Hi my name is Dan Lanir I'm the Vice President of Customer Success at OPSWAT and I'd like to talk
to you about cross-domain secure data transfer I'm gonna show you an example of transferring
data into an air-gap network by definition an air-gap network doesn't have connectivity to
external networks so typically when you have to bring data into that network you have to bring it
in to external media that external media could be a CD a DVD sometimes even floppy drives are
still used but the most common external media is the thumb drive now what we have here is the Meta
Defender kiosk this is a check-in system to make sure that the data that I want transferred into
the air-gap network is secure and free of any kind of malware so I come here and I see welcome please
sign in I hit begin there's a disclaimer which I agree to it asks me for my user type in this
scenario I'm a contractor so I'm gonna hit the guest user type I get a series of questions that
were pre configured by the kiosk administrator my name so I'm gonna put in John last name is Smith I
work for an organization called AZX and my email address is js@azx.com so I start typing in
the name and it's been configured to give me a list of the people that might be possible hosts
I choose the one as my host I hit submit that employee has now been notified that I'm here
waiting to be checked in as a contractor I sign that I agree with all the terms I hit agree and
now the kiosk asked me whether I have portable media that requires scanning and I hit yes now it
tells me to insert the media and as I said before that media could be CDs DVDs floppy drives any
kind of external media in this case it's a thumb drive I put it in here and the kiosk is going to
start processing this media now I have a couple of processing options I could process the entire
thumb drive or I can browse and take a look at what's within that thumb drive and here you see
that the kiosk has detected that there are thousands of files in the thumb drives boot sector now in this case
I'm not interested in those files I'm interested in the files under my directory structure the
J Drive should I click it I hit continue and I let kiosk run through the various trusts no file
technologies that the administrator has defined for this kiosk and you can see that there are
18 files that have been allowed and two files that got blocked now if I wanted to I can click
on these buttons and get more details about why the files were blocked what what the problem was
but I'm actually satisfied with this result as a contractor I just need these 18 files so I'm gonna
hit copy and print and the files are now being transferred via secure one-way direction usually
enforced with a data diode into our Meta Defender vault I get a message giving me my MetaDefender
vault guest ID I don't have to memorize it I just say got it and now I print the information and now
I get the results of the transaction it gives me all the information about what files got processed
what the results were etc it also gives me my guest ID once I'm done with this I click
the finish button it ends my session it tells me that I can remove my media which I'm going to do
tells me to wait for my contact to arrive my host I click ok I get my visitor's badge this happens
to be paper but normally would be a sticker and I would paste it here on my shirt and then I would
wait for my host to arrive and get escorted into the air-gap Network now I'm going to pull out my
thumb drive and I should not be bringing this thumb drive into the air-gap Network but I'm
a creature of habit I'm absent-minded and I just sort of absent-mindedly put it into my
pocket my host arrives and we're about to go in keep in mind that I have this thumb drive in
my pocket one thing before we go in I do want to mention the kiosk is for external media now
sometimes I get asked but what happens if you need to bring an entire laptop of data into the
air-gap network for that the kiosk doesn't handle that but we do have another solution it's called
Meta Defender Drive which is an all-in-one Meta Defender core sitting on an operating system on a
drive completely self-contained you boot a laptop using the operating system on this drive and the
drive will scan the entire laptop including the file system including the boot sector obviously
this takes a little bit longer than scanning external media through the kiosk but the meta
defender drive is your solution for scanning an entire laptop or any computer for that matter
through a self-contained meta defender on an operating system on a thumb drive ok so here
we are I've talked to you a little I've forgotten that I have this thumb drive in my pocket I walk
towards the air-gap Network and before I get in I have a security guard that wants to make sure I'm
not bringing anything malicious in she checked me out and detects that I have something oh look at
me silly me I forgot about this thumb drive I'm sorry I won't let it happen again ok now I move
on into the air-gap Network now Here I am in the air-gap Network and I'm at the Meta Defender vault
station and what I'm gonna do now is retrieve the files that got transferred securely typically
through a one-way data diode network transfer into vault so here it's asking me to secure my
files again I can log in as an employee or a guest I'm a guest I need to enter my guests ID
which I got from the kiosk I hit the access files button and I can see here basically a file folder
the temporary file folder I click on it and I can see a subfolder called allowed when I click on
the allowed I get a directory structure similar to what was on that thumb drive but only containing
the files that Meta Defender determined are were allowed to get transferred in and from this vault
I can download the files and use them as needed within the air-gap network so that's an example
of secure data transfer cross-domain thank you very much for taking the time to watch my demo