How does the Airmatics AERO ensure cybersecurity when integrating with a company's private LAN?

How does the Airmatics AERO ensure cybersecurity when integrating with a company's private LAN?

Cybersecurity of Airmatics AERO: Separation of Networks Explained

The Airmatics AERO is designed with robust cybersecurity in mind. It features two physically separated Ethernet interfaces to ensure complete isolation between networks:

  1. Private LAN, TAG Network with Cellular Gateway
    This network connects the Airmatics system to the internet via a secure cellular gateway.

  2. Customer, Local LAN
    This interface allows the customer to connect their LAN for local visibility of devices.

Key Security Measures

  • Physical Separation: The two networks are entirely isolated, preventing any direct Ethernet traffic between them.
  • No Cross-Network Direct Connections: Devices on the private TAG network cannot directly communicate with devices on the local LAN, and vice versa.
  • Reverse Proxy Mechanism: If a device on the local LAN requests data from a TAG on the Airmatics network, the AERO acts as a reverse proxy.
    • The AERO retrieves the data on behalf of the requesting device and delivers it securely.
    • This process is strictly one-way.

This architecture ensures that the user's LAN remains completely secure, with no risk of intrusion from the public cellular network.