Advenican kestävien, tulevaisuudessakin turvallisten ja teknologisesti edistyneiden salaus- ja segmentointituotteiden avulla verkot voidaan fyysisesti erottaa ulkomaailmasta ja tietoja voidaan turvallisesti siirtää samaan aikaan. Asennetut tuotteet ovat osittain tai täysin ainutlaatuisia asiakkaan tarpeista riippuen.
As your true asset is information, ZoneGuard is designed to focus on information security rather that network security. Securely transferring correct and validated information using a allowlisting approach automatically solves network security in the cross domain exchange.
ZoneGuard only forwards received information when it complies with your organisation's information policy. The information policy implemented in ZoneGuard defines accepted structure, format, types, values and even digital signatures and how information has to comply.
Control your domain border
ZoneGuard is designed around separation of duties and a policy enforcement function. A digitally signed information policy is needed to change the information policy inside ZoneGuard. The keys for signing the information policy can be owned by an IT security department or another appointed policy approver. Changes cannot be done without these keys. The policy approver thus effectively takes superior control over information validation, ruling out the operational IT team and the users.
ZoneGuard also provides log control and audit trails. It can be configured to log any information entering its validation core, which is vital when you need evidence of compliance to policies and regulations.
File Transfer Guard
In ICS/SCADA systems it is necessary to send reports and allow incoming firmware updates while preserving the system integrity. Defence organisations need to keep classified information within the security domain but still have to be able to release information to another system or security domain. File Transfer Guard handles both use cases, protecting integrity and confidentiality by allowlisting information exchange and providing explicit control over files sent from or to a system.
A versatile and powerful tool providing policy-based e-mail exchange between network boundaries. Only “permitted by you” validation allows messages including attachments to be sent through an information centric content inspection, where the inherent allowlisting works to allow permitted information to be transferred and denies all other information.
Market and efficiency requirements mean ICS systems, business networks, legacy systems get more and more connected to each other, the Internet or other environments with little knowledge of current vulnerabilities. Integration Guard protects integrations and fulfils organisational IT policy 24/7, making digitalisation possible without reducing security.
Enables use of several different kinds of services in a single security domain crossing. The ZoneGuard Platform includes a free of charge license for Advenica Generic Proxy Services. A Software Development Kit (SDK) supports custom-made applications and communication protocols. This means organisations benefit from comprehensive security yet can take control of the applications and use their own preferred development team or implement communication protocols not yet available as a Generic Proxy Service.
ZoneGuard is a gateway for controlled information exchange. With the information in focus, ZoneGuard ensures that an organisation’s information policy is enforced on every transfer that is made, creating an audit trail as evidence.
ZoneGuard is a gateway for controlled information exchange between different networks and security domains. With the information in focus, ZoneGuard ensures that an organisation’s information policy is enforced on every transfer that is made, creating an audit trail as evidence.
Many existing systems and solutions are vulnerable to protocol or implementation errors. Potential vulnerabilities range from a flaw in a network protocol to applications not thoroughly tested for buffer overflow attacks. ZoneGuard's ability to safeguard which information is transferred to and from a system provides unparalleled control and accountability of the entire critical information flow.
Information Centric Design
ZoneGuard focuses on information exhange while the network protocol is simply a way of sending information on the network. The solution empowers organisations who need to enable secure, precise information exchange between varying security domains. ZoneGuard’s Information Centric design and policy enforcement promotes organisational growth, reduces costs and enforces internal and industry compliance.
Precise Information Exchange
Validation and filtering of the information per an organisation’s information policy, safeguards that only information permitted by you is transferred. The filters can be scripted to provide a tailored validation of the information flow.
Protocol Break and Full Message Inspection
ZoneGuard provides Protocol Break and Full Message Inspection to reduce the attack vectors against the receiving system. By disconnecting the network protocol used from the information itself, both network layer attacks and application layer attacks can be mitigated.
SecuriCDS ZoneGuard Platform offers futureproof secure two-way information exchange that safe-guards your assets at all times.
Advenica Virtual ZoneGuard
ZoneGuard is also available as a pure SW product for virtual environments to enable secure, precise information exchange between virtual security domains.
Some security challenges where ZoneGuard is a good solution
Secure remote access
Many organisations depend on remote access through RDP, for example, to allow suppliers to perform maintenance, or so that operating personnel can monitor and control a system. Secure remote access solves many of the security risks that are otherwise associated with such solutions. Read more about secure remote access.
Secure IT/OT integration
Digitalisation means that IT and OT systems are connected. This integration presents security challenges and requires special solutions. Read more about secure IT/OT integration.
Secure transfer of SCADA information
To transmit critical information, e.g. from a SCADA system to an administrative office network means potential security risks. But there are solutions that take care of security problems and at the same time enables an exchange of information. Read more about secure transfer of SCADA information.