Products

Bayshore Networks builds solutions to support the real world that ICS/OT Security professionals must confront today, exponential growth in security threats, and a limited resource of human capital that understands security and the production environment.

OTfuse is an automatically configured intelligent industrial security appliance and intrusion prevention system (IPS) designed to be used by equipment operators and automation engineers. OTfuse sits at the cabinet level in front of critical endpoints and learns and enforces normal operations for your plant environment and actively eliminates threats to OT assets in real time. It protects the OT network from unauthorized config changes, device resets, device reads, logic updates and message values.

OTfuse uniquely supports GE Digital’s iFIX software proprietary protocols. Bayshore Networks collaborated with GE Digital to add a new layer of network security for six proprietary protocols used on networks where iFIX nodes, clients, and drivers operate.

OTfuse Cimplicity uniquely supports GE Digital’s Cimplicity software proprietary protocols. Bayshore Networks collaborated with GE Digital to add a new layer of network security for proprietary protocols used on networks where Cimplicity nodes, clients, and drivers operate. It controls who, how and when updates can be implemented and augments the existing application level security of Cimplicity with a multi-layered approach.

OTfuse Lite is an automatically configured industrial security appliance and intelligent Intrusion Prevention System (IPS) designed for easy deployment and use by automation engineers.

OTfuse Lite is targeted at applications that do not require the mission critical availability of the original OTfuse, but would benefit from the technology at a lower cost.

It is a physical device that sits in front of critical endpoints protecting PLCs, VFDs and other network connected devices. It learns and enforces normal operations for your environment and actively eliminates threats to OT assets in real-time. It protects the OT network from unauthorized config changes, device resets, device reads, logic updates, and message values. It is your last line of defense for protecting plant assets from unauthorized or unintended misuse. It can provide protection for up to 3 devices at under $1000 USD.

NetWall USG unidirectional security gateway for IT and OT is a high-speed, hardware and software solution that enforces data replication in only one direction.

It creates a secure network segment when installed, shielding and isolating critical assets and sensitive networks from cyberattack and misuse.

NetWall BSG (Bilateral Security Gateway) incorporates all the features of the NetWall USG (Unidirectional Security Gateway) version, but also adds the ability to receive data replies from selected destinations on the untrusted network. A TCP connection is initiated from the trusted network to a destination (such as Microsoft SQL Server) on the untrusted network using the NetWall Bilateral Security Gateway solution. The destination may respond with data back to the initiator, however, no connection can be initiated from the untrusted network back to the trusted network. Available immediately with AspenTech compatibility with MS SQL Server mid summer.

OTaccess is the only real-time Secure Remote Access solution that offers granular access control enabling customized control per protocol, per user activity and per seat with continuous monitoring and policy enforcement for the duration of every session.

Scrutiny is Bayshore’s OT asset discovery and flow visualization tool. It lets an OT network operator build a record of all devices on their network, organized by which ports and protocols are in use, and what source/destination pairs are active.