NetFerry
Break down silos and connect securely:
Secure cross-network and cross-domain file exchange
System Construction White Paper
Solve the antinomy between "physical isolation" and "data flow"
NetFerry Cross-Network Switching White Paper/ Page 01
1. Executive Summary
Driven by Class Protection 2.0 (level protection) and data security regulations, most government, financial, high-end manufacturing and scientific research units have implemented strict network isolation strategies (physical isolation or logical isolation). However, the development of business cannot be separated from the flow of data - codes need to be released, logs need to be analyzed, and materials need to be transmitted.
NetFerry Designed specifically for isolated network environments, it provides a secure, controllable, and compliant data exchange channel. It is like a "safe ferry" that shuttles between two isolated networks, realizing the safe flow of files while ensuring that the network boundaries are not breached.
2. "Transmission strange phenomenon under isolated network"”
Core pain points: The network is isolated, but efficiency is lost and security risks increase.
💾 USB “Human Flesh” Ferry Risk
Employees use USB flash drives to repeatedly insert and remove data between computers on the internal and external networks to copy data. This is not only inefficient, but also can easily lead to cross-infection of viruses (such as ransomware) through USB flash drives and break through the physical isolation defense line.
🕵️♂️ FTP/shared directory out of control
For the convenience of setting up FTP servers privately, there is often a lack of approval mechanism and log audit. Who passed what? Does it contain sensitive data? It's a complete management black hole.
💻 Dual-machine operation is inefficient
There are two computers (internal network machine + external network machine) on the employee's desk, and data transmission relies on "hand copying" or taking photos, which seriously affects R&D and office efficiency.
⚖️ Lack of compliance audit
The lack of a unified data exchange entrance makes it impossible to meet the compliance requirements of regulatory agencies for "cross-domain data transmission must leave traces and must be approved."
NetFerry Cross-Network Switching White Paper/ Page 02
3. Solution: NetFerry secure ferry system
NetFerry adopts the architecture of "front-end machine + back-end machine + isolated storage" to achieve secure exchange of application layer data on the premise of cutting off TCP/IP direct connection.
3.1 Principles of logical architecture
Sender network
(eg: Internet)
→
NetFerry Secure Exchange Platform
Virus detection·Content filtering·Approval flow
→
Receiver network
(e.g. core intranet)
* Supports the coordinated deployment of multiple isolation devices such as gatekeepers, optical gates, and firewalls
3.2 Highlights of core functions
- Multi-engine virus detection (Anti-Virus): Integrate multiple anti-virus engines such as Kaspersky and 360. All files entering the intranet must be scanned for viruses and confirmed to be "clean files" before they can be passed through.
- Sensitive content filtering (DLP): Supports keyword scanning of file content. If files sent from the intranet contain sensitive information such as "confidentials", "source code", "ID number", etc., they will be automatically blocked and alarmed.
- Multi-level approval workflow (Workflow):
- By file attribute: Large files (>500MB) require manager approval.
- By sensitivity: Documents containing the word "contract" require legal review and approval.
- By direction: There is no need for approval when entering the network, but approval is required when leaving the network.
- Full link audit (Full Audit): “Who, at what time, from which IP, to whom, and what files were sent (including file copies) are recorded throughout the process to meet audit traceability requirements.
NetFerry Cross-Network Switching White Paper/ Page 03
4. Typical application scenarios
Scenario 1: R&D Network ⇄ Office Network (Code & Logs)
need: R&D personnel need to import the open source code package (Jar/NPM) downloaded from the Internet into the R&D network, and at the same time export the log files of the R&D network for analysis.
NetFerry Value:
- Import: Mandatory malicious code scanning to prevent open source packages with backdoors from being introduced into the core R&D area.
- Export: It must be approved by the project manager to prevent the leakage of core source code.
Scenario 2: Data interaction with external partners
need: The bank/government hall needs to receive materials or data packages submitted by external suppliers, but does not dare to open intranet permissions.
NetFerry Value: Provides a temporary "Document Drop Box" link. External personnel can only upload files. After cleaning and ferrying, the files enter the designated location on the intranet. There is no direct network connection throughout the process.
5. Conclusion
Network isolation should not be a stumbling block to business development.
NetFerry cross-network file secure exchange system Perfect balance between "security" and "convenience". It completely puts an end to the chaotic situation of random USB disk insertion and random FTP construction, and builds a compliant, clean, and efficient data highway for enterprises.
🚀
Build secure cross-network channels
Request a NetFerry demo
Experience "second-level" cross-network transmission and "bank-level" security approval. .
🌐 www.dongchayan.com/netferry
Scan the QR code to add a consultant
