Hardware Data Diode Regeneration of 2 SPAN inputs

A common use case in operational technology (OT) networks involves sending mirrored traffic from a SPAN (Switch Port Analyzer) port on an industrial switch to a security or monitoring sensor. SPAN ports are set up to duplicate the data packets moving through a specific port so they can be analyzed. However, in critical OT environments, if SPAN is the only available option for connecting security sensors, additional precautions should be taken.

One best practice is to pair the SPAN/Mirror port with a Hardware Data Diode. A Hardware Data Diode ensures one-way data flow, preventing any data from returning to the network. These devices use physical hardware separation to block bidirectional communication, providing a trustworthy way to protect critical systems such as industrial control systems (ICS) from inbound cyber threats.

Garland Technology’s portable Hardware Data Diode CTAP-P1GCCREG is purpose-built for this exact function. It accepts (2) SPAN inputs in ports A and B and then provides separate unidirectional copies of each ports’ traffic out ports C and D respectively. It securely regenerates data to security sensors while eliminating any risk of reverse traffic. It helps guarantee the safety and integrity of critical OT networks.