Dispel, NEOX NETWORKS, Northrop Grumman and Waterfall Security Solutions

About NEOX NETWORKS

NEOX NETWORKS provides network visibility for IT and OT observability and security. NEOX offers network visibility solutions for hybrid-cloud IT observability, including Network TAPs, Network Packet Brokers, Packet Capture, and Packet Processing and Analysis physical and virtual appliances. NEOX products address network challenges faced by IT Security and Application Operations teams. The NEOX PacketOps™ Framework unifies how organizations Access, Direct, Record, and Protect network traffic across physical, virtual, cloud, AI, IT, and OT environments. NEOX provides access to packet data, directs traffic to tools, records traffic for investigation, and protects critical infrastructure with integrated security controls.^[1][3][4]

NEOX states its mission as eliminating blind spots across physical, virtual, and cloud environments. Timur Özcan is Founder and Managing Director of NEOX NETWORKS. NEOX network visibility solutions are designed and built in Germany. For security operations, NEOX extracts and forwards log, flow and packet level network data and alerts to security tools. For network operations, NEOX extracts and forwards log, flow, and packet level network data to observability and analysis tools. For cloud operations, NEOX extracts and forwards log, flow, and packet level VPC network data and alerts to security tools. Network challenges named by NEOX include demand for high-speed network traffic access, processing and manipulation to feed security and performance tools, up to 400Gbps.^[4][6]

Network TAPs let users export a copy of their data traffic without affecting the active network connection and evaluate it with tools. NEOXPacketRaven Secure Modular Fiber TAPs are designed for use in critical environments (CRITIS). NEOXPacketRaven Secure Modular Fiber TAPs have an optical isolator and an optical filter with data diode functionality that prevent accidental or intentional injections of data into the monitored network. NEOXPacketRavenVirtual is a Virtual Network TAP that provides physical and virtual security and monitoring tools with network visibility in virtualised private, public and hybrid cloud environments. NEOXPacketRaven vTAP supports tapping of inter-Docker traffic, meaning communication between microservices.^[1]

PacketOwl is a set of 10G, 25G, 40G, and 100G network security appliances for visibility and real-time threat detection. PacketOwl is powered by NEOX’s proprietary FPGA-based architecture and an enhanced version of Suricata, the open-source network threat detection engine, and provides real-time threat detection, logging, and alerting. PacketOwl operates as a unified NIDS, NSM, and NDR platform. PacketOwl generates real-time alerts for SIEM integration, triggered by threats, anomalies, and rules. PacketOwl creates structured logs from security events and IOCs, enriched with contextual metadata. PacketOwl captures packets on detection and IOC triggers, preserving only relevant traffic. PacketOwl offers up to 720TB of onboard SSD/SED storage. PacketOwl handles up to 10,000 events per second with up to 2GB of logs per minute. PacketOwl is described as compliant with Government/Federal EO 14028, M-21-30, and FIPS 140-2. PacketOwl is integrated with the Stamus Clear NDR solution as a 100Gbps NDR probe. PacketOwl Virtual supports cloud and multi-cloud threat hunting and forensics for SDDC, AWS, Azure, and GCP. PacketOwl integrates into existing security environments on-premises, in the cloud (AWS, Azure, GCP), or hybrid. PacketOwl appliances come with NEOX SILVER Support and can be upgraded to GOLD Support for advanced replacement in case of a hardware failure.^[2][3][8]

NEOXPacketRoo is a data diode that provides galvanic isolation of the networks and enables only unidirectional transmission. NEOXPacketRoo is offered exclusively in fixed configurations where no port settings can be changed after installation. NEOX Networks offers NEOXSecureFileTransmitter, a software solution for secure, one-way file transfer from OT to IT systems. NEOXSecureFileTransmitter works independently of the manufacturer and can be integrated into existing infrastructures that already have a data diode. NEOXSecureFileTransmitter combined with PacketRoo forms a solution for Windows and Linux environments.^[9]

NEOX works with enterprises, service providers, and government institutions. PacketOwl is purpose-built for enterprises, data centers, service providers, HFT/HPC environments, edge networks, and other critical deployments. Network challenges named by NEOX include increased need for network intelligence for cybersecurity in sectors such as Banking, Utilities, Healthcare, and Government. NEOX co-creates offerings with industry specialists for verticals such as Financial Services, Healthcare, Manufacturing, Transportation, Energy & Utilities, Government, and Defense. NEOX is establishing a partner-first channel model across North America, EMEA, and APAC. Apeiro Networks acts as a value-added reseller for NEOX solutions in selected Asia Pacific countries. Deutsche Bahn needed a network visibility platform to strengthen the security posture of its public transportation critical infrastructure. NEOX offers inline-bypass TAPs for security tools during updates or maintenance, and supports encrypted traffic handling and forward proxying for financial data centers and branch deployments. NEOX feeds telemetry to tools for Network Detection & Response (NDR), Network Intrusion Detection Systems (NIDS), and Network Security Monitoring (NSM) across on-prem and hybrid infrastructures.^{[1][3][4][6][8][9][10][11]}

About Northrop Grumman

Northrop Grumman is an aerospace and defense technology company. Northrop Grumman has nearly 100,000 employees and over 30 million square feet of manufacturing space.^[9]

The NPM integrates with the system's Inertial Sensor Module, which Northrop Grumman designs and produces.^[9]

Northrop Grumman has signed two multi-year framework agreements totaling over $3 billion. Under a $2 billion framework agreement, Northrop Grumman will supply components including solid rocket motors and ignition safety devices. A $1 billion framework agreement covers increased monthly deliveries of THAAD components over seven years. Northrop Grumman is doubling the capacity to deliver solid rocket motors at its Utah facilities. Northrop Grumman is nearly tripling the capacity at the Allegany Ballistics Lab in West Virginia. Northrop Grumman is increasing solid rocket motor capacity by 25% at its Elkton, Maryland facility. Northrop Grumman has supplied THAAD with expertise for interceptor shell cores, aft bulkheads and heat shield assemblies since 2002. Northrop Grumman's San Diego plant has a 50-year legacy of production of structural components across air, land and space domains. Since 2019, Northrop Grumman has invested over $2 billion in munitions related technologies and facilities, including over $1 billion for solid rocket motor production. Northrop Grumman's investment supports the U.S. Army's growth in annual PAC-3 MSE missile production for U.S. forces and allied partners.

The Northrop Grumman Microelectronics Center (NGMC) designs, manufactures, assembles, tests and packages microelectronics for defense and commercial systems in the United States. The NGMC is comprised of three U.S. government-accredited manufacturing facilities. The facilities are two semiconductor foundries in California and Maryland and an advanced packaging facility in Florida. Northrop Grumman's Microelectronics Center is open to external aerospace and defense companies to access its three U.S. government-accredited semiconductor manufacturing facilities. FORTITUDE™ is a chip for commercial and defense RF applications that uses unique circuitry to accelerate data flow. FORTITUDE™ processes portions of the electromagnetic spectrum on a single gallium nitride chip. Space Park is a foundry in Redondo Beach, CA, known for microwave and millimeter wave technology. Baltimore foundry and facility services consist of silicon, compound semiconductors and super conducting technologies, and advanced packaging. Northrop Grumman's San Diego team delivers secure processing technologies and electronic warfare systems. Northrop Grumman has a $7 million contract to create diamond-cooled chips.^[11][14]

Northrop Grumman applies small- and medium-class satellite technologies to national security systems used for space missions and related technology demonstration programs. Mission Extension Vehicles (MEVs) provide on-orbit life-extension services to satellite operator Intelsat. MEVs extend the life of legacy satellites. Metrology Services is an ISO 17025 accredited provider of metrology and calibration services, with DC to RF/Microwave measurement capabilities to 110 GHz. Engineering services include measurement methodology, uncertainty analysis, measurement systems and software development, calibration systems review, and evaluation of capabilities, including customized training.^[12][13][14]

The UH 60V Black Hawk Integrated Mission Equipment Package modernizes legacy UH 60L helicopters with a digital, open-architecture cockpit. OpenLift™ is Northrop Grumman's modular open systems architecture (MOSA) for acquiring and delivering new capabilities to the warfighter. Operators of open architecture systems are free to work with multiple developers to upgrade capabilities. Northrop Grumman's approach to the UH-60V integrated mission equipment package draws on experience with similar upgrades for the U.S. Marine Corps AH-1Z and UH-1Y helicopters. The experience includes the U.S. Navy E-2D Advanced Hawkeye and the Royal Jordanian Air Force AH-1 program.^[9][15]

Northrop Grumman and Thales Belgium have signed a Memorandum of Understanding (MOU) aimed at advancing defense capabilities for the European region and NATO customers.^{[3][4][6][8][9][11]}

About Waterfall Security Solutions

Waterfall Security Solutions offers software-enabled hardware platforms. Waterfall Security Solutions says critical infrastructure operators face the challenge of getting data where it is needed without compromising the security of the industrial environment.^[4]

Waterfall Security Solutions sells a remote access product named HERA, short for Hardware-Enforced Remote Access. HERA provides the functionality of remote access. Hardware Enforced Remote Access enables remote management, updates, and troubleshooting for OT networks. Waterfall for IDS enables industrial intrusion detection systems to be deployed and integrated with enterprise-based and cloud-based Security Operations Centers. Unidirectional Gateways provide enterprise and out-sourced Security Operations Centers with access to vital network data. Unidirectional Cloud Gateways gather data from industrial and OT sources, convert the data into cloud-friendly protocols, and push the data through unidirectional hardware out to the Internet and to vendor and proprietary cloud systems. Vendors use Unidirectional Remote Screen View and Secure Bypass when they need to adjust manufacturing equipment remotely.^{[1][4][5][6][7][8][9][13]}

The Waterfall WF-500 DIN Rail is a Unidirectional Security Gateway in a compact design for space-constrained sites. Waterfall Security Solutions offers the smaller form factor for substations, pumping stations, compressor stations and other places where space is limited. Unidirectional Gateways replicate historians, databases, OPC servers and more to business networks. Unidirectional Gateways safely replicate OPC servers, historians and other vendor systems for use by vendor cloud services.^[8][10]

Waterfall Security Solutions protects OT systems for electric power generation, including conventional generation, nuclear generation, power transmission, power distribution, and control centers. Waterfall's unidirectional solutions enable safe ICCP and IEC 61850 MMS connectivity to third-party partners. Unidirectional Gateways forward DNP3, IEC 60870-104, IEC 61850 and other status and fault information to SCADA systems and engineering teams. Waterfall's unidirectional technology provides secure connectivity and remote access for the Oil & Gas industry throughout the supply chain, including upstream, midstream, and downstream. Unidirectional Gateways provide protection for drilling, ballast control, sub-sea operations and other aspects of offshore platforms, with high availability options available when platform policies dictate.^{[8][11][12][13]}

Waterfall's unidirectional technology protects the OT of water utilities against IT related network threats. Unidirectional Gateways provide real-time data to regulators and other third parties about emissions, treatment systems, quality sampling and other systems. Unidirectional Gateways are used for the replication of data from the mining operations' OT network to its IT network and The Cloud. Waterfall's Unidirectional technology is used to secure industrial controls for railways such as the signaling system, as well as rail operation control centers. Unidirectional Gateways replicate SQL Server and other databases of locomotive locations out to enterprise networks and cloud servers. Waterfall's unidirectional technology protects the pharmaceutical, food & beverage, automobile, aircraft and other manufacturing industries. Unidirectional Gateways replicate OEE servers and information to cloud-based systems.^{[6][7][9][12]}

Unidirectional Gateways replicate OPC servers, real-time databases, Syslog alerts, SNMP alerts and other critical performance indicators to enterprise systems and users, and external vendors and service providers. Waterfall Unidirectional Gateway hardware prevents any data exfiltration or leakage from the high security network back to the low security sources.^{[4][5][10][13]}