Product Overview

The industrial safety isolation gateway system is an isolation platform based on the "2+1" structure, customized according to the industrial environment, using a security trimmed and reinforced security operating system, with unique control logic and dedicated communication protocols to ensure secure isolation of industrial protocols and real-time secure exchange of industrial data between networks.

Features

Deep analysis of industrial control protocol:Supports OPC Modbus, S7, DNP3, IEC104 and other protocols, and can also support custom protocols.

Support OPC protocol mapping:Dynamically manage connection ports. Support OPC protocol parsing for read interception, write interception, and read-write interception.

Supports Modbus protocol mapping:Dynamically manage connection ports for read, write, and read-write interception. Supports element level control of Modbus protocol, supports specifying read, write, and read-write interception control for protocol function codes, slave addresses, register addresses, register values, and read register lengths.

Security isolation between two security domains:Establish a secure data transmission channel based on elements such as objects, applications, time, and channel direction, and limit the number of connections.

Support cross network SAT mapping:Shielding internal network structure, supporting pure unidirectional transmission of application data, supporting industrial protocol privatization conversion, implementing encryption and security checks for industrial data transmission.

Synchronization support:Support file exchange synchronization and database exchange synchronization.

Provide video mapping proxy or one-way transmission:Support mainstream video vendors' video protocols and support secondary protocol development.

Content review:Content review can be conducted on data within the secure channel, including keywords, file features, antivirus, etc.

High reliability:Redundant power supply, supports dual machine hot standby/load balancing, and supports port aggregation.

Built in professional antivirus engine:Professional shell removal engine and decompression engine, combined with feature code scanning, heuristic scanning, and behavior judgment technology to quickly detect various known and unknown virus threats. Support scanning scripts in various formats such as JS, VBS, SH, Python, PHP, BAT, etc., to quickly and accurately detect Shellcode threats. The macro virus engine can remove malicious macro code from Office files and correctly repair documents.

典型部署

• Deploying between the production network and office network management, as well as between the production control layer and the production management layer, various forms of devices such as bidirectional, application data unidirectional, and unidirectional import can be used depending on the exchange method and data form.