Waterfall Security’s patented BlackBox leverages Waterfall’s-market-leading, hardware-enforced unidirectional technology to securely gather, store, and transmit transaction, logs and other data into a storage repository located securely “behind” a Unidirectional Gateway. All data sent to the storage repository is stored physically outside the monitored network, inaccessible and untouchable.    Inside Waterfall’s BlackBox cyber security incident response solution there is a high-speed, high-capacity logging and analysis system, which can be used to detect attackers’ tracks, attempted changes, manipulation of records and abnormal logging and recording conditions. In time of need, data can be retrieved and inspected securely by physically accessing the BlackBox appliance via the Secure Data Access port. The Waterfall BlackBox faceplate hardware physically blocks the Secure Data Access port when the port is not in use.

Features & Benefits: SECURE STORAGE

• Hardware-enforced unidirectional protection of logged data

• Tamper-proof storage for logs, transactions & configuration files

• Reliable forensics, incident response & recovery, and audits

• Encryption and authentication of logged information

• No possibility of leaking information between sites

SECURE LOG DATA RETRIEVAL

• Logs accessed via dedicated out-of-band port

• Powerful graphical data management and retrieval applications

• Full or partial retrieval with search and filter capabilities

DATA MANAGEMENT

• All logs unified and stored in internal relational database

• All recorded data time-stamped and encrypted

• Cyclic & never-overwrite data management options

• Version management for configuration and other files

• Real-time statistics display

• Optional compression

WIDE VARIETY OF DATA SOURCES

• Syslog, SNMP traps, Windows logs

• FTP, SFTP, CIFS/SMB, drag & drop and many other file sources

• System Backups

• SQL Server, Oracle and other relational databases

• Network traffic and NetFlow statistics

Many industrial control systems require regular updates of anti-virus signatures, batch production orders and other items. Every path for such updates through a firewall though, introduces attack opportunities, since all firewalls are software and all software can be hacked or misconfigured. The Waterfall FLIP is a type of Unidirectional Gateway whose orientation can be reversed, enabling disciplined scheduled updates without the vulnerabilities firewalls always introduce. The FLIP is a combination of hardware and software. The hardware includes a TX Module, containing a fiberoptic transmitter/laser, and an RX Module, containing an optical receiver, but no laser. A short fiber-optic cable connects the two hardware Modules. The FLIP is therefore able to transmit information in only one direction at a time. While the FLIP hardware transmits information from a source network to a destination network, that hardware is physically incapable of transmitting any information back from the destination network into the source network. Hardware orientation reversals are triggered by dedicated hardware on a schedule, or by manual activation from the front panel of the FLIP Module. The FLIP software replicates servers and emulates devices. Clients and users on each network access the replicas as if they were the originals, making the FLIP a plug-and-play replacement for software firewalls. Unlike firewalls, the FLIP is not a router and is incapable of forwarding network traffic or network attacks.

The Industrial Internet of Things (IIoT) promises revolutionary improvements in the efficiencies of industrial operations, manufacturing platforms, transportation systems, and utilities. However, these benefits require the massive deployment of connected devices that gather and communicate data, thereby increasing cyber-security attack surfaces dramatically, and opening paths for attackers to enter industrial networks The answer for all of your IIoT cybersecurity needs is the Unidirectional CloudConnect. The CloudConnect acts as an Industrial IoT gateway, collecting data from industrial sources such as historians, industrial control systems, OPC serves and industrial devices then coverting that data into a unified, cloud-friendly format, such as GE WebSockets, Azure IoT and SOAP Web Services. The CloudConnect then transmits the unified data securely out of the site and publishes into the industrial cloud. Unidirectional Gateway technology embedded in the CloudConnect ensures seamless connectivity with both industrial and cloud systems, and provides absolute protection from cloud-based threats. Waterfall’s Unidirectional CloudConnect offers the highest level of IIoT cyber security, enabling data flow from industrial networks, directly into Internet-based and other cloud solutions, while preventing remote attacks from penetrating critical industrial networks.

MAIN FEATURES INDUSTRIAL CONNECTIVITY
Enables IT and outsourced SIEM, SOC, NOC & security monitoring solutions SAFE OT/CLOUD INTEGRATION
Physically prevents Cloud/Internetbased attacks from infecting the protected network SEAMLESS INTEROPERABILITY
Supports 100+ industrial protocols & applications; from legacy systems to cloud-based platforms INDUSTRIAL CLOUD
Enables big-data, cross-site, and crossapplication analysis and correlations

The Unidirectional Cloud-Connect is a secure cloud gateway containing unidirectional technology consisting of both hardware and software components. The gateway hardware can transmit information from a control system network to an external network, but is physically incapable of propagating any cyber attack at all back into the protected network.

Waterfall Unidirectional Security Gateways enable safe IT/OT integration. The gateways replace firewalls in industrial network environments, providing absolute protection to control systems and operations networks from attacks originating on external networks. The Gateways enable vendor monitoring, industrial cloud services, and visibility into operations for modern enterprises and customers. Unidirectional Gateways replicate servers, emulate industrial devices and translate industrial data to cloud formats. As a result, Unidirectional Gateway technology represents a plug-and-play replacement for firewalls, without the vulnerabilities and maintenance issues that always accompany firewall deployments. Unidirectional Gateways contain both hardware and software components. The hardware components include a TX Module, containing a fiber-optic transmitter/ laser, and an RX Module, containing an optical receiver, but no laser. The hardware components – transmitter, fiber optic cable and receiver, (or core data diode technology) – along with the software components – application software connectors – ensure one-way transmission and replication of server information from an industrial control network to an external network, but prevent the propagation of any virus, DOS attack, human error or any cyber attack at all back into the protected network. Features & benefits

• Hardware is modular, flexible and user-serviceable

• 1Gbps standard throughput, multi-Gbps with several TX/RX pairs

• Optional HA configuration (high-availability)

• Front panel cabinet connections for clear system visibility

• Wide variety of COTS software connectors, no customization fees

• Flexible connector hosting supporting all major OS