VCL Products > Cybersecurity Suite > VCL-2726, Data Diode
VCL-2726, Data Diode
In today's digital business landscape, the risk of cyber-attacks has risen sharply. To protect organizational data and infrastructure, various network security technologies have emerged. Among these modern solutions, the data diode stands out as one of the most effective. Valiant's Data Diode (VCL Data Diode) is a hardware device for unidirectional network communication, enabling secure, one-way data transfer between isolated networks. It ensures data flows in one direction only, providing strong protection against data breaches, data thefts and cyber-attacks.
VCL Data Diode comprises two elements.
- VCL-2726, Network Side (ORANGE) Element.
- VCL-2726, Secure Side (GREEN) Element.
The Network Side (ORANGE) Element shall connect to the Secure Side (GREEN) Element through a single, one-way, transmit only optical fiber which shall only allow the ONE-WAY flow of data from the Network Side (ORANGE) Element to the Secure Side (GREEN) Element, thereby creating a ONE-WAY data path with Low-latency data transfer (<1 ms).
Such a design ensures physical and electrical separation between source and destination networks. This architecture eliminates external entry points, blocking intruders and malicious elements from accessing the data secured by the VCL Data Diode. By securing data flow with the VCL Data Diode, the protected data is secure from malware transmission, unauthorized access, and harmful changes to an organization's data.
Valiant's Data Diode finds it uses in applications and networks requiring highly secured protection of sensitive information, such as military, financial institutions, industrial design centres, utilities and critical infrastructure systems.
Valiant's Data Diode allows critical infrastructure organizations to transmit and store real-time data securely. This technology protects valuable information and networks from data theft, tampering, destruction, and human error, preventing significant potential losses.
The VCL Data Diode allows the data to flow in only one direction. This ensures one-way information flow from secure areas to less secure systems (or vice versa), without reverse access. VCL data diodes have two sections, that are physically separated: the "send" or the ORANGE section, which can only send data, and the "receive" or the GREEN section, can only receive data. This configuration guarantees one-way data flow and prevents reverse transmission.
The VCL Data Diode delivers a 1 Gbps data transfer rate for one-way communication. VCL-Data Diode is certified to EAL4+
Benefits of Using Data Diodes – Summary:
- Enhanced Security: By physically blocking data from flowing back into the source network, the VCL Data Diode provides a high level of protection against cyber threats.
- Regulatory Compliance: Many industries have strict regulations regarding data security and privacy. The VCL Data Diode helps organizations comply with these regulations by ensuring secure data transmission.
- Reliability: VCL Data Diodes are not prone to failure compared to software-based data security solutions, providing a reliable means of securing critical data.
- Prevention of Data Leakage: The VCL Data Diode prevent sensitive information from being exfiltrated from secure networks, thus protecting intellectual property and confidential data.
Hardware-Enforced protection – A summary of key features and functions of data diodes:
- One-Way Data Transfer: The VCL Data Diode physically enforces unidirectional data flow, meaning data can only be transmitted from the source network to the destination network, but not the other way around. This ensures that any potential threats or malware cannot travel back from the destination network to the source network.
- High Security: By preventing bidirectional communication, data diodes eliminate the risk of external attacks on the source network. This makes them ideal for protecting critical systems and sensitive data.
- Hardware-Based Solution: Unlike software-based firewalls and other security measures, the VCL Data Diode may be used to enforce hardware-based data flow restrictions. This makes the network more robust and protected against software vulnerabilities and cyber threats.
- Applications- The VCL Data Diodes may be used to protect:
- Industrial Control Systems (ICS): Used to protect control systems in power plants, water treatment facilities, and other critical infrastructure.
- Military and Defense: To store and protect sensitive military records and data.
- Financial Services: Used to securely store banking data, details of financial transactions and financial records.
- Health Care: To ensure secure storage of patient data and medical records.
- Performance: The VCL Data Diodes are designed to handle high data throughput and can support various types of data, including video, audio, and large files. They are typically optimized for low latency and high reliability.
Ensuring One-Way Data Flow with a VCL Data Diode
- The VCL Data Diode ensures one-way data flow between the NETWORK (ORANGE) ELEMENT and SECURE (GREEN) ELEMENT using protocols that support one-way (unidirectional) traffic.
- Hardware-based protocol break with non-routable connection
Proxy Server:
- Separate hardware for Proxy Server supporting TCP/IP, UDP, SFTP, SMTP, and Syslog protocols.
- Real-time data transfer monitoring
- 10-day audit and event log storage
- Hardware-enforced one-way data transfer with integrated software tools
- Selective enabling/disabling of device services, functionalities, and IP/MAC address configuration.
- NTP time synchronization support
- Centralized remote management (Web GUI & CLI)
Technical Specifications:
Network Side (ORANGE) Element
| Minimum Number of Network Side Interfaces | 1 x 10/100/1000BaseT Electrical |
| Link between the Network Side (ORANGE) Unit and the Secure Side (GREEN) Unit | 1 x 10Base-FX / 100Base-FX / 1000Base-X (Transmit only option) SFP Based Optical port |
Secure Side (GREEN) Element
| Minimum Number of Secure Side Interfaces | 1 x 10/100/1000BaseT Electrical |
| Link between the Network Side (ORANGE) Unit and the Secure Side (GREEN) Unit | 1 x 10Base-FX/ 100Base-FX / 1000Base-X (Receive Only option) SFP Based Optical port |
Power Supply:
- Dual Redundant 1+1 48V DC / 220V AC
- Operating range +/- 25%
- Reverse Polarity Protection
Power Consumption:
- < 80W at ambient (steady state 24°C)
MTBF:
| MTBF in Year | 11.41 |
| MTBF in Hours | 100,000 |
Applications:
Ransomware-Proof Backup:
The VCL Data Diode can be used with the VCL-9090 NAS (Network Attached Storage) to back up data to a unidirectionally-protected repository that ransomware cannot access, encrypt or otherwise tamper with.
Secure storage:
The VCL Data Diode may be used to provide hardware-enforced unidirectional protection of logged data with encryption and authentication of logged information.
Secure data retrieval:
The VCL Data Diode can only be accessed physically via a dedicated out-of-band port.
Application Diagram:
How does the VCL- Data Diode work – An Overview:
VCL-9090, NAS Data Storage Server with Cybersecurity VCL-9000-EMP, EMP Protected Data Storage VCL-2143, Network MouseTrαp VCL-2702: Network Isolation (Kill) Equipment VCL-5052/5054 Network Isolation Equipment VCL-MX-5010-R-ES: Router with Enhanced Security VCL-SafeComm-E-GE, 1+1 Automatic Gigabit Ethernet Failover / AB Fallback Equipment VCL-MX-5050-R-ES: Router with Enhanced Security VCL-2142, Enigmatron Xcöde VCL-2243: RTU Firewall IEC -104, IEC 61850 MMS, MODBUS VCL-2457: Cyber-Smart Rack Monitoring and Control Unit