Cyberium OWA-1U-500M-1G-OT Edition
What is OWA-1U-500M/1G?
OWA-1U-500M/1G OT Edition is a compact, hardware-enforced security gateway designed to allow strict unidirectional data flow from 500 Mbps to 1 Gbps (same hardware). By creating a physical barrier between IT and OT domains, it ensures airgap-grade separation of critical operational systems — far beyond what firewalls can offer. Its secure-by-design architecture enables both real-time transfer of OT data (SCADA, DCS, Historian) to IT or cloud systems and safe delivery of alarms and events— without exposing critical assets to outsider cyber threats. It enforces a physical separation of duty between production (OT) and supervision (IT) layers.
Built for compliance with the most stringent security frameworks such as IEC 62443 and NIS2, Cyberium’s OWA product line enables secure convergence of IT/OT systems without compromising the integrity, availability, or safety of industrial operations.
Datasheet OT Edition
KEY CHARACTERISTICS
- Complete Physical Separation. Upstream and downstream proxies physically separated within a single 1U; Independent power supply per proxy; Front-panel network connections.
- Strict Unidirectionality. No returning data link, not even on a separate channel for data flow<./li>
- True Bandwidth. 500 Mbps / 1 Gbps sustained on a single link, optimized for file and multi-protocol transfer.
- Absolute Reliability. 0-packet loss , 0-file loss , and 0-file corruption.
- Built for Resilience. Active/Active High Availability (1), Automated fail-over upon system failure (1), Automatic traffic recovery upon downstream (IT) unavailability.
- Eased Compliance with. IEC/ISA 62443 FR 5 Restricted Data Flow SL-C 4, NERC CIP version 5, NIS2 & NEI 08-09.
- OT Systems Compatibility. A vast range of protocols and systems through additional Agents software and native connectors... See a full list at below
- Seamless Deployment. Transparent to end-users. No change in the network. Easy admin. No extra workload for administrators. Above-grade MTBF.
Technical Specs
HARDWARE APPLIANCE
| Ordering SKU | OWA-1U-500M or OWA-1U-1G |
| Mounting | 19” Rack Mounting, 1U Rack Space for the two proxies 1U Rack kit included, Static rails |
| Dimensions | H 44 mm W 479 mm D 420 mm |
| Weight | 12 Kg / 26,5 Lb |
| Operating T° | 10 °C to 35 °C (50 °F to 95 °F) with no direct sunlight on the equipment |
| MTBF | > 50 000 hr |
NETWORK / CONNECTIVITY
| Port / Interfaces | 2 x 1/10 Gbps (Copper) - one by proxy 2 x 10/25 Gbps (SFP+) - one by proxy Front-panel cabinet for visual inspection |
| USB / Other | 2x 1 USB-port - one by proxy 2x 1 VGA-port - one by proxy |
| Max end-to-end Throughput | 500 Mbps or 1 Gbps (depending on the chosen version) True deliverable capacity |
| File Sending Benchmark | Above 1000 files of 125 KB sent /sec at 1 Gbps in FTPS |
ELECTRICAL
| Power | 100-240 V AC |
| Power Supply | 2x 400 W PSU - one per proxy |
| Avg Consumption | 250 W |
PROTOCOLS & OT SYSTEMS COMPATIBILITY
| Industrial Protocols | MQTT, OPC UA/DA, Modbus, DNP3, IEC.104 |
| Historians and similar OT systems | AVEVA Pi2Pi Replication AspenTech (InfoPlus21) Bently Nevada (S1) Emerson (AMS Optics) GE (OSM: On-Site Manager) Honeywell (Uniperformance PHD) Yokogawa (Data Historian) |
| Centralized Monitoring | Cisco Splunk (extended API integration) ArcSight (via SYSLOG) Generic SIEM integration (via SYSLOG) Generic SNMP Traps Screen view (via HDMI replicator) |
| Alarms & Events | Hexagon (PAS) Emerson (DeltaV AgileOps) |
| IT Protocols | UDP, HTTP/S API, SMTP |
| Files | Direct File Channel: Supports SFTP, FTP/S/ES MS Windows File Transfer Agent (via Files Channel) |
| Generic Database Replicator for DCS/SCADA applications |
Simple SQL DB Full/Incremental Backup Replicator (Oracle / MS SQL) Advanced SQL DB Granular Change Replicator (Oracle / MS SQL) |
MANAGEABILITY & RESILIENCE
| High Availability | Active/Active - automated fail-over with the purchase of a second OWA appliance + High Availability Option subject to eligibility |
| Solution Monitoring | Either through Syslog OR Web GUI central console enables monitoring of traffic, health and performances, downstream of the proxy appliances |
| Logging | Every configuration change and every traffic is logged |
| Administration Account | Separated on the upstream and downstream proxies |
| Config. saving / restore | Locally, on USB or on the network |
HOW DOES IT WORKS?
Discipline is the bridge between goals and accomplishment.
