Organisations often create a Demilitarised Zone (DMZ), or isolated network, for safer operation of perimeter services such as web, e-mail, DNS servers and other systems that are most vulnerable to attack. The challenge when working in such a DMZ network is how to maintain and configure the infrastructure from which it is created.

Placing the Oakdoor™ Management Gateway at the perimeter of the trusted and untrusted network, it’s possible to download system updates, configurations and other files to your DMZ safely.

The Gateway includes an Oakdoor™ Export Diode that enforces any organisation-specific authorisation workflows. It uses cryptography and hardware-based fingerprint and data checks to maintain security throughout data download, release and receipt.

The Gateway also includes a built-in remote desktop server, so system administrators can securely access the DMZ components via web-based interfaces, without the need for client software.

It’s also possible to access systems via command prompts such as secure shell (SSH). This allows the secure import of authoritative time information from internet timeservers (NTP) and syslog-data streams into a classified network by inspecting both the data structure (in hardware) and the data content (in software).