MetaDefender Optical Diode is a hardware-enforced security appliance that establishes a one-way data transfer channel between isolated networks. It utilizes simplex fiber optic connections to create a non-routable, optically isolated connection with a protocol break, ensuring data travels only from a source network (OT) to a destination network (IT) to prevent inbound threats or data return. The system is available in multiple form factors, including 1U servers and DIN Rail PCs, with throughput capabilities ranging from 1Gbps to 10Gbps.
The appliance supports the concurrent, unidirectional transfer of data including TCP/UDP streams, Syslog, file transfers (FTP, FTPS, SFTP, Windows File Share), and database replication. It also supports industrial protocols such as OPC (DA/A&E, UA), DNP3, ICCP, IEC 104, Modbus, and AVEVA PI. Data integrity is managed through mutual TLS encryption, X509 certificates, and SHA-256 digital signatures. Management is conducted via a web interface or centralized files, with administrative changes requiring the physical insertion of encrypted USB security dongles. Configurations are available for high availability and a back-to-back mode that pairs two devices for bidirectional communication over isolated unidirectional channels.
