Safety

Cyberium OWA-1U-500M-1G-OT Edition

Hardware Data Diode protection for your Critical Networks from Network Outsider threats.

What is OWA-1U-500M/1G?

OWA-1U-500M/1G OT Edition is a compact, hardware-enforced security gateway designed to allow strict unidirectional data flow from 500 Mbps to 1 Gbps (same hardware). By creating a physical barrier between IT and OT domains, it ensures airgap-grade separation of critical operational systems — far beyond what firewalls can offer. Its secure-by-design architecture enables both real-time transfer of OT data (SCADA, DCS, Historian) to IT or cloud systems and safe delivery of alarms and events— without exposing critical assets to outsider cyber threats. It enforces a physical separation of duty between production (OT) and supervision (IT) layers.

Built for compliance with the most stringent security frameworks such as IEC 62443 and NIS2, Cyberium’s OWA product line enables secure convergence of IT/OT systems without compromising the integrity, availability, or safety of industrial operations.

Datasheet OT Edition

KEY CHARACTERISTICS

Complete Physical Separation. Upstream and downstream proxies physically separated within a single 1U; Independent power supply per proxy; Front-panel network connections.
Strict Unidirectionality. No returning data link, not even on a separate channel for data flow<./li>
True Bandwidth. 500 Mbps / 1 Gbps sustained on a single link, optimized for file and multi-protocol transfer.
Absolute Reliability. 0-packet loss , 0-file loss , and 0-file corruption.
Built for Resilience. Active/Active High Availability (1), Automated fail-over upon system failure (1), Automatic traffic recovery upon downstream (IT) unavailability.
Eased Compliance with. IEC/ISA 62443 FR 5 Restricted Data Flow SL-C 4, NERC CIP version 5, NIS2 & NEI 08-09.
OT Systems Compatibility. A vast range of protocols and systems through additional Agents software and native connectors... See a full list at below
Seamless Deployment. Transparent to end-users. No change in the network. Easy admin. No extra workload for administrators. Above-grade MTBF.

(1) Requires an additional OWA Product. 1U HA is subject to eligibility - please get in touch with us.

Technical Specs

HARDWARE APPLIANCE

Ordering SKU	OWA-1U-500M or OWA-1U-1G
Mounting	19” Rack Mounting, 1U Rack Space for the two proxies 1U Rack kit included, Static rails
Dimensions	H 44 mm W 479 mm D 420 mm
Weight	12 Kg / 26,5 Lb
Operating T°	10 °C to 35 °C (50 °F to 95 °F) with no direct sunlight on the equipment
MTBF	> 50 000 hr

NETWORK / CONNECTIVITY

Port / Interfaces	2 x 1/10 Gbps (Copper) - one by proxy 2 x 10/25 Gbps (SFP+) - one by proxy Front-panel cabinet for visual inspection
USB / Other	2x 1 USB-port - one by proxy 2x 1 VGA-port - one by proxy
Max end-to-end Throughput	500 Mbps or 1 Gbps (depending on the chosen version) True deliverable capacity
File Sending Benchmark	Above 1000 files of 125 KB sent /sec at 1 Gbps in FTPS

ELECTRICAL

Power	100-240 V AC
Power Supply	2x 400 W PSU - one per proxy
Avg Consumption	250 W

PROTOCOLS & OT SYSTEMS COMPATIBILITY

Industrial Protocols	MQTT, OPC UA/DA, Modbus, DNP3, IEC.104
Historians and similar OT systems	AVEVA Pi2Pi Replication AspenTech (InfoPlus21) Bently Nevada (S1) Emerson (AMS Optics) GE (OSM: On-Site Manager) Honeywell (Uniperformance PHD) Yokogawa (Data Historian)
Centralized Monitoring	Cisco Splunk (extended API integration) ArcSight (via SYSLOG) Generic SIEM integration (via SYSLOG) Generic SNMP Traps Screen view (via HDMI replicator)
Alarms & Events	Hexagon (PAS) Emerson (DeltaV AgileOps)
IT Protocols	UDP, HTTP/S API, SMTP
Files	Direct File Channel: Supports SFTP, FTP/S/ES MS Windows File Transfer Agent (via Files Channel)
Generic Database Replicator for DCS/SCADA applications	Simple SQL DB Full/Incremental Backup Replicator (Oracle / MS SQL) Advanced SQL DB Granular Change Replicator (Oracle / MS SQL)

MANAGEABILITY & RESILIENCE

High Availability	Active/Active - automated fail-over with the purchase of a second OWA appliance + High Availability Option subject to eligibility
Solution Monitoring	Either through Syslog OR Web GUI central console enables monitoring of traffic, health and performances, downstream of the proxy appliances
Logging	Every configuration change and every traffic is logged
Administration Account	Separated on the upstream and downstream proxies
Config. saving / restore	Locally, on USB or on the network