Our technologic partner: GEMINI

INTRODUCTION

Critical infrastructure and Industrial environments have safety & operation critical networks disconnected from other networks. With the 4th Industrial Revolution and the Digital Transformation, these critical networks cannot stay isolated any longer and need to exchange data with the plant’s IT network, the corporate network and even further with the Cloud. To maintain an acceptable level of cyber security, the OT network needs to stay invisible to outside networks. The OT network needs to to deny all and allow only by exception a very limited number of network traffic strictly controlled. To make the data accessible to outside networks while maintaining the necessary level of cyber security, GEMINI is the hardware enforced Cerberus guarding the gate of the OT network.

The solution uses FPGA to control 100% which traffic is allowed in and out of the OT Layer 3.5 DMZ. Only strictly and explicitly allowed traffic can go through GEMINI through two one-way data channels. Optionally, additional software proxies can offer protocol break for Industrial protocols adding an extra layer of security.