Security Gateway by RazorSecure is an EN 50155 certified platform designed to enforce secure separation of critical networks in railway environments. It is created to deploy and manage network segregation across various onboard architectures, using a layer-7 firewall with rail protocol support. Security Gateway segregates critical onboard networks and enforces separation between security zones, reducing the cyber attack surface and protecting potentially vulnerable systems. By performing layer-7 traffic inspection and passing only approved traffic, Security Gateway protects the train’s operational systems, ensuring vehicle safety, availability, and resilience to cyber threats. It alerts operators to unauthorized traffic and, when used with RazorSecure’s Delta Intrusion Detection System, monitors wider network activity to detect threats, anomalies, and changes in network configuration. Security Gateway integrates easily with onboard networks without modifying existing routing and can be deployed virtually or as an appliance, supporting compliance with IEC62443 and TS50701 for all types of rolling stock. It provides a secure onboard platform capable of supporting applications, including log aggregation, secure network services, access control, and authentication.