ZoneGuard by Advenica offers a custom solution for secure information exchange between different security domains. It focuses on information security rather than network security, ensuring the transfer of correct and validated information. Securely transferring validated information using an allowlisting approach solves network security in cross-domain exchange. ZoneGuard only forwards information that complies with your organisation’s information policy, which defines accepted structure, format, types, values, and digital signatures. ZoneGuard provides unparalleled control and accountability of the entire critical information flow. It enforces an organization’s information policy on every transfer, creating an audit trail. It provides Protocol Break and Full Message Inspection to reduce attack vectors against the receiving system, mitigating both network layer and application layer attacks. Precise Information Exchange validates and filters information according to an organization’s policy, ensuring only permitted information is transferred. ZoneGuard’s Information Centric design and policy enforcement promotes organisational growth, reduces costs and enforces internal and industry compliance. The solution enables secure, precise information exchange between different security domains. ZoneGuard’s ability to safeguard which information is transferred to and from a system provides control and accountability of critical information flow. It uses filters in both directions, ensuring full message inspection. The filter allows information to pass based on factors such as source/destination addresses, file formats, attributes, or the presence of a digital signature. The process involves analyzing messages sent between connected systems according to configured rules. Approved parts of the received message are compiled into a new message for the intended receiver. Data is sent to one of the DATA ports on the ZoneGuard, where data packages are collected, the entire message is restored, divided according to the loaded Service, and structured to fit the loaded Schema. Schema In accepts only correctly structured content. Pre-defined filter checks the content. Schema Out accepts only correctly structured content. The entire message is restored and divided into data packages, which are sent to the intended receiver.
