Access Gate Datasheet.
Secure operational networks without rebuilding them. The Trout Access Gate delivers Zero-Trust protection using network overlays and security proxies, no rewiring, no downtime, no agents.
Zuletzt aktualisiert:
Download the Access Gate Datasheet.
Get the complete product overview with technical capabilities, deployment model, compliance alignment, and customer references.
What's Inside
Product architecture, deployment model, key capabilities (proxy enforcement, micro-DMZs, identity-based access), compliance alignment, and real-world customer deployments.
See It in Action
Request a live demo to see how the Access Gate deploys on your network without rewiring or downtime.
Too Much Trust in Local Area Networks.
Industrial networks were designed to be isolated. Today, they are more connected than ever, mixing IT, OT, and decades-old systems, all under pressure to digitalize. Every new connection expands exposure.
Air-Gapped to Connected
Industrial networks are more connected than ever, mixing IT, OT, and decades-old systems under pressure to digitalize.
Conflicting Priorities
Operators keep processes running while IT reduces exposure. Different KPIs, conflicting priorities, and fragile integrations.
Rebuilding Isn't an Option
Tearing down and redesigning networks is slow, costly, and impractical. Facilities can't afford to shut down for weeks.
Regulations Are Piling Up
Sites must demonstrate compliance with NIS2, CMMC, IEC 62443, and sector-specific mandates on networks never designed for it.
A Dedicated Security Proxy Per Asset.
TAG delivers Zero-Trust protection for operations without rewiring or downtime. The on-premise appliance uses network overlays and security proxies to shield critical assets with micro-DMZs, enforce identity-based access, and contain lateral movement.
Software-Injected Proxy
No rewiring or changes to the underlay network. Asset cloaking and L3-7 protection deployed through software-defined networking.
On-Premise Appliance
On-premise data processing, local enforcement, better performance. No cloud dependency for security decisions.
Agile Configuration
Agile management layer bringing Zero-Trust capabilities to OT environments with policy-driven automation.
Compliance: Aligned with CMMC, NIST 800-82, NIS2, and DoD OT Zero-Trust guidance.
Der Proxy kommt Flow für Flow ins Netz. Die Produktion steht nie still.
Software-defined Networking macht das Einfügen sicher. Access Gate baut eine 1:1-Kopie des Netzwerks, den Secure Twin: Jedes Asset behält IP, Gateway und Routing und bekommt eine Zwillingsadresse, die über den Proxy läuft. Ein Asset unter Schutz zu stellen heißt, zu ändern, wohin sein Verkehr geschickt wird, nicht, wie das Netz verkabelt ist. Das Underlay bleibt exakt, wie es ist, also gibt es kein Umschaltfenster, das mit dem Betrieb verhandelt werden müsste.
- 01
Twin DNS
Für Assets, die per Name erreicht werden: Der Eintrag löst auf die Zwillingsadresse auf, der Flow läuft über den Proxy. Ein Eintrag, ein Asset, geprüft vor dem nächsten.
- 02
Twin IPs
Für Assets, die per Adresse erreicht werden: Ein einziges Feld am Client ändert sich, das Ziel, von der echten Adresse auf den Zwilling. Nichts wird gespooft, der Betreiber sieht genau, wohin der Verkehr geht.
- 03
Quellbasiertes Routing
Für ein ganzes Subnetz auf einmal: Eine Route auf dem vorhandenen Switch oder Router schickt seinen Verkehr in den Zwillingsbereich. Keine VLAN-Änderung, keine Neuadressierung.
- 04
In-line-Betrieb
Wenn Access Gate das Gateway des Standorts ist und VLANs und Trunks selbst trägt, läuft der Verkehr nativ hindurch, und es ist kein Schritt pro Asset nötig.
Rückbau: Jeder Schritt lässt sich einzeln zurücknehmen: Eintrag, Feld oder Route zurücksetzen, und das Asset ist wieder im Underlay. Im benachbarten Betrieb läuft das Netz weiter, wenn die Appliance offline ist.
Common Questions About the Access Gate.
agents required. The Access Gate deploys inline and protects assets at the network level, no software on endpoints.
The Trout Access Gate (TAG) is an on-premise appliance that delivers Zero-Trust protection for operational networks. It uses software-defined networking to inject security proxies in front of each OT asset, creating per-asset micro-DMZs without rewiring, downtime, or agents.
The appliance is rack-mounted at the site. It passively learns OT communications and identifies devices, then transparently inserts a policy enforcement proxy in front of each asset through an SDN overlay. The underlying network stays exactly as it is.
No. The Access Gate builds a virtual overlay on top of your existing network using standard IP routing and bidirectional NAT. No VLAN changes, no IP renumbering, no recabling. Legacy PLCs, HMIs, and SCADA systems work without modification.
The Access Gate is aligned with CMMC, NIST 800-82, NIS2, IEC 62443, and DoD OT Zero-Trust guidance (DTM 25-003). It provides the segmentation, identity enforcement, and audit logging required by these frameworks.
Yes. The Access Gate operates at the network level with no agents or software changes on endpoints. It protects assets that cannot be patched, updated, or scanned, including PLCs, HMIs, safety controllers, and equipment that is 10, 20, or 30+ years old.
