Japan Direx Corporation Product Lineup

"TiFRONT" is a cloud-managed security switch that detects and blocks SMB communications used for the spread of ransomware. It prevents network downtime with its self-loop prevention feature. Configuration can be completed with zero-touch installation via cable connection. Additionally, if there is an internet environment, centralized management is possible on the cloud. It can be installed anywhere without the need for a management server. 【Features】 ■ Automatic blocking of target ports to prevent loops ■ Cloud management that requires no management or labor ■ L2 switch-based network security *For more details, please download the PDF or feel free to contact us.

• switch

The Application Delivery Controller is a product that enhances application delivery performance by adding advanced features such as acceleration and security to network devices known as load balancers and L4 switches. The "PAS-K Series" provides value in terms of service availability, performance, and security, thereby increasing the trust and satisfaction of application users in the services. Additionally, it evenly distributes traffic to each server. Load balancing can also be applied to servers, firewalls, VPNs, and gateways. 【Features】 ■ Guarantees application availability ■ Secure application delivery ■ Improved service experience quality ■ Service expansion and management, cloud integration *For more details, please download the PDF or feel free to contact us.

• controller

This document is a technical resource that explains the seven strategies for effectively protecting industrial control systems, as announced by the U.S. Department of Homeland Security (DHS), and how Owl's DualDiode products can be utilized in response. It introduces the details of each strategy, including whitelisting, reducing the attack surface, authentication management, and secure remote access, along with illustrations of the role of data diodes. We hope this will be useful for your cybersecurity measures for critical infrastructure. [Contents] - Application whitelisting - Configuration/Patch management - Reducing the attack surface - Building a defendable environment - Authentication management - Implementing secure remote access - Monitoring and response *For more details, please download the PDF or feel free to contact us.

• Other security

This document is a product brochure introducing Owl's data diode solution, which provides cybersecurity for substations. It features the OPDS product series, including real-time remote HMI, modem support, and total cost of ownership reduction, along with usage examples. Specific case studies are also presented, such as secure remote HMI for FACTS equipment and secure transmission of monitoring information from SVC. [Contents (partial)] ■ Real-time remote HMI ■ Modem support ■ Total cost of ownership reduction ■ Use case: Secure remote HMI for FACTS equipment ■ Use case: Secure transmission of monitoring information from SVC ■ Use case: Warning data from static reactive power compensation devices *For more details, please download the PDF or feel free to contact us.

• Other security
• diode

This document is a technical explanation that summarizes the latest trends and case studies of one-way communication device data diodes. It includes cybersecurity standards and best practices, seven strategies recommended by the U.S. Department of Homeland Security (DHS) to protect critical infrastructure, and examples of industrial network usage. It also features an introduction to Owl's data diode products, which can serve as a reference for product selection. [Contents] ■ Introduction to OWL ■ Cybersecurity standards and best practices (techniques) ■ Seven strategies to protect critical infrastructure by the U.S. Department of Homeland Security (DHS) ■ Examples of industrial network usage ■ Introduction to OWL's data diode products *For more details, please download the PDF or feel free to contact us.

• Other security
• diode

This catalog provides an overview of 16 use cases implementing Owl's data diode cybersecurity. It includes examples from a diverse range of critical infrastructure sectors such as oil and gas, natural gas, nuclear power, banking, transportation, and healthcare. Each case clearly outlines the challenges, solutions, and benefits, serving as a reference material for consideration during implementation. [Contents (partial)] ■ A global oil and gas company achieves one-way production data transfer to headquarters ■ A natural gas company ensures the security of production data transfer to headquarters and implements remote alarm monitoring ■ A gas turbine vendor achieves secure monitoring of power plants ■ A petrochemical company realizes a secure one-way production data flow to business IT ■ A rare earth mining company ensures the security of its operational network against cutting-edge persistent attacks *For more details, please download the PDF or feel free to contact us.

• Other security

Our company provides an intelligence service called "IT Clinic Service," which measures and analyzes network packet flows in real-time to understand the actual situation. Based on the concept of each clinic, we employ a unique measurement plan and testing methods that interrelate multiple techniques, rules, and know-how. This service allows for a comprehensive and multifaceted diagnosis and investigation of IT systems. 【Features】 ■ Methodology design leveraging extensive knowledge and insights ■ Investigation of static and dynamic realities ■ Visualization of application behavior ■ Quantification of experiential quality through end-to-end measurement ■ Acceleration of measurement, analysis, and reporting *For more details, please download the PDF or feel free to contact us.

• Other services

"PacketStorm" is a product that allows for easy and repeatable reproduction of faults occurring on IP networks. It is also capable of reproducing state transitions of IP networks, accommodating traffic models that include all elements such as traffic, time, and conversions to other traffic flows. It features video-related functionalities such as dynamic faults with separate queues for DASH (Dynamic Adaptive Streaming over HTTP) video testing, FEC-enabled matrices, hitless/seamless protection switching, and offset RTP marker filters for active video. 【Product Lineup】 ■PacketStorm Hurricane III ■PacketStorm 200E ■PacketStorm 400E *For more details, please download the PDF or feel free to contact us.

• Development support tools (ICE, emulators, debuggers, etc.)

The "OWL PI Transfer Service (OPTS)" directly links with the PI historian data of the source network, replicating the data and securely transferring it to the destination network via DualDiode. At the destination network, you can either build a historian from scratch or add to an existing historian. It is possible to run the configuration on off-the-shelf servers or on any of the Owl DualDiode appliances (OPDS-100D, OPDS-1000). The appliance device features an all-in-one single-box solution, while the server configuration can accommodate large-scale historians and high throughput requirements. 【Features】 ■ Support for multiple historians ■ Types of PI data transfer ■ High availability and clustered configuration *For more details, please download the PDF or feel free to contact us.

• Other security

The "OPDS-1000" is a product designed to create a cyber boundary that protects the area around a factory. It is designed with consideration for the demanding requirements of industrial control applications and supports various software interfaces (connectors) for applications that generate critical business data (sensor information, data points, database historians, alarms, etc.). This data is securely transmitted to the business network and is used in management tasks such as remote monitoring and production planning. It is EAL certified, has passed shock and vibration tests, and is equipped with numerous physical security features to prevent tampering and modification. 【Features】 ■ High communication speed ■ Flexible incremental throughput ■ Physical self-defense *For more details, please download the PDF or feel free to contact us.

• Other security

The "eΣmini" is a synchronous 64Kbps internal modem that adopts a genuine phase modulation method. The multi-port model can connect up to four terminals. TDM (Time Division Multiplexing) mode and MSU (Direct Current Branch) mode can be selected. Like a standard modem, it is designed to be equipped with complete remote monitoring capabilities (optional), but to prioritize cost-effectiveness for internal use, the basic model includes built-in relay contact outputs for alarms. 【Features】 ■ Monitoring alarm function can be freely selected ■ Network monitoring function ■ Designed to configure a collection modem ■ Provides a 64Kbps internal modem that adopts a genuine phase modulation method ■ Communication distance is guaranteed up to 8Km *For more details, please download the PDF or feel free to contact us.

• Converters and Transducers

The "eModem V.33" is a four-wire full-duplex/semi-duplex analog dedicated line modem with a maximum speed of 14,400 bps. To simplify setup, it provides 16 selectable profiles for typical application setups. It is equipped with software downloading capabilities, making it easy to upgrade the modem. In the event of dedicated line failures or modem circuit malfunctions, it has the functionality to reroute through ISDN lines to restore communication. It operates under the Direx nTNM network management system, which allows for comprehensive monitoring, diagnosis, control, statistics, and management of the network. 【Features】 ■ Simplified modem setup through policy settings ■ Software downloading ■ Reduced downtime with automatic ISDN backup ■ Centralized network management ■ Group modems and standalone modems ■ Optimization of dedicated line performance *For more details, please download the PDF or feel free to contact us.

• Converters and Transducers

The "eModem V.32bis" is an analog dedicated line modem that optimizes the performance of dedicated lines and reduces response time. This product is equipped with 16 selectable profiles for setting up typical applications and also features software downloading capabilities for DSP technology modems. In the event of a dedicated line failure or modem circuit malfunction, it has the ability to reroute via ISDN lines to restore communication. It operates under the Direx nTNM network management system, which provides comprehensive monitoring, diagnostics, control, statistics, and management of the network. 【Features】 ■ Simplification of modem setup through policy settings ■ Software downloading ■ Reduction of downtime through automatic ISDN backup ■ Centralized network management ■ Aggregated modems and standalone modems ■ Optimization of dedicated line performance *For more details, please download the PDF or feel free to contact us.

• Converters and Transducers

The "eModem V.29Fast" is an analog dedicated line modem that optimizes the performance of dedicated lines and reduces response times. This product is equipped with 16 selectable profiles for setting up typical applications and also features software downloading capabilities to the modem. In the event of a dedicated line failure or modem circuit malfunction, it has the ability to reroute via ISDN lines to restore communication. It operates under the Direx nTNM network management system, which provides comprehensive monitoring, diagnosis, control, statistics, and management of the network. 【Features】 ■ Simplification of modem setup through policy settings ■ Software downloading ■ Reduced downtime with automatic ISDN backup ■ Centralized network management ■ Group modems and standalone modems ■ Optimization of dedicated line performance *For more details, please download the PDF or feel free to contact us.

• Converters and Transducers

The "eModem V.26bis" is a 2400bps Half-Duplex Analog Dial-up Modem. This product allows you to continue using a reliable service based on the V.26bis modem and a subscriber telephone line. The applicable line is a subscriber telephone line, the communication method is 2-wire half-duplex, the communication standard complies with ITU-T V.26bis, and the data signal speed is 2.4Kbps ±0.01%. It can be mounted in a collection type with 12 units per shelf, and a standalone type is also available. 【Features】 ■ ITU-T V.26bis 2-wire half-duplex modem for subscriber telephone lines ■ Equipped with a self-test function ■ Built-in AA type NCU *For more details, please download the PDF or feel free to contact us.

• Converters and Transducers

The "D-Diode Type II" is an intermediate device placed between the server and the client, designed to ensure that intrusions from the server-side network to the client are effectively prevented. As for the functional structure of this device, it includes a "server emulator section" and a "client emulator section" to be applicable to the TCP protocol, emulating the TCP communication between the client machine and the server machine and terminating it. Regarding data in the reverse direction, instead of using a method that logically prohibits access like a firewall, this device itself is a complete one-way transmission that physically transmits only one-way data, thereby ensuring effective intrusion prevention. 【Features】 ■ Enhances security at low cost ■ Achieves protocol break (non-IP conversion) *For more details, please download the PDF or feel free to contact us.

• Communications

The "ATALANTA-PEP II 100M" is a variable bandwidth adaptive QoS and throughput improvement device that enables acceleration of TCP/IP communication. This product is installed at the entrance of the IP network at each site and divides the relay bandwidth for multiple paths of traffic flow control against a best-effort service network, realizing a DiffServ-type network between endpoints. With the "two-point control TCP acceleration function," it prevents throughput degradation of TCP communication due to network latency and TCP congestion control due to packet loss, and also allows for bandwidth compression (LZ compression). 【Features】 ■ Optimal allocation of communication bandwidth resources under variable bandwidth: Autonomic QoS control (variable bandwidth adaptive QoS) ■ Enables acceleration of TCP/IP communication: Rate-based transfer ■ 10M type also available *For more details, please download the PDF or feel free to contact us.

• Network related equipment and software

The "ATALANTA-PEP II 10M" is a variable bandwidth adaptive QoS and throughput improvement device that optimally allocates communication bandwidth resources under fluctuating bandwidth conditions. This product is installed at the entrance of the IP network at each site and divides the relay bandwidth for flow control of multiple traffic paths against a best-effort service network, realizing a DiffServ-type network between endpoints. It automatically measures fluctuating bandwidth and implements transmission control according to bandwidth variations. It controls the transmission packets with millisecond granularity and supports monitoring of contracted speeds on the network side (policing). 【Features】 ■ Optimal allocation of communication bandwidth resources under fluctuating bandwidth: Autonomic QoS control (variable bandwidth adaptive QoS) ■ Acceleration of TCP/IP communication is possible: Rate-based transfer ■ 100M type also available *For more details, please download the PDF or feel free to contact us.

• Network related equipment and software

The "ATALANTA-PEP I 100M" is a point control type QoS and throughput improvement device that enables acceleration of TCP/IP communication simply by being installed on the center side. This product is installed at the entrance of the IP network and performs traffic flow control for multiple paths by dividing the relay bandwidth against the WAN network, thereby realizing a QoS-controlled network between endpoints. The "point control type traffic acceleration function" prevents throughput degradation of TCP communication due to delays and TCP congestion control caused by packet loss. 【Features】 ■ Optimal distribution of communication bandwidth resources: Point control type QoS ■ Enables acceleration of TCP/IP communication just by being installed on the center side ■ 10M type also available *For more details, please download the PDF or feel free to contact us.

• Network related equipment and software

The "ATALANTA-PEP I 10M" is a point control type QoS and throughput improvement device that optimally allocates communication bandwidth resources. This product is installed at the entrance of an IP network and divides the relay bandwidth for traffic flow control of multiple paths against the WAN network, enabling a QoS-controlled network between endpoints. It fully utilizes the broadband line, protecting and accelerating important business traffic, while slowing down applications that can be transferred over time and less important traffic to an appropriate speed. 【Features】 ■ Optimal allocation of communication bandwidth resources: Point control type QoS ■ Can accelerate TCP/IP communication simply by being installed on the center side ■ 100M type also available *For more details, please download the PDF or feel free to contact us.

• Network related equipment and software

"AIRTMS" is a Wi-Fi security sensor that eliminates threats lurking in Wi-Fi to create a clean Wi-Fi environment. This product consists of two components: a manager and a sensor. The manager analyzes and visualizes the information collected by the sensor and executes policy distribution to the sensor. The sensor is installed in areas where security needs to be enhanced and continuously monitors the Wi-Fi environment according to the policies instructed by the manager. If it detects unauthorized use of Wi-Fi that violates the policies, it immediately disconnects the corresponding Wi-Fi connection. 【Features】 ■ Instantly (0 to 4 seconds) shuts out unauthorized Wi-Fi use ■ Disconnects wireless LAN connections that are not under management, such as tethering and portable Wi-Fi routers ■ Can be implemented as an independent system separate from existing networks *For more details, please download the PDF or feel free to contact us.

• Other security

The "Acunetix Web Vulnerability Scanner (WVS)" is software that diagnoses vulnerabilities lurking in websites. This product diagnoses vulnerabilities in websites by sending a variety of diagnostic scripts while crawling the target site, checking for the possibility of serious damage such as the leakage of important data like personal information or tampering with the website. If vulnerabilities are detected, it supports the maintenance of website safety by reporting the locations of the fixes, countermeasures, and attack methods. With an automatic diagnostic scheduler and reporting function, it makes regular checks and reporting easy to implement. 【Features】 ■ Excellent detection rate with very few false positives ■ Detects SQL injection in all SQL statements, including INSERT statements ■ Detects backdoors and information retrieval methods that attackers may implant in websites ■ Detailed reporting features (code numbers, stack traces, SQL queries) *For more details, please download the PDF or feel free to contact us.

• Other security

"TiFRONT" is a security switch that adds security features to L2 switching functions, inspecting traffic in front of client PCs. By installing it in the position of existing L2 switches or as a floor switch above island hubs, TiFRONT can automatically perform "detection, blocking, and release" independently, or implement internal measures for "immediate blocking upon detection" in conjunction with various already deployed security gateway products. 【Features】 - Switch with security functions - Achieves multi-layer defense - Detects and blocks attacks independently - Blocks in conjunction with already deployed security gateway products - Visualization of internal networks through the TiFRONT integrated management system For more details, please contact us or download the catalog.

• Routers, Switches, and Hubs