How does the Airmatics AERO ensure cybersecurity when integrating with a company's private LAN?
Cybersecurity of Airmatics AERO: Separation of Networks Explained
The Airmatics AERO is designed with robust cybersecurity in mind. It features two physically separated Ethernet interfaces to ensure complete isolation between networks:
Private LAN, TAG Network with Cellular Gateway
This network connects the Airmatics system to the internet via a secure cellular gateway.
Customer, Local LAN
This interface allows the customer to connect their LAN for local visibility of devices.
Key Security Measures
- Physical Separation: The two networks are entirely isolated, preventing any direct Ethernet traffic between them.
- No Cross-Network Direct Connections: Devices on the private TAG network cannot directly communicate with devices on the local LAN, and vice versa.
- Reverse Proxy Mechanism: If a device on the local LAN requests data from a TAG on the Airmatics network, the AERO acts as a reverse proxy.
- The AERO retrieves the data on behalf of the requesting device and delivers it securely.
- This process is strictly one-way.
This architecture ensures that the user's LAN remains completely secure, with no risk of intrusion from the public cellular network.