Solution

Seclab Secure Xchange Network SXN

Seclab

Screenshot

https://www.seclab-security.com/seclab-sec-xn/

Where it is used
SNCF: deployed on the edge zone of the critical and less critical network
Open source
No
Railway specific
No
Niche product
No
Easy to install
No
allows securing between a critical and non-critical network (breaks down the frames of the non-application lower layers 1 to 4)

Features

Installing Sec-XN in your infrastructure allows to you: Isolate and hide two networks however interconnected; Secure flows; Secure your file transfers. One example addressed by Sec-XN is the connectivity between two networks with need from the shop floor to remote operations (e.g. for program updates), data capture & consolidation, new-gen SCADA system. Connecting the shop floor to traditional Information Technology (IT) networks may introduce threats of varying impact. Sec-XN removes most of those threats and enable other security products such as next gen firewalls to add even more security while being themselves protected from network attacks thanks to the Secure eXchange Network product. This approach enables our customers to either burn once-for-ever a configuration, or change it using the tooling provided to our channels.

Benefits

until this gateway was installed - no IP flows were allowed to signaling systems for eg

Challenges

underestimates of the number of flows that passed through the gateway / limitation of the number of flows that required a custom CR for the SNCF (other CR were requested)

Weakness

product not suitable for VOICE traffic/flow in that case we go for SBC type product

Proof of concept

SNCF