{"id":3457,"date":"2026-01-12T15:10:13","date_gmt":"2026-01-12T14:10:13","guid":{"rendered":"https:\/\/www.seclab-security.com\/?p=3457"},"modified":"2026-04-02T13:17:49","modified_gmt":"2026-04-02T11:17:49","slug":"it-ot-isolation-railway-transport","status":"publish","type":"post","link":"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/","title":{"rendered":"Digitalization of Practices & Opening to competition: IT Network and Signaling Network Separation"},"content":{"rendered":"
\n

Digitalization of Practices & Opening to competition: IT Network and Signaling Network Separation<\/span><\/b><\/h1>\n<\/div>\n

Context and requirements<\/strong><\/span><\/h3>\n

Following market liberalization, the railway company must allow third-party operators to access certain information (train positions within a station, trainset location, etc.), while ensuring a high level of security, as third parties must not be able to access the signaling network.<\/p>\n

Requirements:<\/p>\n

    \n
  • IT \/ OT Interconnection<\/li>\n
  • Regulatory compliance<\/li>\n
  • Isolation of interconnection with third parties<\/li>\n<\/ul>\n

    \"Signaling<\/h3>\n

    Process<\/strong><\/span><\/h3>\n

    The company needed to compare several technologies (firewall, diode, protocol break application\/hardware). Two findings were made:<\/p>\n

      \n
    1. An attacker can exploit a vulnerability in security software that is not up to date.<\/li>\n
    2. The use of a data diode forces the network into unidirectional transfers in a context where bidirectional communication is required.<\/li>\n<\/ol>\n
      \n

      A validation of the security level using the NATO test kit, as well as a functional validation of the architecture (application flows), were required.<\/span><\/p>\n<\/div>\n

      \n
      \n

      Selected solution<\/span><\/b><\/span><\/h3>\n<\/div>\n
      \n

      Selected solution was Seclab protocol breaking (in addition to Stormshield\u2019s application-level analysis). This new architecture enables the company and the third party to exchange data in a bidirectional, secure, and controlled manner, thanks to protocol break enforced by electronics and filtering configured in accordance with the company\u2019s security policies.<\/span><\/p>\n<\/div>\n

       <\/p>\n

      \n

      \"Electronic<\/h3>\n

      <\/h3>\n

      Results and customer benefits<\/strong><\/span><\/h3>\n

      Thanks to this new architecture, data exchanges are secure and controlled<\/strong>: information can flow between the company and the third party, but only files that comply with the company\u2019s security policy are allowed to enter the network. Electronic isolation physically isolates and conceals the two environments.<\/p>\n

      Compliance: <\/strong>The architecture was certified compliant with the National Cybersecurity Agency of France requirements (ZEHO regulatory compliance).<\/p>\n

      Risk Management:<\/strong> The solution addresses the following risks:<\/p>\n

        \n
      • Footprinting \/ scanning<\/li>\n
      • Sophisticated network attacks<\/li>\n
      • Application-layer attacks<\/li>\n
      • Zero-day exploitation: no dependency on software patching<\/li>\n<\/ul>\n

        Long-Term Support:<\/strong> The solution provides a stable, sustainable, and maintainable architecture over the long term, independent of rapid software evolution cycles. It therefore ensures a lasting level of security and resilience.<\/p>\n<\/div>\n<\/div>\n

         <\/p>\n

         <\/p>\n","protected":false},"excerpt":{"rendered":"

        Digitalization of Practices & Opening to competition: IT Network and […]<\/p>\n","protected":false},"author":5,"featured_media":2807,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[84],"tags":[],"class_list":["post-3457","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-use-cases"],"yoast_head":"\nIT\/OT separation: secure signaling network, ANSSI compliance<\/title>\n<meta name=\"description\" content=\"IT\/OT separation for transport: secure isolation. Protect your third-party access. Zero-day protection, hardware protocol break.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"IT\/OT separation: secure signaling network, ANSSI compliance\" \/>\n<meta property=\"og:description\" content=\"IT\/OT separation for transport: secure isolation. Protect your third-party access. Zero-day protection, hardware protocol break.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/\" \/>\n<meta property=\"og:site_name\" content=\"Seclab Security\" \/>\n<meta property=\"article:published_time\" content=\"2026-01-12T14:10:13+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-04-02T11:17:49+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.seclab-security.com\/wp-content\/uploads\/2026\/03\/Apercus-cas-usage.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1616\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Marion Bulteau\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Marion Bulteau\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/\"},\"author\":{\"name\":\"Marion Bulteau\",\"@id\":\"https:\/\/www.seclab-security.com\/en\/#\/schema\/person\/e60a145bbe00b87bf929d90923bbef50\"},\"headline\":\"Digitalization of Practices & Opening to competition: IT Network and Signaling Network Separation\",\"datePublished\":\"2026-01-12T14:10:13+00:00\",\"dateModified\":\"2026-04-02T11:17:49+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/\"},\"wordCount\":335,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.seclab-security.com\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.seclab-security.com\/wp-content\/uploads\/2026\/03\/Apercus-cas-usage.jpg\",\"articleSection\":[\"Use Cases\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/\",\"url\":\"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/\",\"name\":\"IT\/OT separation: secure signaling network, ANSSI compliance\",\"isPartOf\":{\"@id\":\"https:\/\/www.seclab-security.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.seclab-security.com\/wp-content\/uploads\/2026\/03\/Apercus-cas-usage.jpg\",\"datePublished\":\"2026-01-12T14:10:13+00:00\",\"dateModified\":\"2026-04-02T11:17:49+00:00\",\"description\":\"IT\/OT separation for transport: secure isolation. Protect your third-party access. Zero-day protection, hardware protocol break.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/#primaryimage\",\"url\":\"https:\/\/www.seclab-security.com\/wp-content\/uploads\/2026\/03\/Apercus-cas-usage.jpg\",\"contentUrl\":\"https:\/\/www.seclab-security.com\/wp-content\/uploads\/2026\/03\/Apercus-cas-usage.jpg\",\"width\":2560,\"height\":1616,\"caption\":\"cas usage train\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/www.seclab-security.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Digitalization of Practices & Opening to competition: IT Network and Signaling Network Separation\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.seclab-security.com\/en\/#website\",\"url\":\"https:\/\/www.seclab-security.com\/en\/\",\"name\":\"Seclab Security\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.seclab-security.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.seclab-security.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.seclab-security.com\/en\/#organization\",\"name\":\"Seclab Security\",\"url\":\"https:\/\/www.seclab-security.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.seclab-security.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.seclab-security.com\/wp-content\/uploads\/2026\/03\/LOGO-SECLAB-BLACK-1-e1772644859613.png\",\"contentUrl\":\"https:\/\/www.seclab-security.com\/wp-content\/uploads\/2026\/03\/LOGO-SECLAB-BLACK-1-e1772644859613.png\",\"width\":250,\"height\":46,\"caption\":\"Seclab Security\"},\"image\":{\"@id\":\"https:\/\/www.seclab-security.com\/en\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.seclab-security.com\/en\/#\/schema\/person\/e60a145bbe00b87bf929d90923bbef50\",\"name\":\"Marion Bulteau\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/79773a457dbfe16d55ff9185cfd61e47bd539557e0e483d691119a8b4fc46acb?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/79773a457dbfe16d55ff9185cfd61e47bd539557e0e483d691119a8b4fc46acb?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/79773a457dbfe16d55ff9185cfd61e47bd539557e0e483d691119a8b4fc46acb?s=96&d=mm&r=g\",\"caption\":\"Marion Bulteau\"},\"url\":\"https:\/\/www.seclab-security.com\/en\/author\/mbulteauseclab-security-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"IT\/OT separation: secure signaling network, ANSSI compliance","description":"IT\/OT separation for transport: secure isolation. Protect your third-party access. Zero-day protection, hardware protocol break.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/","og_locale":"en_US","og_type":"article","og_title":"IT\/OT separation: secure signaling network, ANSSI compliance","og_description":"IT\/OT separation for transport: secure isolation. Protect your third-party access. Zero-day protection, hardware protocol break.","og_url":"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/","og_site_name":"Seclab Security","article_published_time":"2026-01-12T14:10:13+00:00","article_modified_time":"2026-04-02T11:17:49+00:00","og_image":[{"width":2560,"height":1616,"url":"https:\/\/www.seclab-security.com\/wp-content\/uploads\/2026\/03\/Apercus-cas-usage.jpg","type":"image\/jpeg"}],"author":"Marion Bulteau","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Marion Bulteau","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/#article","isPartOf":{"@id":"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/"},"author":{"name":"Marion Bulteau","@id":"https:\/\/www.seclab-security.com\/en\/#\/schema\/person\/e60a145bbe00b87bf929d90923bbef50"},"headline":"Digitalization of Practices & Opening to competition: IT Network and Signaling Network Separation","datePublished":"2026-01-12T14:10:13+00:00","dateModified":"2026-04-02T11:17:49+00:00","mainEntityOfPage":{"@id":"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/"},"wordCount":335,"commentCount":0,"publisher":{"@id":"https:\/\/www.seclab-security.com\/en\/#organization"},"image":{"@id":"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/#primaryimage"},"thumbnailUrl":"https:\/\/www.seclab-security.com\/wp-content\/uploads\/2026\/03\/Apercus-cas-usage.jpg","articleSection":["Use Cases"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/","url":"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/","name":"IT\/OT separation: secure signaling network, ANSSI compliance","isPartOf":{"@id":"https:\/\/www.seclab-security.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/#primaryimage"},"image":{"@id":"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/#primaryimage"},"thumbnailUrl":"https:\/\/www.seclab-security.com\/wp-content\/uploads\/2026\/03\/Apercus-cas-usage.jpg","datePublished":"2026-01-12T14:10:13+00:00","dateModified":"2026-04-02T11:17:49+00:00","description":"IT\/OT separation for transport: secure isolation. Protect your third-party access. Zero-day protection, hardware protocol break.","breadcrumb":{"@id":"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/#primaryimage","url":"https:\/\/www.seclab-security.com\/wp-content\/uploads\/2026\/03\/Apercus-cas-usage.jpg","contentUrl":"https:\/\/www.seclab-security.com\/wp-content\/uploads\/2026\/03\/Apercus-cas-usage.jpg","width":2560,"height":1616,"caption":"cas usage train"},{"@type":"BreadcrumbList","@id":"https:\/\/www.seclab-security.com\/en\/2026\/01\/12\/it-ot-isolation-railway-transport\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.seclab-security.com\/en\/"},{"@type":"ListItem","position":2,"name":"Digitalization of Practices & Opening to competition: IT Network and Signaling Network Separation"}]},{"@type":"WebSite","@id":"https:\/\/www.seclab-security.com\/en\/#website","url":"https:\/\/www.seclab-security.com\/en\/","name":"Seclab Security","description":"","publisher":{"@id":"https:\/\/www.seclab-security.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.seclab-security.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.seclab-security.com\/en\/#organization","name":"Seclab Security","url":"https:\/\/www.seclab-security.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.seclab-security.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.seclab-security.com\/wp-content\/uploads\/2026\/03\/LOGO-SECLAB-BLACK-1-e1772644859613.png","contentUrl":"https:\/\/www.seclab-security.com\/wp-content\/uploads\/2026\/03\/LOGO-SECLAB-BLACK-1-e1772644859613.png","width":250,"height":46,"caption":"Seclab Security"},"image":{"@id":"https:\/\/www.seclab-security.com\/en\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.seclab-security.com\/en\/#\/schema\/person\/e60a145bbe00b87bf929d90923bbef50","name":"Marion Bulteau","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/79773a457dbfe16d55ff9185cfd61e47bd539557e0e483d691119a8b4fc46acb?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/79773a457dbfe16d55ff9185cfd61e47bd539557e0e483d691119a8b4fc46acb?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/79773a457dbfe16d55ff9185cfd61e47bd539557e0e483d691119a8b4fc46acb?s=96&d=mm&r=g","caption":"Marion Bulteau"},"url":"https:\/\/www.seclab-security.com\/en\/author\/mbulteauseclab-security-com\/"}]}},"_links":{"self":[{"href":"https:\/\/www.seclab-security.com\/en\/wp-json\/wp\/v2\/posts\/3457","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.seclab-security.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.seclab-security.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.seclab-security.com\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.seclab-security.com\/en\/wp-json\/wp\/v2\/comments?post=3457"}],"version-history":[{"count":5,"href":"https:\/\/www.seclab-security.com\/en\/wp-json\/wp\/v2\/posts\/3457\/revisions"}],"predecessor-version":[{"id":3466,"href":"https:\/\/www.seclab-security.com\/en\/wp-json\/wp\/v2\/posts\/3457\/revisions\/3466"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.seclab-security.com\/en\/wp-json\/wp\/v2\/media\/2807"}],"wp:attachment":[{"href":"https:\/\/www.seclab-security.com\/en\/wp-json\/wp\/v2\/media?parent=3457"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.seclab-security.com\/en\/wp-json\/wp\/v2\/categories?post=3457"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.seclab-security.com\/en\/wp-json\/wp\/v2\/tags?post=3457"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}