{"id":15393,"date":"2024-03-04T02:08:03","date_gmt":"2024-03-04T02:08:03","guid":{"rendered":"https:\/\/ramsdata.com.pl\/opswat\/solutions\/cross-domain-solutions\/"},"modified":"2025-06-18T14:21:53","modified_gmt":"2025-06-18T14:21:53","slug":"cross-domain-solutions","status":"publish","type":"page","link":"https:\/\/ramsdata.com.pl\/en\/opswat\/solutions\/cross-domain-solutions\/","title":{"rendered":"Cross-domain solutions"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Cross-domain solutions<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Create a data transfer process that provides
security and trust throughout the structure<\/h2>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

How do you secure file transfers across the enterprise, especially for devices you don’t control? Transferring files in and out of secure environments is problematic. Files entering via mobile media and transient devices create opportunities for infection. Stored files may contain zero-day attacks, temporarily unnoticeable and dormant on servers. Allowing files to leave secure environments risks leaking sensitive data.<\/h4>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

MetaDefender presentation<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

BENEFITS<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n
\n\t\t\t\t\t
<\/path><\/svg><\/span><\/path><\/svg><\/span>Prevent breaches with multiscanning<\/span><\/path><\/svg><\/div>

Malware continues to evade existing defenses as cybercriminals create threats of increasing sophistication and businesses implement inadequate protection. Sensitive data can be accidentally stolen or transferred. OPSWAT actively protects sensitive data at every point of transmission.<\/p>\n

Many of the specialists in the field. Security allows files to get through to the network after just one virus scan. To detect the latest threats, OPSWAT uses up to 30+ anti-malware engines.<\/p>\n<\/div>\n\t\t\t\t\t<\/div>

\n\t\t\t\t\t
<\/path><\/svg><\/span><\/path><\/svg><\/span>Compliance with NERC CIP, RODO and more<\/span><\/path><\/svg><\/div>

Compliance requirements are designed to minimize breaches and privacy violations. Ensuring compliance is time-consuming and can be costly if requirements are not met.<\/p>\n

OPSWAT helps support compliant processes, comprehensive visibility and detailed reporting to help meet the requirements of NERC CIP 003-7, NEI 08-09, NIST 800-53, PCI DSS, RODO, Bulk Power Executive Order 13920 and a wide range of other global regulations.<\/p>\n<\/div>\n\t\t\t\t\t<\/div>

\n\t\t\t\t\t
<\/path><\/svg><\/span><\/path><\/svg><\/span>Digital circuit control with automatic device interlocking<\/span><\/path><\/svg><\/div>

Borders can be virtual, physical or mobile. OPSWAT securely controls the transfer of files from devices between security levels, systems and physical transfer points.<\/p>\n

The global growth of remote workers, BYOD and contractors has resulted in an exponential increase in the number of unmanaged devices. Blindly connecting devices to an internal network or the cloud exposes businesses to serious risks. OPSWAT blocks untrusted devices from accessing physical and virtual environments until they are thoroughly inspected and patched.<\/p>\n<\/div>\n\t\t\t\t\t<\/div>

\n\t\t\t\t\t
<\/path><\/svg><\/span><\/path><\/svg><\/span>Secure file transfer with automatic media blocking<\/span><\/path><\/svg><\/div>

Files are vulnerable to infection during transmission. OPSWAT enforces secure file transfer processes, constantly scans for malware and adds digital signatures to ensure file integrity.<\/p>\n

The tools work most effectively when combined with conscious decision-making. OPSWAT products introduce simple, efficient processes. Employees will know how to securely enter, store, transmit and extract data across the enterprise while maintaining security compliance. If unsanctioned portable media are intentionally or accidentally introduced into the environment, security processes will block media access to devices and networks.<\/p>\n<\/div>\n\t\t\t\t\t<\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
We offer many products for a wide range of applications – manage security and compliance between domains.<\/h5>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\n\t\t\t\t\t\t
\n\t\t\t\t\n\t\t\t\t<\/i>\t\t\t\t<\/span>\n\t\t\t<\/div>\n\t\t\t\n\t\t\t\t\t\t
\n\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tMetaDefender Kiosk\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\tThe MetaDefender kiosk acts as a digital gatekeeper - checking all media for malware, security vulnerabilities and sensitive data. The kiosk is designed to be installed at the physical point of entry to secure facilities.\t\t\t\t\t<\/p>\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\n\t\t\t\t\t\t
\n\t\t\t\t\n\t\t\t\t<\/path><\/svg>\t\t\t\t<\/span>\n\t\t\t<\/div>\n\t\t\t\n\t\t\t\t\t\t
\n\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tMetaDefender Vault\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\tVault is a secure file storage and retrieval solution that protects critical files. Vault works with the kiosk to provide a secure and effective way to manage threat protection.\t\t\t\t\t<\/p>\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\n\t\t\t\t\t\t
\n\t\t\t\t\n\t\t\t\t<\/i>\t\t\t\t<\/span>\n\t\t\t<\/div>\n\t\t\t\n\t\t\t\t\t\t
\n\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tMetaDefender Drive\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\tMetaDefender Drive is a portable USB-based solution for checking devices for malware, vulnerabilities and sensitive data before they enter or leave an organization. The drive is designed for use where portability is valued and an external network connection is not available.\t\t\t\t\t<\/p>\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\n\t\t\t\t\t\t
\n\t\t\t\t\n\t\t\t\t<\/i>\t\t\t\t<\/span>\n\t\t\t<\/div>\n\t\t\t\n\t\t\t\t\t\t
\n\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tOPSWAT Client\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\tThe OPSWAT client blocks unauthorized use of removable media on all endpoints and scans them for malware before any files are copied to internal systems. The customer can also force the use of any media processed and approved only by MetaDefender Kiosk at the entrance of your organization.\t\t\t\t\t<\/p>\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\n\t\t\t\t\t\t
\n\t\t\t\t\n\t\t\t\t<\/i>\t\t\t\t<\/span>\n\t\t\t<\/div>\n\t\t\t\n\t\t\t\t\t\t
\n\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tCentral Management\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\tCentral management offers a single panel to globally manage multiple OPSWAT deployments, update policies and settings, and monitor the status of all instances in near real-time.\t\t\t\t\t<\/p>\n\t\t\t\t\n\t\t\t<\/div>\n\t\t\t\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Implementation scenarios<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t
\n
\n
    \n
  • \n \n \n \n Standalone MetaDefender Kiosk<\/span> <\/li>\n
  • \n \n \n \n MetaDefender Kiosk for MetaDefender Vault<\/span> <\/li>\n
  • \n \n \n \n MetaDefender Kiosk to OPSWAT Client.<\/span> <\/li>\n
  • \n \n \n \n MetaDefender Vault to MetaDefender Vault<\/span> <\/li>\n
  • \n \n \n \n MetaDefender Drive<\/span> <\/li>\n
  • \n \n \n \n Data diode<\/span> <\/li>\n \n <\/ul>\n <\/div>\n \n
    \n\t\t \n
    \n\t\t\t\t
    \n
    \n

    STANDALONE METADEFENDER KIOSK<\/h1>\n<\/div>\n<\/div>\n
    \n
    \n

    Removable media can be used inside the organization, but must be processed by the MetaDefender kiosk. When the user scans the contents of the media, malicious files will be blocked\/deleted, sensitive data may be redacted, and only verified files may remain on the media, which will be moved to safe zones.<\/p>\n

    \"\"<\/p>\n<\/div>\n<\/div>\n <\/div>\n\t\t \n

    \n\t\t\t\t
    \n
    \n

    METADEFENDER KIOSK FOR METADEFENDER VAULT<\/h1>\n<\/div>\n<\/div>\n
    \n
    \n

    The MetaDefender kiosk is deployed in network segments with low security. Once the user scans the contents of the media, malicious files will be blocked\/deleted, sensitive data can be redacted, and only verified files can be transferred to MetaDefender Vault, a secure product for storing and enabling data retrieval from high-security network segments.<\/p>\n

    Optionally, a data diode can be used to provide one-way data transfer between the Kiosk and Vault. Users can download approved files from MetaDefender Vault to maintain a media-free network environment with a high level of security.<\/p>\n

    \"\"<\/p>\n<\/div>\n<\/div>\n <\/div>\n\t\t \n

    \n\t\t\t\t
    \n
    \n

    METADEFENDER KIOSK FOR OPSWAT CLIENT<\/h1>\n<\/div>\n<\/div>\n
    \n
    \n

    Removable media can be used within an organization, but must be analyzed by MetaDefender Kiosk, and use enforced by the endpoint agent, the OPSWAT client.
    When a user scans the contents of the media, malicious files will be blocked\/deleted, sensitive data may be redacted, and only verified files may remain on the media, which will be moved to secure areas. If an unauthorized removable media is brought into the organization and placed on the OPSWAT customer’s protected devices, the unverified media will be completely blocked.<\/p>\n

    \"\"<\/p>\n<\/div>\n<\/div>\n <\/div>\n\t\t \n

    \n\t\t\t\t
    \n
    \n

    METADEFENDER VAULT TO METADEFENDER VAULT<\/h1>\n<\/div>\n<\/div>\n
    \n
    \n

    MetaDefender Vault (forwarding side) is deployed in network segments with low security. All users can use web browsers to visit the Vault landing page and log in with credentials or guest ID to upload files via
    All content will then be scanned by MetaDefender Vault (the transferring side): malicious files will be blocked\/deleted, sensitive data can be redacted, and only verified files can be transferred to a second MetaDefender Vault (the receiving side), usually high-security network segments. Once uploaded, files can be continuously scanned for outbreaks before being made available for download unless approved by supervisory controls.<\/p>\n

    \"\"<\/p>\n<\/div>\n<\/div>\n <\/div>\n\t\t \n

    \n\t\t\t\t
    \n
    \n

    METADEFENDER DRIVE<\/h1>\n<\/div>\n<\/div>\n
    \n
    \n

    When any transient devices, such as borrowed laptops, resources returned by current employees, subcontractor machines, etc., Return to a high-security network, MetaDefender Drive can be used to scan assets for the risk of malware, loss of sensitive data, vulnerable binaries and installers, and applications created by foreign adversaries.
    After a thorough inspection of the device, a detailed approval report will summarize which assets can be let in.<\/p>\n

    \"\"<\/p>\n<\/div>\n<\/div>\n <\/div>\n\t\t \n

    \n\t\t\t\t
    \n
    \n

    DATA DIODE GUIDE<\/h1>\n<\/div>\n<\/div>\n
    \n
    \n

    A data diode is a hardware-based cybersecurity solution that provides one-way information transfer between two networks. Data diodes have been common for decades in high-security environments such as defense facilities and intelligence agencies. With the growth of the industrial Internet of Things and digitization, data diodes are increasingly being deployed by private enterprises to securely transmit data generated by the industrial control and safety systems of nuclear and other power generation plants, manufacturing facilities and transportation systems to other networks ( including the public Internet), while protecting the networks containing these systems from attack.
    Unidirectional means that data can only travel in one direction. A sensible way to think about data diodes is “one-way data valves,” allowing data to flow without return. A typical scenario is when a data diode provides a one-way transfer from a high-security network to a lower-security network. Data can be transmitted while the high-security network remains protected from attack using this connection. In this scenario, the diode protects systems on a high-security network that produce transmitted data.<\/p>\n

    \"\"<\/p>\n<\/div>\n<\/div>\n <\/div>\n\t\t <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t

    Trust no file. Trust no device.<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

    Cross-domain solutions Create a data transfer process that providessecurity and trust throughout the structure How do you secure file transfers across the enterprise, especially for devices you don’t control? Transferring files in and out of secure environments is problematic. Files entering via mobile media and transient devices create opportunities for infection. Stored files may contain […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":15189,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"class_list":["post-15393","page","type-page","status-publish","hentry"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/ramsdata.com.pl\/en\/wp-json\/wp\/v2\/pages\/15393","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ramsdata.com.pl\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/ramsdata.com.pl\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/ramsdata.com.pl\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ramsdata.com.pl\/en\/wp-json\/wp\/v2\/comments?post=15393"}],"version-history":[{"count":8,"href":"https:\/\/ramsdata.com.pl\/en\/wp-json\/wp\/v2\/pages\/15393\/revisions"}],"predecessor-version":[{"id":38853,"href":"https:\/\/ramsdata.com.pl\/en\/wp-json\/wp\/v2\/pages\/15393\/revisions\/38853"}],"up":[{"embeddable":true,"href":"https:\/\/ramsdata.com.pl\/en\/wp-json\/wp\/v2\/pages\/15189"}],"wp:attachment":[{"href":"https:\/\/ramsdata.com.pl\/en\/wp-json\/wp\/v2\/media?parent=15393"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}