ARKACybersecurity
& AI
Home / Products / Unidirectional & Cross-Domain
New
CDS-500

ARKA™ CDS-500 Cross-Domain Guard

Policy-controlled, content-inspected transfer between classified and unclassified networks, in both directions.

Request a Quote Request Data Sheet
ARKACDS-500HIGH → LOWLOW → HIGH
Overview

Some missions need data to move both ways between networks of different classification, such as orders going down and reports coming up, without ever connecting those networks directly. The CDS-500 is a cross-domain guard. Every message or file is broken down, inspected against a strict schema, sanitised, approved by policy and rebuilt before it is released on the other side.

Two independent one-way paths, each with its own hardware filter, mean that each direction is controlled and audited separately. Designed for defence, intelligence, police and strategic PSU environments.

Key features

Dual one-way pathsSeparate high-to-low and low-to-high channels, each hardware-enforced and independently policed.
Deep content inspectionSchema validation for XML/JSON, file-type verification, dirty-word search, embedded-object stripping.
Content Disarm & ReconstructionDocuments are rebuilt from clean components. Macros, scripts and hidden payloads are removed.
Release officer workflowOptional human review and digital sign-off for sensitive transfers.
Classification labelsEnforces marking rules so data cannot cross to a domain below its label.
Full auditEvery transfer decision logged with hash, policy, operator and timestamp.

Technical specifications

ModelCDS-500
TypeBidirectional cross-domain guard with hardware-enforced one-way channels
Supported contentFiles (Office, PDF, images, text), XML/JSON messages, email (SMTP), chat
ThroughputUp to 500 Mbps aggregate (content dependent)
Interfaces4 x 1 GbE per domain; dedicated management per domain
Form factor2U 19" rack-mount, tamper-evident chassis
Power230 VAC, 50 Hz, redundant PSU
Warranty & support5 years OEM warranty, updates and security patches
Specifications shown are indicative. Final configuration, certifications and performance figures are confirmed in the technical proposal for each project.

Typical applications

Defence & armed forces

Exchange between operational and administrative networks.

Police & internal security

Move case data between investigative and public-facing systems.

Strategic PSUs

Controlled exchange with vendors and partners from restricted R&D networks.

Government

Secure exchange between restricted and NIC / internet-facing networks.

Related products

ARKADD-100
Flagship · Available
DD-100 · Unidirectional & Cross-Domain

ARKA™ DD-100 Data Diode

Hardware-enforced one-way UDP gateway. Data leaves the protected network; nothing can come back in.

View product →
ARKADD-1000
New
DD-1000 / DD-10G · Unidirectional & Cross-Domain

ARKA™ DD-1000 Protocol-Aware Data Diode

High-throughput data diode with built-in proxies for TCP, files, OPC UA, Modbus, historians and video.

View product →
SCANNING MEDIA6 engines · CDR · 1,284 filesARKASK-200
New
SK-200 · Media & Endpoint Security

ARKA™ SK-200 Secure Media Kiosk

Scan, sanitise and release USB, CD/DVD and SD-card files before they ever touch a plant or office network.

View product →