NIA - NATO Information Assurance

Attention: the NIAPC web site may not include all approved products.The list of approved products is always changing; there is a backlog of approved products still to be added to this information portal, and there are delays in responding to queries and inclusion of new products. NATO is reviewing options to improve collaboration and provide more timely information sharing of approved security products.

XD Guardian XML

XD Guardian XML is a dual-guard, quad-diode cross domain appliance that combines flexibility with low cost and high performance. The functional equivalent of Owl’s XD Bridge™ product, XD Guardian XML is the only exportable cross domain solution that has been assessed against the U.S. government’s most rigorous requirements for cross domain solutions.

XD Guardian XML is an assured linear pipeline Transfer Solution for fixed format and structured data between security domains. Its architecture is RTB compliant Traditional Software Based (TSB) w/Hardware Assist (THA) THA-P-1.3 Uni-Directional Assured Pipeline Design Pattern with Diodes and THA-P-1.1 Bi-Directional Assured Pipeline Design Pattern with Diodes. The XD Guardian XML includes UDP, TCP, and REST POST (file transfer only) Protocol Adapters. It also includes the use of a Data Format Description Language (DFDL) for processing of fixed format DFDL Schemas (e.g., Link 16) through assured linear pipeline of XML filters on ingest to XD Guardian XML and egress from XD Guardian XML and other structured data with XML schemas. The XD Guardian XML’s host platform, the Owl Fusion V3, includes a physical 1GbE network interface for source data connection and another 1GbE network interface for destination data connection. There is a separate processing environment for Black and another for Red. The two processing environments are connected through Optical Diode interface that links the Black Diode card with the Red Diode card. There is an isolated optical connection between Black TX and Red RX connectors (L2H). There is a separate isolated optical connection between Red TX and Black RX connectors (H2L). One is connected for uni-direction dataflows. Both are connected for bi-directional dataflows. There is no direct access to XD Guardian XML for remote monitoring or management functions. XD Guardian XML security policies and configuration are generated on stand alone customer platform and loaded on Red and Black media devices for insertion to CDS. XD Guardian XML boots up its Red/Black systems with the policies/configuration on the respective media device and loads the policies/configurations into memory. XD Guardian XML operates as a stateless device with all processing in memory. Logs/audit/journal events generated by XD Guardian XML are transferred to the respective customer identified Black rsyslog management repository.

XD Guardian XML supports both hardware enforced unidirectional and bidirectional transfer modes ensuring fast, effective, and secure data transfer between systems of differing security levels. With its standard 1U rack-mountable configuration and minimal administration requirements, XD Guardian XML can be easily deployed in enterprise applications or remote or isolated environments. Structured data filters are available for both file transfer and streaming protocols.

XD Guardian XML has undergone rigorous testing to meet U.S. government security standards.