Sysctl Impex DataLock

Impex DataLock is a network-based file transfer gateway that sits between two or more networks, typically in a DMZ or zone boundary, and controls which files are allowed to cross that boundary. It functions as an application-level firewall for file transfers, scanning uploaded files with multiple antivirus engines and other scanners before allowing them to pass to their destination. Files can be uploaded via SFTP (including SCP and WinSCP), and administrators can configure exception rules to allow specific files through even if a scanner would otherwise block them. The product supports multiple network flows, each using a dedicated cryptographic key and directed to its own target. It is managed centrally through the Impex Control Center (ICC), which handles configuration, logging, audit trails, and quarantine of files flagged as malicious. Audit trails of import/export actions can be integrated with a SIEM, and an electronic receipt is generated and signed to verify that files passed through the DataLock and that checksums are valid. The underlying system is built on hardened Linux, using SELinux and Landlock to confine processes, restrict filesystem access, and remove network interfaces from scanning namespaces. A single ICC can manage both Impex DataLock units and the related Impex USB Protect kiosks.