Technology & Products

Unidirectional Security Gateways are a combination of hardware and software, offering absolute protection with complete network visibility.
The hardware sends information in only one direction while the software makes copies of servers & devices from the OT network to the enterprise network.
No attack, no matter how sophisticated, can propagate back into the OT network through the gateway.

How it works

Group 1117

Connect

An industrial network safely to an IT network

Group 1117-1

Protect

The industrial network with hardware enforced technology

Group 1117-2

Replicate

Real-time operational servers to the enterprise IT network

The software connectors duplicate servers and simulate devices, allowing enterprise users and applications to maintain bidirectional access to OT data from the replicated servers. Waterfall supports a wide range of SCADA systems and industrial platforms, including the following:
SCADA Systems
ABB - 800xA (SymphonyPlus)
AspenTech - IP21
AVEVA - DataHub
AVEVA - eDNA
AVEVA - Enterprise SCADA (Oasys)
AVEVA - PI – Asset Framework
AVEVA - PI – History Backfill
AVEVA - PI Points
AVEVA - Wonderware
Bently Nevada - System1
Curtis Wright - Scientech R*Time
Emerson - AMS Machine Works / Device Manager
Emerson - EDS
Emerson - PlantWeb Insight
Emerson - PlantWeb Optics
GE - AEMS Reliance
GE - GridOS
GE - GSM
GE - iFix
GE - OSM
GE - Proficy Historian (iHistorian)
Hitachi-ABB - ADMS
Honeywell - AMS Dynamo
Honeywell - Experion
Honeywell - Forge
Honeywell - PHD
Leidos - Hold Baggage Screening (HBS) system
Rockwell - FactoryTalk
Schneider Electric - ADMS ESCADA
Schneider Electric - EcoStruxure
Schneider Electric - Invensys AIM
Schneider Electric - SCADA Expert ClearSCADA
Siemens - CFE
Siemens - OT Companion (SICAM GridEdge)
Siemens - S7
Siemens - WinTS
Siemens Energy - Gamesa
Siemens Energy - T2000
Siemens Energy - T3000
Yokogawa - CI Server
Yokogawa - ExaOPC
Yokogawa - Exaquantum
Monitoring Protocols
Broadcast stream
Ethernet Spoofing
IP Video and Audio
Multicast stream
Netflow
Remote Printing
Remote Screen View
SMTP
SNMP
Splunk
SYSLOG TCP
SYSLOG UDP
TCP Multi
TCP/IP
Time Sync
UDP
UDP Spoofing
Monitoring Systems
ArcSight
Elastic
FortiSIEM
Google Chronicle
Helix
IBM QRadar
LogRhythm
Microsoft Sentinel
SolarWinds
SolarWinds Orion
Splunk
Industrial Protocols
BACnet
Building Automation Protocol
DNP3
IEC 60870-5-104
IN/OUT ICCP
Modbus
OPC AE
OPC DA (Classic)
OPC Historical DA
OPC Protocols
OPC UA
OPC UA Historians
Unidirectional ICCP
Databases
Microsoft SQLServer
MySQL Databases
Oracle Databases
Waterfall Updater
AV updates
Nessus Security Center Updates
WSUS Updater
Files
Folder Mirroring
FTP and FTPS
Local Folder Transfer
Remote Folder Transfer
SFTP (SSH)
TFTP
Messaging
Active MQ
AMQP
HTTP(s) Requests
IBM MQ
Kafka
Microsoft MQ
MQTT
TIBCO EMS
The hardware provides an unbreachable physical barrier to online attacks targeting OT networks.

WF-600

Waterfall’s flagship WF-600 Unidirectional Security Gateway provides unbreachable protection for OT / industrial control system networks. The WF-600 gateway provides OT network perimeter protection with a hardware enforced, physical barrier preventing remote attacks, malware, DOS attacks, ransomware and human errors from entering the protected network.

Learn more

WF-500

The WF-500 Unidirectional Security Gateway offers unbreachable industrial protection, enables safe IT/OT integration, secure remote access, and unlimited industrial network monitoring.

Learn more

WF-500 DIN RAIL

The Waterfall WF-500 DIN Rail is a Unidirectional Security Gateway in a compact design that allows space-constrained sites to benefit from Waterfall’s unbreachable physical protection from cyber attacks on industrial networks. 

Learn more

Waterfall for IDS

Waterfall for Intrusion Detection Systems (IDS) enables IT networks to safely monitor OT systems to detect intrusion attempts by preventing the risk of anything going back into the OT networks via the IDS.

Learn more

WF-Secure Bypass

The Waterfall Secure Bypass Module provides physical protection for emergency and other remote support mechanisms, while providing the industrial site with physical control over the frequency and duration of remote access. Secure Bypass provides secure remote access for trusted insiders.

Learn more

WF-FLIP

The Waterfall FLIP is a type of Unidirectional Gateway whose orientation can be physically reversed, enabling safe scheduled updates to OT networks without the vulnerabilities firewalls always introduce.

Learn more

WF-Blackbox

The Waterfall Blackbox provides a tamper-proof online repository that can survive a cyber attack, preventing attackers from hiding evidence of how they entered a network and their malicious actions within it.

Learn more

Who we protect

One way for data.
Zero entry for attackers.