CyFENCE
CyFENCE is a DMZ-based cybersecurity solution that integrates security services to protect industrial systems with customizable or ready-to-use packages.
Description
CyFENCE is a comprehensive cybersecurity solution designed specifically for industrial systems, functioning as a DMZ (Demilitarized Zone) that integrates all necessary security services to protect industrial networks. It consists of pre-configured hardware and software components tailored for both existing and new industrial systems, ensuring robust protection without significant operational disruption. The solution offers two main packages: 'Offre Wall', a customizable pack tailored to specific needs, and 'Offre Box', a ready-to-use pack with essential protection services that is quick to install and cost-effective. CyFENCE is modular, allowing users to select only the functions they require, and it supports redundant configurations for high availability. It is positioned between IT and OT (Operational Technology) environments, extending IT security services like antivirus, authentication, and logging to OT systems while ensuring compliance with standards such as the ANSSI-PA-044 guide.
Features
- Consolidated view of systems for enhanced monitoring and management.
- Blocking of unauthorized network flows to prevent security breaches.
- Analysis of file transfers to detect and mitigate threats.
- Segmentation between IT and OT environments to isolate critical systems.
- Blocking of failures during attacks to maintain system integrity.
- Management of authentications via LDAP and Active Directory.
- Control of access paths to zones and equipment for secure connectivity.
- Management of remote access of all types to ensure secure operations.
- Automatic or manual update management for system maintenance.
- Creation of security records related to CyFENCE services for auditing.
- Collection of logs and security events for communication with SOC/SIEM.
- Automatic or manual backup and restoration with version discrepancy detection.
- Protocol breaks on critical exchanges to enhance security.
Benefits
- Installs with minimal impact by cutting incoming and outgoing communications to secure existing systems.
- Modular design allows selection of only necessary functions, optimizing resource use.
- Available in redundant versions to meet high availability requirements for critical operations.
- Extends IT security services to OT environments, bridging the gap between IT and industrial systems.
- Compliant with the ANSSI-PA-044 guide, ensuring adherence to recognized cybersecurity standards.
- Includes comprehensive support from Armony System during implementation and ongoing management.
- Offers two flexible packages: customizable 'Offre Wall' and quick-install 'Offre Box' for varied needs.
- Integrates trusted IT and OT technologies, selected for quality protection and ease of implementation.
- Features dual firewalls (IT-side and OT-side) with different technologies for enhanced security.
- Provides exhaustive control over paths between IT and OT to prevent unauthorized access.
Links
- Open Source
- ❌
- European
- ✅
- Country
- FR