NetWall Optical Diode

Hardware-enforced transfer unidirectional for IT and OT environments

NetWall Optical Diode provides reliable data transfer over a hardware-enforced unidirectional communication link, enabling secure data transfer between isolated networks. Supporting the simultaneous transfer of multiple data types, NetWall Optical Diode ensures the security and integrity of critical resources.

The NetWall optical diode provides

Reliable one-way data transmission
Hardware-enforced air security for critical resources
Prevents malicious C&C communications from OT networks
Segregates and protects networks, devices, historians, SCADA, DCS, HMI and PLCs
Seamless integration with OPSWAT MetaDefender Kiosk and Vault
Secure transfer of software updates and other files to a protected domain

NetWall Optical Diode – Guaranteed delivery of data

Redundant optical connection

Data integrity control with redundant optical links provides unparalleled reliability.

Advanced tuning features

Allows you to optimize NetWall Optical Diode for your data transfer needs.

Without a return path

A networked serial connection between a pair of NetWall USG servers enforces unidirectional data flow.

Scalable industrial cyber security

OPSWAT NetWall USG consists of two 1U server devices with a non-network serial connection between them

Easy implementation

The pre-configured platform deploys quickly and seamlessly.

High scalability

Choose 100Mbit, 1Gbit or bandwidth for a 1U server configuration – all software can be selected to meet current and future requirements. The DIN-rail version can be configured for 10Mbps or 100Mbps throughput.

Full support for industrial protocols

It includes OPC DA, A&E and UA, as well as Modbus/TCP, file transfer and TCP/UDP sockets.

Transparency for users

Fast and faithful data replication means that there is no need to change the work procedures of corporate users.

Ensures regulatory compliance

Supports compliance with industry cybersecurity standards:

NERC CIP, NIST CSF, ICS, 800-82, 800-53, IEC 62443, NRC 5.71, CFATS, ISO 27001, 27032, 27103, ANSSI, IIC SF, and others.

Protection against industrial attack techniques presented by MITRE ATT&CK for ICS.

Secure file transfer from IT to OT resources

NetWall data diode vs. Firewall, router rules and VLANs

Truly unidirectional behavior, with no routable connections to the protected zone.

Function	OPSWAT NetWall Optical Diode.	Other network solutions
Routing configuration
Interruption of protocol, complete removal from TCP/IP connection
Hardware-enforced unidirectional transfer
No complex rule-building
No ARP, BGP, TCP/IP handshake.
Guaranteed prevention of malware propagation