Protect CUI on every machine in your plant.

It works either way. For CUI that stays on site, Access Gate covers the controls on premises, and whether you also need GCC High depends on your contract. If you run GCC High or CUI Vault, the two are complementary. The enclave holds CUI in the cloud. Access Gate protects it where it reaches your plant and its machines, which is where the enclave's boundary ends.

CMMC Level 2 requires all 110 controls of NIST SP 800-171 for contractors that handle CUI. Third-party C3PAO assessments have been suspended since 13 July 2026. The controls, the self-assessment and the SPRS affirmation still apply. Access Gate covers the technical network controls on site: access, audit, identification and encryption.

A CMMC Level 2 checklist maps to the 110 NIST 800-171 controls across 14 families. They include access control, audit, identification and authentication, configuration management and communications protection. Access Gate enforces 87 of the 110 at the network layer and produces the evidence for each. The remaining 23 are customer-owned process controls, tracked in a Shared Responsibility Matrix.

Access Gate is installed in a day. It connects to your existing network, with no re-cabling and no IP changes. A single-plant CUI enclave is complete in a week, including scope, policies and evidence. With CUI Vault, the full setup from cloud enclave to machine is up in a week.

Access Gate provides enforcement evidence for 87 of the 110 NIST 800-171 controls. Coverage is strongest in access control, audit, configuration management, identification and authentication, and communications protection. The other 23, such as physical security and personnel screening, are customer-owned. The Shared Responsibility Matrix shows which controls Access Gate enforces, which it supports and which stay with you. Assessors can review access logs, policies and session recordings on demand.

Yes. Vendors log in with MFA and reach only the machines you allow, for a limited time. Every session is recorded. The link runs over the VPN built into Access Gate CMMC Edition, which uses a FIPS 140-3 validated cryptographic module.

A CUI enclave is an isolated part of your network that holds every system touching CUI: file servers, engineering workstations, printers and the shop-floor machines that receive drawings and toolpaths. Only the enclave is in scope for a CMMC Level 2 assessment. It can run on premise or extend a GCC High enclave such as CUI Vault down to your plant. See the CUI enclave architecture.