Features
What XoT does
This page shows what the two functions do. Further down, it also lists what XoT does not do. That is useful to know when you compare it with other solutions.
Hide and Protect
- The equipment responds only to traffic from someone with a valid key.
- It does not respond when unauthorised users scan the network, ping it or try to connect.
- The Lock stops all traffic that an access rule does not explicitly allow.
Remote Access
- A user gets access to a single machine, not to a part of the network.
- The access lasts for a set period and ends automatically.
- The log shows who connected, to what, from where, when and for how long.
- Users can request access in a self-service portal.
What applies to both functions
- Every user and every device has its own digital certificate. XoT uses no passwords.
- The user and the Lock check each other twice a minute.
- The traffic is encrypted with WireGuard.
- No inbound ports need to be opened in the firewall.
- One Lock can protect a single machine, several machines, whole subnets or several VLANs.
Each function has its own licence. You can use both in the same Lock.
Requirements
What you need
An IP network
XoT works over any IP network, including mobile networks.
A Lock
You install the Lock next to the equipment it protects. It is available as hardware, as a virtual machine and as software.
An identity service
Users log in through the identity service your company already uses.
The equipment you protect needs no new software and no new address.
Limits
What XoT does not do
XoT is built to control access to equipment. Here you can see what XoT does not do.
- XoT is not an antivirus program. It does not look for malicious software in the traffic. It decides who may connect to the equipment.
- XoT does not replace the firewall. The Lock protects the equipment it sits in front of. You still need a firewall between the network and the internet.
- XoT does not detect intrusions. XoT logs connections. Detecting intrusions takes other tools, but you can send the log on to them.
- XoT does not remove vulnerabilities. The vulnerabilities in the equipment remain. But someone without authorisation cannot reach them over the network.
- XoT does not replace other security work. You still need risk analysis, training and a plan for what happens in an incident.
Common questions
What hardware is available?
The hardware is called the XoT-S1. The Lock is also available as a virtual machine and as software.
How many machines can one Lock protect?
One Lock can protect a single machine, several machines, whole subnets or several VLANs at the same time.
Can we connect XoT to other security systems?
Yes. XoT can send logs to a SIEM system, which collects logs from across the organisation. XoT can also connect to systems that detect and stop intrusions.
Would you like more information?
We are happy to tell you more about the XoT-S1 and the functions.