Cross domain solution

Hardware-enforced one-way transfer for isolated networks.

The ArrowLinx range securely bridges isolated networks. It prevents data leakage and malware injection, eliminates back-channel exploits and keeps the air gap strictly enforced.

  • CC EAL 4+ certified models*
  • 10 Gbps media transfer
  • Stackable design

10 + 10 Gbps

Unidirectional media transfer rate (up to, model 5283)

1 + 1 Gbps

Peak file transfer throughput (model 5283)

1 in 5M

Maximum file loss rate, all models

EAL 4+

Common Criteria certified (5282 to 5285)*

Products

Hardware for isolated networks, from one-way gateways to on-site AI.

Two data diode lines and three industrial edge gateways. An integrated management portal and a stackable design keep deployment and third-party integration straightforward, whichever model you choose.

ArrowLinx 1280, compact 1U appliance

Compact

ArrowLinx 1280

Compact 1U

A compact ArrowLinx unit for robust, high-assurance transfer across isolated networks, equipped with the most commonly required protocols. Ideal for defence, critical infrastructure and secure enterprise applications in space-constrained environments.

  • 10 Gbps unidirectional media transfer rate
  • 200 Mbps file transfer rate
  • TCP, UDP, SYSLOG, SNMP traps, SFTP and FTP
ArrowLinx 5000 Series appliance

High performance

ArrowLinx 5000 Series

Models 5280 · 5282 · 5283 · 5284 · 5285

The next-generation ArrowLinx, built on patented SFP+ technology for high-performance unidirectional communication and real-time file loss detection. Supports secure file transfer, video streaming, VoIP and cross-domain integrations.

  • File throughput from 500 Mbps to 1 + 1 Gbps
  • Industrial, messaging and streaming protocols
  • CC EAL 4+ certified by CSA (5282 to 5285)*
ArrowLinx Edge Gateway SE60n G2, one of three industrial edge gateways

Industrial edge

Edge Gateways

SE10 G2 · SE30n G2 · SE60n G2

Rugged Intel® gateways that collect, process and forward data right next to the equipment, from protocol conversion on the SE10 G2 to up to 97 TOPS of on-site AI on the SE60n G2.

  • Intel® Core™ 3 to Core™ Ultra 7, up to 97 TOPS of AI
  • 2.5GbE and RS-232/422/485 serial on every model; Wi-Fi and 4G LTE options
  • Discrete TPM 2.0 and Secure Boot; fanless, DIN rail or VESA mount

How it works

Data flows out. Nothing gets back in.

ArrowLinx physically allows traffic in one direction only. Operational data reaches the business network in real time, while the protected network stays unreachable from the outside.

Data moves from the protected network through ArrowLinx to the external network. There is no return path. PROTECTED NETWORKOT · isolated · classified SCADA / HMI Historian PLCs & sensors Sender Receiver One-way optical link No physical return path EXTERNAL NETWORKIT · enterprise · cloud SIEM & SOC MES / ERP Cloud analytics Data moves from the protected network through ArrowLinx to the external network. There is no return path. PROTECTED NETWORKOT · isolated · classified SCADA / HMI · Historian PLCs & sensors Sender Receiver EXTERNAL NETWORKIT · enterprise · cloud SIEM · MES / ERP · Cloud ✕ No physical return path

01

Unidirectional communication

Secure, hardware-enforced one-way data transfer. No software setting can open a path back into the protected network.

02

Built-in operational monitoring

Real-time health monitoring with alerts via SYSLOG, email and SNMP traps, plus NTP synchronisation through ArrowLinx.

03

Self-service & stackable

An integrated management portal, plus a stackable design for third-party integration.

Latest news

Keep your air gap. Share your data.

Talk to an ArrowLinx specialist about the right model for your network, or join the partner programme to resell the range.