Data Diode Solution

Waterfall Unidirectional Security Gateway
Waterfall Unidirectional Security Gateways enable secure
IT/OT integration, disciplined control, and real-timeindustrial network monitoring.
Features Ensures data flow in one direction only, from ICS network to the IT network, Providing
high protection from remote cyber threats.

 Supports various kind of applications and protocols.
 Introduced more than 1,000 sites.
Critical infrastructure such as Nuclear power, Electric power, Oil & Gas, Chemical, etc.
Sender NW

Receiver NW
Unidirectional communication

Waterfall
TX Agent

Waterfall
TX ModuleWaterfall
RX Agent

Waterfall
RX Module

Waterfall Unidirectional Security Gateway

OT system

IT systemConnector
Data

Waterfall
TX Module

Waterfall
TX Agent

Laser light emitting
unit (LED)

Waterfall Connector
Response on behalf

Waterfall
RX Agent

Optical communication

Data collection

Ack

Waterfall
RX Module

Data delivery

Data

Laser light receiving
unit (Photocell)

Physically impossible
for any data to come in OT system

Ack
Waterfall Connector
Receive on behalf

Why unidirectional communication required ?
Issues of Firewall
 In one way communication by firewall, it hasrisks that will be attacked by Ack packet.

 Vulnerability of Firewall products andconfiguration mistakes by human error.

Regulations
 Unidirectional communication for criticalinfrastructure is required and recommended
in some security regulations and guidelines.

 NRC-RG 5.71 (Nuclear Regulatory

Commission - Regulatory Guide) requires
unidirectional communication for highsecurity network.

Requirement of unidirectional communication
by NRC-RG 5.71

Waterfall Appliance
WF-500S
 1U appliance model combining TX module andRX module for various configuration.

 Supports high availability(HA) configuration.
 Separated model is also available(WF-500SPLIT).

WF-500C
 All in one appliance model

consisting of 4 components; TX and RX modules,and TX and RX agent software servers.

 Simple and compact model (only 1U).
 Sender unit and receiver unit are separated
internally.

System configuration
HA configuration by WF-500S

Waterfall
TX Agent

Waterfall
TX Module

Waterfall
RX Module

Single configuration by WF-500C

Waterfall
RX Agent
Waterfall
TX Connector

 Improve reliability by making appliance andconnector server redundant.

Waterfall
TX Module

Waterfall
RX Module

Waterfall
RX Connector

 Only required 1U space.

Supported protocols of Waterfall Agent Software
Industrial protocols• OPC, DNP3, ICCP, Modbus, etc.
Industrial applications & historians• OSIsoft PI• SQLServer, Oracle, MySQL, Postgres, SAP, etc.
IT monitoring applications• Log transfer, SNMP, SYSLOG, SIEMs, etc.

File transfer• File transfer, Folder mirroring, Remote folder(CIFS)• FTP/TFTP/SFTP/FTPS/RCPConnectors• UDP, TCP/IP, SMTP
• NTP, Multicast Ethernet, etc.
Remote access• Remote Screen View, etc.

Waterfall Appliance Specifications
Network Interface

WF-500S
1000BASE-T x2
100 - 240VPower supply
Dimensions(WxDxH)mm
WeightRemark

WF-500C
1000BASE-T x2

428 x 253 x 44 (1U)
※Not include rack mount kit
4.1kg※Required server for Agent software (2 units).

435 x 760 x 44 (1U)
※Not include rack mount kit
8.0kg※Include Sender(TX) and Receiver(RX) appliance and Agentsoftware server (2 units).

For sale, correct use, thoroughly read the Instructions on handing and operation before use.
The information in this catalog is subject to change without notice.
Products, numerical information, and descriptions in this catalog are current as of October , 2020.

Toshiba Digital Solutions Corporation
ICT Solutions Div.
72-34 Horikawa-cho, Saiwai-ku, Kawasaki 212-8585, Japan
Personal information of customers which we receive when they contact us is onlyused to ascertain the details of their inquiries and provide appropriate responses.
TOSHIBA DIGITAL SOLUTIONS CORPORATION's Privacy Policy
https://www.toshiba-sol.co.jp/en/privacy/index.html

Web Site: https://www.toshiba-sol.co.jp/pfsol/gateway/index_j.htm© 2020 Toshiba Digital Solutions CorporationSEC006©201013(1)