ZoneGuard

Validate information exchange

ZoneGuard reduces potential attack vectors by validating information exchange between security domains. It can be the trusted point-of-contact when you need to share information with another organisation.

ZoneGuard PE250 offers futureproof secure two-way information exchange that safeguards your assets.

Secure information exchange

ZoneGuard is a gateway for controlled information exchange between security domains. ZoneGuard ensures that your organisation’s information policy is enforced on every transfer, leaving an audit trail as evidence.

Appliances

The PE250 ZoneGuard is a pre-configured 1U 19” device optimized for the ZoneGuard system.

The ZoneGuard system can also be hosted as a virtual machine for ease of integration in your existing data center.

Full application support & protocol flexibility

The ZoneGuard PE250 has services such as http, file transfer and email transfer. If you have other needs we can offer you customised solutions and bespoke filters.

Key features of the ZoneGuard

Validation

ZoneGuard validates that your network protocol follows official standards. ZoneGuard can also be configured for xml validation based on your XML Schema Definition (XSD).

HTTPS gateway

HTTPS is the most common protocol for transferring data over the ZoneGuard. Built in support for TLS certificates ensures that only authorized clients can reach the ZoneGuard.

Filter

ZoneGuard filters information based on properties such as the HTTP method (POST, GET, PUT, DELETE), checks that values are within range, verify signatures, etc. It is easy to allow a specific URL while blocking others.

This is a neat way to manage sensitive information that I personally think more businesses should consider.

OT security expert

How our customers use ZoneGuard

Secure your information exchange with confidence

10Gbit SFP+ interfaces

1U Rack mounted in 19”

2-way Information exchange

100% Message inspection

Key features

Separation technology to achieve secure information exchange between two separate systems
Validates the information so content and structure is in accordance with a defined information policy
Sets focus on the information handling, not the transport protocol used
Full message inspection
Safeguards information transfer
Supports customer defined policies

Technical brief

Role-based system with separation of duties
Enables NTP import for sensitive network
Enables allowlisting down to information level
Full audit trail capabilities
Protocol break and full message inspection to reduce attack surface

Cross Domain Solutions

Segmenting your network into separate security domains is a vital strategy to lower the risk of an attack causing a major outage or a leak of sensitive data.

With ZoneGuard you can disconnect your security domains while maintaining a two-way communication channel for selected information.