Unidirectional Security Gateways

Unidirectional Security Gateways

Waterfall Unidirectional Security Gateways enable safe IT/OT integration, disciplined control, and real-time industrial network monitoring. The gateways replace firewalls in industrial network environments, providing absolute protection to control systems and OT networks from attacks originating on external networks. The Gateways enable vendor monitoring, industrial cloud services, and visibility into operations for modern enterprises and customers by replicating servers, emulating industrial devices and translating industrial data to cloud formats. As a result, Unidirectional Gateway technology represents a plug-and-play replacement for firewalls in industrial environments, without the vulnerabilities and maintenance issues that always accompany firewall deployments.

Unidirectional Gateways provide hardware-enforced network perimeter protection.

The solution contains both hardware and software components. The hardware components include a TX Module, containing a fiber-optic transmitter/ laser, and an RX Module, containing an optical receiver, but no laser.

The hardware components:

  • Transmitter;
  • Fiber optic cable;
  • Receiver (or core data diode technology).

Along with the software components – industrial application software connectors – ensure one-way transmission and replication of server information from an OT network to an external network, but prevent the propagation of any virus, DOS attack, human error or any cyber attack back into the protected network.


100% protection from remote cyber threats


Seamless IT/OT network integration without introducing Internet-based cyber threats


An evolutionary alternative to firewalls in a strong preventative cybersecurity program for Industrial Control Systems


Ensure operational continuity by preventing plant shut downs and potential damage to plant assets, the environment and even human lives


A Unidirectional Gateway is a combination of hardware and software preventing cyber threats from propagating back into the protected network