Product Overview

The Security Isolation and Information Unidirectional Import System (GTECH-GAP 2000), commonly known as a unidirectional optical gate, is a new generation of network isolation and unidirectional data transmission product independently developed and produced by the company using advanced unidirectional optical channel transmission technology and GAP hardware isolation technology. The product is deployed between the internal network and the external network, collecting data from the external network and transmitting it to the internal network through a physical unidirectional optical channel. There is no reverse optical signal transmission physical channel from the internal network to the external network, which not only meets the application requirements of data transmission from low security networks to high security networks, but also ensures that confidential data from the internal network cannot be leaked to the external network in terms of physical hardware.

Features

Reliable system architecture:It consists of three parts: an internal machine, an external machine, and a proprietary isolation system (proprietary hardware). The internal and external devices have independent storage and computing units respectively; Physical unidirectional isolation components are used to connect the internal and external devices, providing comprehensive security protection for the system.

Reliable data shuttle capability:The data shuttle function provides identity authentication and access control for trusted management hosts. Identity authentication ensures that administrators and users have secure identities, and this mechanism is implemented through CA certificates. Trusted management requires ensuring that only authorized computers can manage the system and reduce usage risks.

Traffic management control function:In order to ensure that the services established by the device (such as file services and email relay services) maintain the appropriate bandwidth and prevent abnormal network interface traffic, the system provides a traffic monitoring and control module, which can comprehensively control the network traffic entering the gateway.

Rich data shuttle types:Supports multiple data shuttle types such as file one-way transmission, database one-way transmission, message one-way transmission, and email one-way relay, and supports content detection and malicious code detection to ensure data security.

Data transmission stability:Based on the UDP protocol Streaming Data Forward Error Correction (SDFEC) engine, a high-performance fault-tolerant algorithm for UDP data with independent intellectual property rights has been implemented. This leading technology not only completely solves the serious delay caused by the need for reverse channel transmission of ARQ data and transmission of redundant data in traditional reliable transmission protocols such as TCP, but also perfectly solves the problem of reliable data transmission in one-way transmission protocols such as UDP.

典型部署

Deploying one-way optical gateways in the non confidential areas of the e-government external network and the government internal network has achieved network isolation, enabling one-way transmission of data from the government external network to the non confidential areas of the government internal network in terms of business. The product strictly adopts isolation and switching technology based on unidirectional optical fiber technology to meet policy compliance requirements. At the same time, the product has a built-in file and database synchronization module, which does not require the installation of any plugins on both sides of the server to actively capture data from the source and push data to the destination, thereby ensuring the security of the business system.