Data Diode vs-diode: High-Speed One-Way Data Transfer into SECRET Classified Networks

Do you want to transfer data into networks classified as SECRET – so-called red networks – from black networks, which are not classified or classified at a lower level, e.g., e-mail, information from databases, video data, current patterns for anti-virus systems or software updates? genua has developed the Data Diode vs-diode for just this task – data transfer across black-red interfaces – with approval up to the SECRET classification level.

Request advice

Top Highlights

Approval up to the German SECRET, SECRET UE/EU SECRET, and NATO SECRET classification levels

Security by design for maximum reliability

Easy operation and configuration

Your Benefits at a Glance

Supported protocols: Lumberjack v1, v2 and HTTP(S)-PUT for Logstash/ELK Stack, TCP, UDP, SMTP(S), FTP(S), syslog
Approved up to the classification levels German SECRET, SECRET UE/EU SECRET, and NATO SECRET
Performance up to 5 Gbit/s

Complete package of hardware and adapters (protocol converters); no hidden costs
Easy operation and configuration
Consulting, customer support, and service directly from the manufacturer

High Performance & Reliability

One-Way Data Transfer to Red Networks

The Data Diode vs-diode only allows data transfer in one direction – from black to red. The flow of information in the opposite direction is completely blocked. This ensures that no classified or critical data can flow from the red network to the black network at this interface. An important feature of the Data Diode vs-diode is its high performance and reliability in one-way data transfer: throughput of up to 5 Gbit/s. The strong performance is based on the intelligent technology of our data diodes, which is significanctly different than that used in other solutions on the market.

Approval up to the SECRET Classification Level

The compact design is the key feature of the vs-diode and has also convinced the German Federal Office for Information Security (BSI), which has granted approval up to the German SECRET, SECRET UE/EU SECRET, and NATO SECRET classification levels. Thus, the high level of security provided by our solution has been independently verified by a government organization.

Strict One-Way Data Transfer

Performance: Fast and Reliable Data Transfer

One firewall system is connected to the black network and receives the data being transferred from the sender. The received data can optionally be scanned here for viruses and malicious software to protect the red network. The data is then sent via the filter system to the second firewall, which is connected to the red network. This intermediate filter system allows communication in the one direction but blocks all data transfer in the other – with a single exception: a final status message, indicating whether all data has been properly received, is allowed to pass from the second to the first firewall system. This minimal feedback ensures quick and reliable transmission e.g. for the FTP, FTPS, SMTP, and TCP protocols.

Depiction of the data transfer from the black network into the red network through the vs-diode — Data transfer from the black network into the red network through the vs-diode

Low Complexity

Security by Design for Maximum Security

How does this minimal feedback channel affect the security level? Other diode solutions intentionally avoid using a feedback channel – and thus also forego the advantages in performance and reliably that it offers – in order to physically exclude any return flow of data.

With the vs-diode, we solved this challenge using modern technology: programming of the central diode function is kept to a minimum – only a few hundred lines of program code – and runs on a microkernel operating system that has also been reduced to an absolute minimum. Due to the low complexity, the diode process is easy to analyze; the entire code can be examined or even formally verified to exclude the possibility of errors in this decisive component.

Configuring Important Applications for High Security

With the one way data diode vs-diode, you can securely configure high-speed and reliable data transfers from black to red networks. Examples include:

connecting to e-mail systems
mirroring databases for GIS and FüInfoSys
streaming video and radar data
transferring data for anti-virus and software updates

Support & Service

User-Friendly Operation and Customer Service

Due to its minimalist design, the vs-diode is easy to operate. Even in the event of a configuration error, no security vulnerabilities can be exploited – the static diode function cannot be defeated. We will be happy to assist you with the installation and support – service is provided directly from the manufacturer genua.