File transfer from insecure sources into secure/segregated networks can be carried out either manually or by connecting the networks. Whereas the first option is tedious and inefficient, the second entails threats of data leakage and online attacks.

Even with the use of firewalls or intrusion detection and prevention systems there is no guarantee of full protection as these systems can be bypassed or attacked.

As a result, many secure networks remain segregated from external sources, choosing to maintain high security by paying the price of lowered efficiency because of zero connectivity.

Utilizing Waterfall’s unidirectional technology, files can be transferred online and efficiently into secure networks, without compromising on their security, completely eliminating the possibility of cyber-hacking and data-theft.

Download product brochure

The application supports both server and client mode and provides a seamless solution to replicate folder trees and files over the patented core of the unidirectional security gateway.

Download product brochure

The application supports both server and client mode and provides a seamless solution to replicate folder trees and files over the patented core of the unidirectional security gateway using the FTPS protocol to provide a secure end to end solution to send files.

The application supports both server and client mode and provides a seamless solution to replicate folder trees and files over the patented core of the unidirectional security gateway using the SFTP protocol to provide a secure end to end solution to send files.

The application supports both server and client mode and provides a seamless solution to replicate folder trees and files over the patented core of the unidirectional security gateway using the legacy TFTP protocol to provide a the ability to use the secure core of Waterfall’s solution with a legarcy protocol used in older systems.

The protocol is commonly used and allows the FTE solution to integrate seamlessly into a network where a foolproof solution to transfer the files is needed (such as high-low networks or networks with different classes of security).

The protocol is commonly used and allows the FTE solution to integrate seamlessly into a network where a foolproof solution to transfer the files is needed (such as high-low networks or networks with different classes of security).

Waterfall® Security solution and OSIsfot are official partners. Waterfall Security Solutions Ltd is the only OSIsoft Partner for Unidirectional based security and compliance solutions. The Waterfall for OSIsoft PI solution has been benchmarked for performance and manageability in collaboration with OSIsoft.

Related links:

View OSIsoft & Waterfall partnership PR

 OSIsoft profile page – Waterfall for OSIsoft PI solutions

View OSIsoft’s user conference session (“The Ultimate Security Solution for the PI Environment”)

The Waterfall for OSIsoft PI is an off-the-shelf solution (view PR) enabling real-time replication of PI Servers to fully operational replica servers residing in external networks. The product features in depth integration with OSIsoft’s PI.

Waterfall for OSIsoft PI is installed in many mission critical environments, including fossil and nuclear power plants, in the USA, Canada and Israel. The following diagram shows a high level view of the basic services provided by the product:

The system is installed in many challenging topologies and scenarios, including:

• Multiple sites with PI System replicated to a single Central PI
• Hundreds of thousands of (*100K’s) tags with tens of thousands (*10K) updates per second. Provided with millisecond scale latencies.
• Legacy operating systems integration
• And more…

The WF-SME for OSISoft PI solution is usually placed between the Industrial Network and the Business Network, enabling the unidirectional flow of information. The networks are separated by physical components and therefore no remote tampering can reverse the direction of the data flow. As a consequence, the Industrial Network is immune to any external attacks via the Business Network, which is commonly connected to the Internet.

Results and benefits of implementing Waterfall for OSIsoft PI:

• Security: The production network is now physically segregated from any external network, making this sensitive network fully protected from any online threats, hacking and human errors, originating from external sources.
• Compliance: This architecture facilitates security regulatory compliance.
• Operational: The monitoring network continues to operate as if nothing has changed! Before – PI Client users accessed a PI Server (“master”) for all information and computation needs, and now they do the same, just with the replica PI Server, having fully updated information, data and functionality.

Download product brochure

Provide absolute, real-time and hack-proof replication of GE Fanuc Proficy Historian servers from critical industrial networks to business networks. Full compliance and conformity to GE Fanuc Proficy Historian™ servers.

Security implemented in physical layer; Complete physical and galvanic segregation between networks. Proprietary transfer protocol – No TCP/IP between the networks Operational at critical national infrastructures worldwide.  Scalable support of differently sized Proficy Historian™ systems with negligible latency.

Download product brochure

Security implemented in physical layer; Complete physical and galvanic segregation between networks. Proprietary transfer protocol – No TCP/IP between the networks.

Operational at critical national infrastructures worldwide. Scalable support of small and large amount of HMI based data Ifix systems with negligible latency.