Re: Re: One computer two different networks



The Datagate concept is very simple (no "snake oil" just basic information security). It's aim is to protect the confidentiality of data held on a system.
Importing data from a system with a low classification(e.g. RESTRICTED) to one that is more highly classified (e.g. SECRET)is allowed. Exporting data from high to low is only permitted where it can be GUARANTEED that the data are classified no highre than the low system (e.g. export of data from SECRET system to RESTRICTED system is permitted ONLY if there is some means of ensuring the data are no higher than RESTRICTED) this is VERY difficult to achieve with any realistic degree of confidence unless every data element is marked with its classification.
The Tenix Datagate uses 2 servers, a low server connected to the lower classified system and a high server connected to the more highly classified system. The 2 servers are connected by an opto-isolator that permits information to pass from the low server to the high but not from high to low. This allows the high level system to import data from the low level system but totally prevents any data export.
Unfortunately, since data can flow in only one direction is useless as a port for browsing the internet.
For more data suggest google on "Tenix" or "Tenix DataGate"
Incidentally, I don't work for Tenix but I do work in information security.

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------



Relevant Pages

  • Re: user default password checking tool
    ... Nice script idea but one question, if you choosed to block the account ... >>> The NSA has designated Norwich University a center of Academic ... >>> in Information Security. ... Our program offers unparalleled Infosec ...
    (Security-Basics)
  • RE: Verifying E-Mail Addresses
    ... correspondence with the sender upon realizing your own ignorance, ... Original> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... Original> The NSA has designated Norwich University a center of Academic ... Original> in Information Security. ...
    (Security-Basics)
  • Re: Re: nmap -sS SYN-SCAN does not find all open Ports?
    ... VMWare sometimes acts unpredictably with network tools. ... > The NSA has designated Norwich University a center of Academic Excellence ... > in Information Security. ... > without disrupting your career or home life. ...
    (Security-Basics)
  • Re: lock down personal Win XP workstation
    ... How secure depends on what programs and versions you are currently using as well as what ports and applications you have running. ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic ... The NSA has designated Norwich University a center of Academic Excellence in Information Security. ...
    (Security-Basics)
  • Re: The VA Stolen Laptop - Lessons Learned
    ... TrueCrypt is NOT a Full Disc Encryption utility. ... >>> The NSA has designated Norwich University a center of Academic ... >>> Excellence in Information Security. ... >>> disrupting your career or home life. ...
    (Security-Basics)