DATA S H E E T

ReCon ™

One Device. Two Way. Zero Risk.

Digital transformation creates both opportunity and risk for today’s data-driven
organizations. They are challenged with navigating the convergence of OT and IT
systems, the emergence of the IoT and IIoT, and limiting or reducing the attack
surfaces of their networks. As the evolution of this digital transformation unfolds
and more networks and devices are connected, security concerns will only
SECURE BI-DIRECTIONAL DATA continue to grow.
DIODE COMMUNICATION, ABSOLUTE
NETWORK SEGMENTATION
To address this pressing need for security, hardware-enforced data diodes have
Possible use case scenarios: been proven time and again to protect the OT networks, however, in some cases,
organizations need to secure bidirectional communications that cannot be
• Communication between client and
one-way.
server
• Remote access The ReCon solution was designed to combine the same proven security benefits of
• Remote command and control a hardware-enforced data diode cybersecurity solution with the ability to provide
secure round trip, bidirectional communication. ReCon enables organizations to
• Remote monitoring
maintain secure two-way connections between networks, while reducing their
• Safety system isolation attack surface with much higher security assurance than traditional firewalls.
• No direct pass through of TCP/IP traffic

Defense-in-Depth security at multiple capacities

BI-DIRECTIONAL-HARDWARE
ADVANTAGE ReCon follows the Department of Homeland Security's (DHS) guidance for securing
ReCon is a hardware-based cybersecurity applications that cannot be one-way. Housed within a 1U standard rack-mountable
solution utilizing two independent data enclosure, the solution is available in mid and high capacity models to better align
diodes. Housed within a 1U standard with customer's security and budgetary requirements.
rackmountable enclosure, each one-
way path within ReCon is completely • Fixed destination IP address
independent from the other. The + Ensures that communication can only be directed to a single destination IP address
separate paths each enable only one • Secure remote command and control
direction (send or receive) of the data + Enables secure remote command and control with less risk than firewall-based security
transfer, together creating a complete
• Restricted session initiation
bi-directional pathway in one device.
+ TCP/IP connection can only be initiated from the trusted source side network.
Destination side cannot initiate communication into the device.

Call 203-894-9342 or email [email protected] Our team is always available to meet your cybersecurity needs
USE CASE

PROTOCOL SUPPORT
Technical Specifications
ReCon provides basic protocol support
for secure bi-directional communication: OPERATING CONDITIONS APPROVALS
• 32°F to +110°F / 0°C to 43.33°C • International Common Criteria Certification -
• FTPS • IEC-104
• 20% to 85% humidity non-condensing EAL Certified
• TCP/IP • ICCP POWER SUPPLY ISO
• DNP3 • MS SQL Database • Input: 100-240V AC auto-ranging, min. 30W per • Manufactured using ISO 9001:2015 certified
side (fused at 1A at IEC connector) quality program
Replication
• Ethernet/IP • Output: 5V at 5A - EU & UK power cables on request
CHASSIS SIZE
STORAGE • 16.5” W x 1.75” H x 13” D
ADMINISTRATIVE SUPPORT • -40°F to 158°F / -40°C to 70°C • 41.91 cm x 4.5 cm x 33 cm
• 5% to 90% humidity non-condensing
UNIT WEIGHT
• Separate administration for source and
VIBRATION • 8.720 lbs./ 3.96 Kg
destination sides • Vibration: (IEC 60255-21-1)
MEAN TIME BETWEEN FAILURE (MTBF)
• Vibration 1g(10-500Hz) (operational)
• Supports up to 5 simultaneous • 14+ years
• Vibration 2g(10-500Hz) (operational and non-
data streams operational) LOCAL ADMINISTRATION
• VGA connector for monitor
• Port mapping allows the admin MOUNTING SIZE
• USB connectors for keyboard and mouse
to control destination address for • (1U) Rack mount, tabletop

connection - no entity outside of NETWORK CONNECTIVITY

• Ethernet connections for network traffic and remote
the destination network can access
administration
information about that network. This • Physical connectors: 8P8C (RJ45)
prevents malicious users from using a SHOCK
port scanner to find vulnerabilities in • (IEC 60255-21-2) / Shock 10g 11ms (operational)
the network. • Shock 30g 11ms (operational and non-operational)

COOLING SYSTEM
• Menu-driven user interface
• Conductive cooling through enclosure side walls
+ Restricts command line access with high life expectancy/low noise fans

Owl Cyber Defense Solutions, LLC leads the world in data diode and cross domain network cybersecurity.
With a constant focus on customers in the military, government, critical infrastructure, and commercial
communities, Owl develops market-first, one-way data transfer products to meet a variety of operational
needs, from entry level to enterprise.

For more information on Owl, or to schedule a demo, visit www.owlcyberdefense.com

@OwlCyberDefense 203-894-9342 | [email protected]

D026 | V4 | 11-29-22