We blocked USB drives; now every file is a saga
A request, a letter, a wait, and in the end someone who finds a way around it.
Keep the network apart, not the work
Bardin Gate moves data between your internal and outside networks without the two being connected, not even for a moment; and you always know who brought what.
Sound familiar?
Security or speed, pick one
Each time you connect the network you buy risk; each time you keep it apart, work moves by USB drive and by hand.
Nobody knows exactly which files came and went
Until the day an auditor or an incident asks.
One USB drive is enough
Many well-known attacks on separated networks, Stuxnet among them, came in this way.
Blocked USB drives? Now make moving files simple too
Blocking USB drives is the right step, but the organisation's work does not stop. With Bardin Gate, users send their file from their own desk:
From the desk
The user sends the file from their own computer.
Scanned
The file is checked by antivirus and the appliance's inspection engines.
Approved
Where needed, a person approves it.
Delivered
The file reaches its destination.
You always know who brought each file, and when
For every file that comes in or goes out, the record holds:
Who
Who sent it, and from which computer.
When
The time of every transfer.
What it passed
The checks it went through, and who approved it.
Where it went
The destination it was delivered to.
File tracing
Hand a file you found on your network to the console, and it shows where it came from, when, and who brought it. Every transfer also carries a signed certificate that proves it.
What Bardin Gate does
One appliance between two networks, connected to only one of them at a time:
It takes
It connects to one side and receives the data.
It holds
The data stays in the appliance and is controlled by your rules.
It delivers
It connects to the other side and delivers the data.
The two networks are never connected at the same time; a real air gap is kept, and the work does not stop.
Which category is it?
Bardin Gate is a Cross-Domain Solution (CDS), a way to exchange data under control between networks of different security levels; the difference is that it does this across a physical air gap.
| Firewall | Data Diode / USG | Typical CDS | Bardin Gate | |
|---|---|---|---|---|
| Are the two networks connected? | Always | Always, one way | Always, through the device | Never at the same time |
| Direction of exchange | Both ways | One way only | Usually both ways | Your choice, for each job |
| Control and record of each transfer | Limited | Limited | Yes | Yes |
What it moves
Each job has its own product:
Files
From the Internet to the internal network and back, with no USB drive, an antivirus scan and approval where needed. Bardin Gate ART
Files between systems
Automatic, with no user involved. Bardin Gate ARP
Databases
An up-to-date copy of the data on the other network. Bardin Gate ADS
Email
Between the separated network and the outside, with your current mail servers. Bardin Gate AMG
Backups
Verified backup data, in a separated recovery store. Bardin Gate ABV
Web systems
The other network's workflow inbox, reports and forms, from the user's own desk.
Intelligence on the appliance itself
Bardin Gate does not only apply rules; it understands what crosses. All of this runs on the appliance itself, offline. See the platform.
Content understanding
Each file is judged by what it really contains, not by its name: its true type, hidden macros and scripts, and sensitive data.
AI malware detection
An AI model on the appliance stops what fixed rules miss. It can hold a file back, but can never let one through.
Anomaly detection
The appliance learns the normal pattern of each flow and raises an alert when a transfer departs from it.
Why managers trust it
Control stays with you
No hidden vendor account or master password, and no dependence on the vendor or the Internet to work.
A clear answer for the auditor
Every transfer leaves a record.
Goodbye to USB drives
Transfers are automatic and under control.
Products
Bardin Gate ARP
Bardin Gate ARP moves your systems' files between two separated networks automatically, under a policy you set for each route, without ever joining the networks.
Bardin Gate ART
Bardin Gate ART carries one file at a time from a person's computer to a fixed destination on another network, identified, inspected and approved.
Bardin Gate AMG
Bardin Gate AMG relays email from one network's mail server to the other's, unchanged and through a durable queue, without ever joining the networks.
Bardin Gate ABV
Bardin Gate ABV moves approved backup data to an isolated recovery repository without ever joining the production and recovery networks.
Bardin Gate ADS
Bardin Gate ADS carries selected database changes between separated environments, in a direction and scope you set, without a permanent connection between them.
Bardin Gate Light
Bardin Gate Light is a small physical switch that connects one computer to a safe or an unsafe network, one at a time, with no packet processing in between.
See how it works in your organisation
Tell us about your environment and what you need. One of our specialists will answer you.