Last updated on April 19, 2014 at 5:20 EDT

Waterfall Unidirectional Security Gateways Earn Common Criteria EAL4+ Certification

July 31, 2012

TEL AVIV, Israel, July 31, 2012 /PRNewswire/ –

Waterfall Security Solutions announced today that their Unidirectional Security
Gateway WF-400 1Gbps product has been awarded an EAL 4+ (resistant to high attack
potential) certification under a Common Criteria security evaluation. Common Criteria is
the premier, internationally-recognized process for evaluating the trustworthiness of
security products used in military, government, and civilian settings, and EAL 4+ is the
highest internationally-recognized assurance level under the Common Criteria Recognition
Agreement (CCRA). Waterfall is the leading provider of hardware-enforced unidirectional
security for industrial control systems in critical national infrastructures.

Lior Frenkel, Waterfall’s CEO and Co-Founder, comments, “The EAL 4+ certification is
additional recognition of Waterfall’s commitment to leadership in the industrial security
marketplace. Waterfall’s unidirectional security technology was the first to be assessed
by the SCADA Security experts at Idaho National Labs, was recently recognized by Frost &
Sullivan with a Best Practice award for Industrial Network Security, and is the subject of
other international and regional security and quality certifications.”

EAL 4+ certification assures customers that a security product is robust and was
methodically defined, tested and verified. Being resistant to high-attack-potential is an
additional, elective level of certification, and means that even adversaries with
significant time, knowledge, expertise and hardware/software resources at their disposal
will find it extremely difficult to compromise the technology. The certified Waterfall
technology permits business-critical information to flow from industrial control systems
into business systems, without permitting any information to flow back into the protected
industrial network. The technology blocks the flow of all information back into the
protected network, specifically including network-propagating malware and “under the
radar” remote-control attacks by so-called “advanced persistent threats.”

“Strong network perimeter protection is essential to the safety and security of our
critical industrial infrastructures,” adds Andrew Ginter, Waterfall’s Director of
Industrial Security. “The ‘air gaps’ which historically protected control networks have
largely been replaced by much-weaker firewall technology. Unidirectional Security Gateways
allow business-critical information to flow out of a control network, without introducing
the vulnerabilities which firewalls introduce. With this certification, Waterfall
customers can be even more confident in our technology as part of their industrial cyber
security program.”

About Waterfall Security Solutions

Waterfall Security Solutions Ltd. is the leading provider of Unidirectional Security
Gateways(TM) and data diodes for industrial control networks and critical infrastructures.
Waterfall’s Unidirectional Gateways reduce the cost and complexity of compliance with
NERC-CIP, NRC, NIST, CFATS and other regulations, as well as with cyber-security best
practices. Waterfall’s products are deployed in utilities and critical national
infrastructures throughout North America, Europe, Asia and Israel. Frost & Sullivan
describe Waterfall’s solutions as ensuring “optimum security for networks across user
verticals” and awarded Waterfall the 2012 Network Security Award for Industrial Control
Systems Entrepreneurial Company of the Year. Waterfall’s offerings include support for
leading industrial applications, including the OSIsoft PI(TM) Historian, the GE
Proficy(TM) iHistorian, Siemens SIMATIC(TM)/Spectrum(TM) solutions and GE OSM(TM) remote
monitoring platforms, as well as OPC, Modbus, DNP3, ICCP and other industrial protocols.
More information about Waterfall can be found on the company’s website at:


SOURCE Waterfall Solutions Ltd

Source: PR Newswire