Hardware Data Diode Regeneration of 1 SPAN input

A common use case in operational technology (OT) networks involves sending mirrored traffic from a SPAN (Switch Port Analyzer) port on an industrial switch to a security or monitoring sensor. SPAN ports are set up to duplicate the data packets moving through a specific port so they can be analyzed. However, in critical OT environments, if SPAN is the only available option for connecting security sensors, additional precautions should be taken.

One best practice is to pair the SPAN/Mirror port with a Hardware Data Diode. A Hardware Data Diode ensures one-way data flow, preventing any data from returning to the network. These devices use physical hardware separation to block bidirectional communication, providing a trustworthy way to protect critical systems such as industrial control systems (ICS) from inbound cyber threats.

Garland Technology’s portable Hardware Data Diode P1GCCAS-Custom is purpose-built for this exact function. It accepts one (1) SPAN input in ports A and then provides two (2) unidirectional copies of port A’s traffic out ports C and D. Port B on P1GCCAS-Custom has been intentionally disabled. It securely regenerates data to security sensors while eliminating any risk of reverse traffic. It helps guarantee the safety and integrity of critical OT networks.