PSTdiode

Two appliances, one appliance on each security domain, communicating exclusively by an optical fibre cable.

Separate administration network (optional) for each appliance.

Ready to use appliances. The system is configured remotely once PKI and network parameters are set on both appliances through a local interface.

The system is monitored remotely, with PSTadm, from the destination network. Administration of the source appliance is only needed for configuration changes and troubleshooting.

Four remote administration roles are supported and enforced through PKI:
• Root Administrator
• Security Administrator
• Services Administrator
• Monitoring Administrator

The system sends operation and security SYSLOG events independently.

With PSTaud, all transfers can be logged to a database or saved as XML files. The service PSTaud is installed on a general purpose computer on the destination domain.

The system allows configuring time synchronisation via NTP servers on both domains.

The transfer rate provided by the PSTdiode ATKDDL device is 1Gbps.

Dedicated and independent management interface that allows separating all management traffic from data traffic on both appliances.

Security events can be handled separately.

Only authorized administrators, using digital certificates, can administer the system. Communications between the software components and the appliances are protected by TLS with remote end authentication. All accesses and operations performed by system administrators are logged.

Only authorized administrators, using digital certificates, can administer the system. Communications between the software components and the appliances are protected by TLS with remote end authentication. All accesses and operations performed by system administrators are logged.

All software (including the operating system) runs from a read-only partition, the integrity of which can be verified at any time.