1. [Home](https://www.g2.com/)
2. ...
3. [Hardware Monitoring Software](https://www.g2.com/categories/hardware-monitoring)
4. [Waterfall HERA – Hardware Enforced Remote Access Discussions](https://www.g2.com/products/waterfall-hera-hardware-enforced-remote-access/discuss)

[
 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_b9a052d56d745680c44f1f2d5730e986/waterfall-hera-hardware-enforced-remote-access.png "Product Avatar Image")
](/products/waterfall-hera-hardware-enforced-remote-access/reviews)

[

Waterfall HERA – Hardware Enforced Remote Access

](/products/waterfall-hera-hardware-enforced-remote-access/reviews)

0 ratings

HERA Gateway Under the hood of HERA are two instances of Waterfall’s flagship Unidirectional Security Gateways technology. One Unidirectional Gateway is oriented from the protected OT network out to the Internet-exposed IT network or to the Internet directly. That gateway’s hardware is physically able to send information in only one direction – the gateway sends HERA screen images out to the remote user across the Internet. Nothing can get back. The second gateway under the hood of HERA is a variation of the standard Unidirectional Gateway. This gateway does two things. First, this second gateway sends HERA encrypted keystrokes and mouse movements (KMM) back into the OT network through the unidirectional hardware – nothing can get back out through that hardware. Second, the inbound hardware has gate array logic built in, and this logic scans the unidirectional communications and allows only the very simple encrypted HERA KMM information to pass – all other attempts at communication are rejected. Finally, on the OT network, that gateway’s receiving CPU runs virtual machine (VM) software, creating a brand new VM for each remote user session. To recap, under the hood of the HERA gateway is: • An inbound Unidirectional Gateway, which contains: o An Internet-exposed CPU interacting with the remote user / laptop, o One-way hardware that permits only encrypted KMM data to pass, and o A CPU on the OT network receiving the encrypted KMM data, decrypting that data and sending keystrokes and mouse movements to the remote users’ session VMs, • An outbound Unidirectional Gateway, which contains: o A CPU on the OT network receiving screen images from the HERA VMs, o One-way hardware, o A CPU on the IT/Internet sending copies of HERA’s session VM screens across the Internet to remote users. The whole solution fits in 2u of rack space.

Show More

When users leave Waterfall HERA – Hardware Enforced Remote Access reviews, G2 also collects common questions about the day-to-day use of Waterfall HERA – Hardware Enforced Remote Access. These questions are then answered by our community of 850k professionals. Submit your question below and join in on the G2 Discussion.

* * *

### 0.0

Nps Score

### All Waterfall HERA – Hardware Enforced Remote Access Discussions

Search

Most CommentedMost HelpfulPinned by G2Newest

All DiscussionsDiscussions with CommentsPinned by G2Discussions without Comments

FilterFilter

Filter byExpand/Collapse 

Sort by

Most Commented

Most Helpful

Pinned by G2

Newest

Filter by

All Discussions

Discussions with Comments

Pinned by G2

Discussions without Comments

Sorry...

There are no questions about Waterfall HERA – Hardware Enforced Remote Access yet.

## Start a New Software Discussion

Have a software question?

Get answers from real users and experts

[Start A Discussion](/products/waterfall-hera-hardware-enforced-remote-access/discussions/new)

* * *

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/thumb_square/thumb_square_b9a052d56d745680c44f1f2d5730e986/waterfall-hera-hardware-enforced-remote-access.png "Product Avatar Image")

### Have you used Waterfall HERA – Hardware Enforced Remote Access before?

Answer a few questions to help the Waterfall HERA – Hardware Enforced Remote Access community

[
Yes
](javascript:void(0))[
Yes
](https://www.g2.com/authorize?form=signup&return_to=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fwaterfall-hera-hardware-enforced-remote-access%2Fdiscuss%3Fsmall_ask%3Dwaterfall-hera-hardware-enforced-remote-access)
No