Information Technologies Archives

industrial protocols modbus opc profinet featured image

10/05/2026

OT networks under siege: why factories and plants adopt hardware one-way links

ot network hardware data diode: practical guidance for secure one-way data flow architectures.

Summary: Production plants and energy facilities still run PLCs, historians, and SCADA stacks that were never designed for internet-adjacent threats. When outbound visibility becomes mandatory, OT leaders look for controls that survive mis-clicks and rushed maintenance windows.

The OT vulnerability story is familiar

Legacy protocols, long refresh cycles, and third-party remote access create predictable pivot points. Software-only barriers help—but they depend on continuous correctness under stress.

What changes with a diode segment

For nominated flows, hardware directionality removes reverse traversal as a mechanism entirely: monitoring and datasets can still exit, while many classes of remote manipulation lose their network path.

Grounding the discussion

The OT-focused brief connects plant realities—energy, manufacturing examples—to architectural patterns you can stress-test with your automation engineers.

Related Connexite resources

Download the full document

For diagrams, specifications, and the complete narrative as published by Connexite, use the official PDF:

Data diodes in operational technologies — ConnexONE (PDF)

Note: Treat numbers, certifications, and compliance mappings in the PDF as authoritative for procurement and audit; this article is editorial guidance only.

Deep Dive Guides, OT / ICS

10/05/2026

Data diode vs firewall: complementary tools for radically different promises

data diode vs firewall: practical guidance for secure one-way data flow architectures.

Summary: Firewalls excel where bilateral sessions are legitimate and manageable. Data diodes excel where the security question is existential: must this link ever carry anything inbound? Answering “no” with physics rather than policy is the architectural fork.

Compare apples with apples

Stateful inspection needs bidirectional visibility to do its job. A diode, by design, refuses that premise for its path—trading flexibility for a blunt guarantee on direction.

When teams deploy both

Most enterprises keep firewalls for general-purpose segmentation while inserting diode segments for specific OT analytics, cross-domain handoff, or mission exports—places where one-way semantics dominate latency-tolerant flows.

Go deeper

The comparison brief walks scenarios, trade-offs, and coexistence patterns without pretending either technology replaces the other.

Related Connexite resources

Download the full document

For diagrams, specifications, and the complete narrative as published by Connexite, use the official PDF:

Data diode vs firewall — ConnexONE (PDF)

Note: Treat numbers, certifications, and compliance mappings in the PDF as authoritative for procurement and audit; this article is editorial guidance only.

Data Diode, Deep Dive Guides

10/05/2026

A practical introduction to network data diodes (and how ConnexONE implements them)

network data diode: practical guidance for secure one-way data flow architectures.

Summary: If you are new to directional enforcement, start here: what “one-way” means in hardware, how it differs from firewall policy, and how ConnexONE structures transmit and receive roles.

Concepts before products

The guide explains baseline terminology—why diodes address covert channels differently than software inspection—and where two-stage designs still preserve assured directionality.

ConnexONE building blocks

High level coverage of hardware roles and the software stack helps readers translate marketing language into rack-and-cable thinking.

Keep the PDF handy

Use this article as the teaser; keep the official guide bookmarked for workshops with security, networking, and automation peers.

Related Connexite resources

Download the full document

For diagrams, specifications, and the complete narrative as published by Connexite, use the official PDF:

A guide to data diodes — ConnexONE (PDF)

Note: Treat numbers, certifications, and compliance mappings in the PDF as authoritative for procurement and audit; this article is editorial guidance only.

Data Diode, Deep Dive Guides

10/05/2026

Choosing a ConnexONE throughput tier: Nova 1G and the family line-up

connexone throughput tier nova 1g: practical guidance for secure one-way data flow architectures.

Summary: Throughput, interface, and failure behaviour drive diode selection. Use Connexite’s published datasheets as the authoritative numbers for procurement and design reviews.

What to decide first

Peak and sustained throughput required by your aggregation architecture.
Physical interfaces available in your racks or enclosures.
Operational monitoring expectations—how operators verify health without violating one-way guarantees.

Nova 1G positioning

The Nova 1G product page and datasheet articulate where this variant sits within the ConnexONE range for environments that require multi-gigabit-class outbound capacity—confirm exact port maps and environmental ratings in the PDF.

Downloads

ConnexONE datasheet PDF (verify Nova 1G section)
ConnexONE family datasheet (PDF)
ConnexONE one-pager (PDF)

Datasheet, Deep Dive Guides, Products

10/05/2026

Inside the ConnexONE platform: how to read the data-flow datasheet

connexone data flow platform datasheet: practical guidance for secure one-way data flow architectures.

Summary: The ConnexONE datasheet is more than a speeds-and-feeds sheet—it describes how hardware-enforced one-way paths, modular licensing, and broad protocol coverage fit together when you need assured egress from a sensitive zone.

Why “data flow” framing matters

Organisations rarely struggle with moving some data out of an OT or high-assurance IT island—they struggle with doing it without accidentally preserving a return path for attackers, misconfiguration, or vendor maintenance tools. The datasheet positions ConnexONE as a directional publish layer: traffic leaves the protected side under policy, while the physical topology denies inbound exploitation.

What architects typically validate first

Protocol fit — whether your historians, file pipelines, SQL workflows, video streams, and industrial buses are covered by the feature set you license.
Throughput and failure behaviour — aligning nominal capacity with burst telemetry and replication patterns.
Operational model — how monitoring, administration, and upgrades interact with the guarantee of one-way transfer.

Where this leaves your shortlist

Use the datasheet to narrow variants and interfaces before you engage Connexite on a concrete architecture review—especially when multiple sites or mixed protocols are in play.

Related Connexite resources

Download the full document

For diagrams, specifications, and the complete narrative as published by Connexite, use the official PDF:

ConnexONE Data Flow Solution datasheet (PDF)

Note: Treat numbers, certifications, and compliance mappings in the PDF as authoritative for procurement and audit; this article is editorial guidance only.

Datasheet, Products

10/05/2026

SAP meets the plant floor: collecting operational insight without puncturing OT trust

SAP OT data diode: practical guidance for secure one-way data flow architectures.

Summary: Enterprise ERP and manufacturing intelligence ambitions depend on timely operational truth—but SAP-centric architectures must not become accidental tunnels into SCADA and MES islands.

The integration dilemma

Asset Viewer Service (AVS), MES connectors, and analytics pipelines hunger for plant data. Traditional integrations risk sprawling firewall rules and standing VPNs that age poorly.

A disciplined publish pattern

The Connexite SAP integration brief sketches how diode-mediated workflows move curated datasets toward SAP-facing services while preserving a one-way discipline at the OT boundary.

Plan holistically

Align OT owners, BASIS teams, and security architecture before you tune brokers—this paper is a conversation starter, not a turnkey blueprint.

Related Connexite resources

Download the full document

For diagrams, specifications, and the complete narrative as published by Connexite, use the official PDF:

SAP integration — data collection with ConnexONE (PDF)

Note: Treat numbers, certifications, and compliance mappings in the PDF as authoritative for procurement and audit; this article is editorial guidance only.

Solutions, Vertical Solutions

file transfer across trust zones featured image

10/05/2026

Moving files across trust zones: how ConnexONE treats file transfer as a governed workflow

file transfer across trust zones: practical guidance for secure one-way data flow architectures.

Summary: File exchange sounds mundane until it becomes your organisation’s favourite covert channel. ConnexONE frames file movement as a reviewed, auditable pipeline—not anonymous drag-and-drop.

Why one-way file semantics matter

When sensitive zones must push packages outward—evidence bundles, log archives, signed updates—a diode-backed workflow prevents surprise inbound sessions masquerading as “responses.”

Guardian, Postman, policy

The brief introduces how transfers traverse validation, optional approval chains, and delivery to recipients or repositories—language your SOC can map to runbooks.

Integrate with governance

Pair technical controls with records-management policies so retention and classification stay coherent.

Related Connexite resources

Download the full document

For diagrams, specifications, and the complete narrative as published by Connexite, use the official PDF:

Protocol guide — file transfer (PDF)

Note: Treat numbers, certifications, and compliance mappings in the PDF as authoritative for procurement and audit; this article is editorial guidance only.

File Transfer, Protocol Guides

10/05/2026

MQTT across boundaries: lightweight telemetry without trading away directionality

MQTT data diode: practical guidance for secure one-way data flow architectures.

Summary: MQTT powers smart infrastructure everywhere—from factory sensors to building automation—thanks to compact publish/subscribe semantics. Crossing security domains still demands architectural sobriety.

Broker adjacency risks

MQTT brokers often become concentration points. ConnexONE describes broker-capable roles that collect publisher traffic and relay toward sanctioned downstream brokers—without pretending MQTT magically enforces trust.

Near-real-time with guardrails

The guide summarises how Guardian and Postman cooperate to keep topic flows coherent while preserving the diode promise.

Bring your topic map

Successful deployments start with data governance—know what each topic carries before you replicate it.

Related Connexite resources

Download the full document

For diagrams, specifications, and the complete narrative as published by Connexite, use the official PDF:

Protocol guide — MQTT (PDF)

Note: Treat numbers, certifications, and compliance mappings in the PDF as authoritative for procurement and audit; this article is editorial guidance only.

IoT/Scada, Protocol Guides

10/05/2026

Industrial protocols on your diode: Modbus, OPC, PROFINET, and beyond

industrial protocols modbus opc profinet: practical guidance for secure one-way data flow architectures.

Summary: OT speaks dozens of field dialects. ConnexONE emphasises native industrial connectivity—virtual connectors feeding Guardian so telemetry can exit toward ERP, historians, or analytics without bolt-on hacks.

Why “packet-driven” matters

A flexible parsing model lets teams request new adapters when plants introduce niche devices—reducing vendor lock-in at the diode layer itself.

Near-real-time replication

The brief highlights continuous collection from PLCs, HMIs, DCS, historians, and onward transfer toward Postman-facing destinations.

Engineer-to-engineer tip

Validate signal lists and scan rates with automation leads before you promise dashboards—protocol support still needs sane engineering assumptions.

Related Connexite resources

Download the full document

For diagrams, specifications, and the complete narrative as published by Connexite, use the official PDF:

Protocol guide — industrial OT (PDF)

Note: Treat numbers, certifications, and compliance mappings in the PDF as authoritative for procurement and audit; this article is editorial guidance only.

OT / ICS, Protocol Guides

10/05/2026

SQL, replication, and the database trust boundary: filtering queries before they leave the vault

SQL data diode: practical guidance for secure one-way data flow architectures.

Summary: Databases hold crown-jewel rows—yet analytics and disaster-recovery patterns constantly ask for copies. ConnexONE positions itself as a broker that understands SQL semantics enough to police dangerous statements.

More than tunnelled ODBC

Administrators define allow/deny logic at statement, table, and attribute levels so destructive or out-of-scope queries never ride the outbound lane.

Replication with hygiene

Filtered result sets can feed less-trusted zones or remote servers using familiar protocols—while the architecture narrative stays grounded in least privilege.

Coordinate with DBAs

This is not “set and forget”—schema drift and application upgrades require the rules to evolve responsibly.

Related Connexite resources

Download the full document

For diagrams, specifications, and the complete narrative as published by Connexite, use the official PDF:

Protocol guide — SQL (PDF)

Note: Treat numbers, certifications, and compliance mappings in the PDF as authoritative for procurement and audit; this article is editorial guidance only.

Protocol Guides, SQL