The BlastShield Security Gateway delivers a unique combination of network cloaking, secure remote access, and software-defined microsegmentation, minimizing the attack surface, eliminating passwords, and enabling segmentation without network downtime. It is a natural evolution and replacement for the IT firewall and VPN solutions that evolve OT networks to Zero Trust. The BlastShield Security Gateway blocks the remote classes of risk identified by the MITRE ATT&CK framework, drastically altering the Return on Mitigation equation for OT networks and delivering the highest ROI by stopping most attacks before they can begin. The Security Gateway is deployed between the IT and OT networks in the DMZ. It can be deployed in a standalone or HA mode to ensure continuous operation. Select the platform with the desired interface modules below, and the system will be configured with the latest version of BlastShield Security Gateway software and be ready to installed on your network.
The BlastShield Security Gateway delivers a unique combination of network cloaking, secure remote access, and software-defined microsegmentation, minimizing the attack surface, eliminating passwords, and enabling segmentation without network downtime. It is a natural evolution and replacement for the IT firewall and VPN solutions that evolve OT networks to Zero Trust. The BlastShield Security Gateway blocks the remote classes of risk identified by the MITRE ATT&CK framework, drastically altering the Return on Mitigation equation for OT networks and delivering the highest ROI by stopping most attacks before they can begin.
The Security Gateway is deployed between the IT and OT networks in the DMZ. It can be deployed in a standalone or HA mode to ensure continuous operation. Select the platform with the desired interface modules below, and the system will be configured with the latest version of BlastShield Security Gateway software and be ready to installed on your network.
Industrial-Grade Hardware Built for Zero Trust Security
Axiomtek offers a robust lineup of industrial hardware ideal for BlastShield applications, enabling secure and reliable network protection across IT, OT, and IoT environments. Our DIN-rail fanless embedded systems are perfectly suited to serve as hardened gateway devices, providing stable, long-life operation in harsh or space-constrained deployments. With rich I/O, extended temperature tolerance, and industrial-grade components, Axiomtek platforms are built to support the deployment of BlastShield’s Zero Trust Network Access across edge, remote, and legacy infrastructure. Whether you're isolating unpatchable OT systems or enabling encrypted site-to-site tunnels, Axiomtek provides the scalable, high-performance hardware foundation needed for secure, next-generation connectivity.
BlastShield® Compact Gateway
ICO120-N3350-BW (LTE Optional)
- Features:
- Intel® Celeron® processor N3350 2C@1.1GHz
- COM, 2 USB2.0, 2 GbE LAN, 1 HDMI
- Wide operating temperature range from -20°C to +70°C
- 12 to 24 VDC wide range power input with AC adapter
- Microsoft Azure IoT Edge certified
- System Configuration:
- Part #: E22C120114 - ICO120-E3350-A 2COM-2LAN
- DRAM: WT DDR3L-1600 4G 204P
- Storage: MINI-MSATA 120GB BICS5 -40°C-85°CAC
- Adapter: AC ADAPTER 12V 36W FERRULE TIPS 100-240V
- Power cord: POWER CORD 1830MM (10A/18AWG)
- Optional: LTE - VERIZON, T-MOBILE, and AT&T LTE MODULE FOR ICO SERIES
BlastShield® Cybersecurity Gateway
iNA110-E3940-BW
- Features:
- Intel Atom® x5-E3940 processor (Apollo Lake)
- 4 GbE RJ-45 (Intel® I210-IT) with LAN Bypass
- Wide operating temp range from -40°C to +70°C
- 9 to 36 VDC, typical 12-24V power input with OVP, UVP, OCP, RPP
- Supports TPM 2.0
- Ideal for ICS cybersecurity and critical infrastructure protection
- System Configuration:
- Part #: E27B110100 - INA110-E3940-A W/INTEL E3940
- DRAM: 204PIN SO-DIMM DDR3L 8GB 1600MHZ
- Storage: 128GB 2.5" SATA3 3D TLC BiCS5 -40-85CAC
- Adapter: AC ADAPTER 12V 36W FERRULE TIPS 100-240V
- Power cord: POWER CORD 1830MM (10A/18AWG)
BlastShield® ATEX/CID2 System
ICO300-83M-BW (C1D2 Certified)
- Features:
- Intel Atom® x5-E3930 processor
- 6 isolated COM, isolated DIO (8-in/8-out), 3 GbE LAN
- Wide operating temperature range from -40°C to +85°C
- 9 to 36 VDC, typical 12-24V power input with OVP, UVP, OCP, RPP
- Supports TPM 2.0
- ATEX/Class I Division 2 (CID2) certified
- System Configuration
- Part #: E22C300154 - ICO300-83M DIN-RAIL w/INTEL x5-E3930 - ATEX/C1D2 Certified
- DRAM: WT DDR3L-1600 4G 204P
- Storage: MINI-MSATA 120GB BICS5 -40°C-85°CAC
- Adapter: AC ADAPTER 12V 36W FERRULE TIPS 100-240V
- Power cord: POWER CORD 1830MM (10A/18AWG)
BlastShield® Verified Use Cases
BlastShield is applied across numerous verified use cases to replace traditional VPNs, firewall rules, and hardware-based access controls with a modern, high‑performance Zero Trust Network Access (ZTNA) solution. It supports secure remote access, rendering devices invisible to unauthenticated users and enforcing phishing-resistant multi‑factor authentication, while delivering performance up to 34× faster than competing solutions. Additionally, BlastShield safeguards IoT data‑in‑motion via lightweight client or gateway agents, and supports granular privileged access management and conditional SaaS access through its proxy architecture, all within one consolidated SDP framework.
Environmental Monitoring and Control
System for Smart Buildings
Secured Gateway Devices
to Protect Network Operations
Oil and Gas Monitoring and Control
for Production Optimization
