advantages, but at the same time, they also bring risks. If we want to have a central industrial monitoring system, we must be able to collect basic information from all industrial networks and transfer it to the center. Transferring this information requires connecting networks to each other. Connecting networks to each other increases the risk of transmission of contamination from one network to another. Therefore, we need to establish a one-way connection between the networks so that the basic information is transferred only in one direction and from one network to another. The Cyrus Unidirectional Gateway device provides the ability to make the connection between two networks one-way. The use of traditional firewalls in order to connect the administrative network to the industrial network cannot provide the required guarantee for the non-contamination of the industrial network. Because firewalls are software and their possible vulnerabilities will make us unable to guarantee that a firewall can block a one-way connection. CYRUS Unidirectional Gateways product is a combination of hardware and software. The hardware guarantees that the connection is physically one-way and only in one direction. Therefore, the error of the operator in the wrong setting of this product cannot cause the communication on the line to be two-way. Physically, the entry path of any signal or message from the office network to the industry is blocked. The software part of the Cyrus Unidirectional Security Gateway product replicates industrial servers and it can simulate industrial sector services for use in office network. Users and applications in the office network can query the replicas and get the required information from the industrial network. This device can be used to ensure the control networks of various industries, including power generation, transmission and distribution as well as oil and gas, water treatment, railway system and other applications. This product can transfer database data and industrial protocols one-way without the server and client realizing this. This product can send the received data to different servers with iot protocols. CYRUS technology guarantees one-way communication.

How does the Cyrus Unidirectional Gateway hardware make communication unidirectional? One-way Gateways hardware components include a TX module, containing a fiber optic laser transmitter, and an RX module containing an optical receiver. Gateway hardware can transfer information from an ICS network to an external network, preventing any virus, DOS attack, human error, or any Cyber Attack from spreading to the protected network. In general, our hardware will make the communication one-way, safe and reliable, and the implemented software will replicate and emulate all services and protocols in the industry.

Cyrus Unidirectional Gateway can be used in petrochemicals, pharmaceuticals, manufacturing plants, oil and gas industries, water and sewage, organizations and institutions, the military, at the level of industrial control, power plants, nuclear power plants, etc... .

Features and benefits

• Completely modular and flexible hardware with high security features and compatible with industrial environments
• 1Gbps transmission capacity, the possibility of adding bandwidth with several pairs of TX / RX
• With backup service (HA optional)
• All the connections are embedded in the front of the device so that they can be seen clearly and can be worked on
• A wide range of software connectors, without the cost of customization

Technical specifications:

More than 100 types of software connectors

Cyrus Unidirectional Gateway product software connections can run on customer-provided servers, virtual machines, or host modules of this product. Its software connections can be implemented in Windows, Linux and other operating systems.