Solutions

By need

• Move files between separated networks

  Systems that produce files every day use Bardin Gate ARP; people who send a file now and then use Bardin Gate ART.

• Exchange email without a connection

  Bardin Gate AMG carries mail between the mail servers of two networks, unchanged, through a durable queue.

• Keep backups out of reach

  Bardin Gate ABV copies backups to a recovery repository that no network path leads to.

• Keep databases in step

  Bardin Gate ADS carries selected changes, in the direction you allow.

• Use two networks from one computer

  Bardin Gate Light connects it to one of them at a time, physically.

• Show that the separation holds

  Every Bardin Gate appliance keeps a tamper-evident record of what crossed, under which policy, and sends it to your SIEM. See the platform.

• One sign-in for every application

  Dejh brings authentication and access policy into one place.

• Team communication that stays inside

  Bita is a messenger installed on one server that works with no Internet at all.

• Run an operator's business

  ZhiOne handles customers, sales, orders, billing and payments on TM Forum's architecture.

Exchanges and digital assets

An exchange holds its customers' assets, and the keys that move them are what every attacker is after. The safest place for those keys is a network that nothing can reach. Withdrawals, reports and backups still have to cross into it and out of it, each under a written rule and on the record.

• Keys on a network with no way in

  Cold wallets and signing systems sit on a network of their own. Bardin Gate keeps it apart: nothing reaches it over a network, and only what policy allows crosses.

• Withdrawals signed under approval

  An unsigned withdrawal file reaches the signing network through Bardin Gate ART, with the approvals of several people that policy demands, and nobody approves their own file. The signed file comes back the same way.

• Recurring flows with no person in the path

  Balance reports, ledger exports and reconciliation files move between the trading, accounting and signing networks through Bardin Gate ARP, each route under its own policy.

• Wallet and ledger backups out of reach

  Bardin Gate ABV keeps a recovery copy of wallet backups and databases that ransomware cannot reach over the network.

• One desk, two networks

  An operator works on the signing network and the office network from one computer with Bardin Gate Light, physically connected to one of them at a time.

• Staff access and team talk kept inside

  Dejh gives every employee one sign-in with multi-factor authentication and access by time and network; Bita keeps the operations team's conversations on the exchange's own server.

• Evidence for auditors and regulators

  Every crossing is recorded with who asked, who approved and under which policy, and sent to your SIEM.

By sector

• Government

  Networks that hold classified or sensitive information, and the paperwork, mail and updates that must still reach them.

• Energy and utilities

  Plant and control networks that send readings out and take updates in, without a path back.

• Telecommunications

  Operations networks kept apart from office and customer-facing systems, and the operator's business run on ZhiOne.

• Banking and finance

  Core systems separated from everyday networks, with reports and files crossing under audit.

• Industry

  Production networks that exchange orders, recipes and quality data with the enterprise.

• Defence and critical infrastructure

  Sites where a network link is not acceptable but information still has to move.