Cyber Security Kiosk: Advanced Removable Media Scanning
PRODUCTS GateScanner Kiosk – USB scanning stations for secure file import
GateScanner Kiosk
“sheep-dip” stations for secure file imports from USB and DVD
A GateScanner® Kiosk is a free-standing cyber-security station with removable media ports and a touchscreen, providing secure and managed file import from any portable device to the enterprise network. Users can freely transfer files from their removable media to destinations on the network – or to other removable devices – without compromising network security or NERC CIP/NIST compliance.
GateScanner Kiosk isolates and detects rogue devices, and then applies advanced Content Disarm and Reconstruction (CDR) technology to the incoming files, eliminating both known and unknown (‘signature-less’) malicious code that may potentially be embedded in them.
The GateScanner cyber security kiosk can be deployed as a stand-alone unit or in a networked configuration with central management.
Optionally, the USB scanning kiosks can be coupled with data diodes, such as GateScanner® Injector, to support network isolation/segmentation and cross domain solutions (CDS).
These cybersecurity kiosks also provide IT teams with managed file-export control, providing policy-based file redaction for prevention of data-loss/data exfiltration, or for data-protection and GDPR compliance.
Main Features:
- The antivirus "sheep dip" kiosk prevents file-based attacks from USB devices using GateScanner CDR technology
- Isolates and detects rogue devices (BadUSB, RubberDucky, BashBunny, hidden partition exploits, etc)
- Hundreds of file types supported including MS Office suite, PDF, media files (images, audio, video), archives (ZIP, RAR, 7z, CAB), PST, OST, .eml, installation files, executables, XML, HTML, other text files, medical imaging files (DICOM), password protected and customized files.
- Policy-based configuration: customized scanning profiles according to user/group policies with multiple authentication options including Active Directory (AD) integration
- Scan verification: processed files can be digitally signed and sealed, to validate they were scanned by GateScanner
- Unlimited task sizes enabling uninterrupted scanning of TB+ sized media
- Central administration of multiple, distributed cyber-security kiosks; detailed activity reports with drill-down to the single event; interfaces with SIEM/Syslog; automated updates; multilingual touchscreen UI (kiosk only)
- Tamper-proof, hardened physical appliance prevents device-based attacks; 'return to zero state' after each scan