In critical sectors like energy supply, transportation, defense, and industrial manufacturing, protecting IT/OT networks from cyberattacks is essential, especially in applications demanding Safety Integrity Levels (SIL) 3 and 4. Implementing an air gap between OT and IT environments strengthens security by physically separating operational technology systems from external IT networks, significantly reducing the risk of cyber threats.

To enable operators to transmit data, such as sensor information, from OT networks to IT networks while maintaining the required air gap, a robust solution is necessary to securely bridge both environments.

A PacketRaven Network TAP operates on OSI Layer 1 and has no MAC address. It is therefore invisible in the network and cannot be detected by any attacker. This is essential, especially in network forensics and security, as otherwise criminals might be suspicious of the presence of the TAP.

Furthermore, our Network TAPs behave passively on the network side, which means that there is no interruption of network traffic in the event of a power failure (the only exception is our SFP TAP).

In order to ensure the highest possible reliability on the monitoring side, these TAPs have redundant power supplies, but can also be additionally operated or fused with 12-48V DC voltage. With our copper TAP, power supply via PoE is even possible in addition.

Furthermore, all our TAPs with active monitoring output (RJ45 and SFP) work like a data diode. This means that the monitoring ports are physically isolated from the network ports and, for security reasons, access to the network via the monitoring ports is prevented on the hardware side.

Thus, by adding this additional security layer, it is not possible to compromise the network connection and the production network.

PacketShark offers an all-in-one solution to improve SSL infrastructure, providing security devices with visibility into TLS/SSL encrypted traffic and optimizing existing security investments. It supports policy-based traffic management and easily integrates with current architectures, while centralizing SSL decryption and encryption using the latest technologies across the security framework.

Network Packet Brokers, also known as Data (Network) Monitoring Switches, help you to intelligently manage your passively tapped network data and - thanks to innovative technology - make the data packets available to the analysis tools reliably and in an optimised form.

By filtering the data with hardware-based filter mechanisms before routing it out, you can, for example, analyse multiple 100G lines with existing 10G - 100G analysis tools while reducing the amount of data for easy and secure analysis.

Data that is not of interest is either discarded or sent to other tools for further analysis.

For optimal and secure IT service delivery, IT security teams must have ongoing access to detailed traffic analysis. Network forensics provides this essential access and insight that security analysts need.

Our PacketFalcon and PacketGrizzly products are powerful recording devices for all types of speeds, enabling IT organizations to analyze, monitor and accurately record traffic without compromise. PacketFalcon and PacketGrizzly allows permanent 24 x 7 access to 1G, 10G, 25G, 40G and 100G networks for detailed analysis, including forensic analysis of past events.