Guardian Air overview

Guardian Air is a wireless security sensor for operational technology (OT) and Internet of Things (IoT) environments. It monitors in real-time activities from prominent wireless frequencies, to provide immediate visibility to connected assets and attack surfaces. Guardian Air seamlessly integrates with Vantage for unified visibility of wired, wireless and endpoint assets across your OT and IoT environments.

General

Guardian Air is the first wireless security sensor purpose-built for operational technology (OT) and Internet of Things (IoT) environments. It monitors all prominent frequencies to provide customers with the much-needed visibility of the wirelessly connected assets. Guardian Air can detect the appearance of rogue infrastructure such as:

Data from Guardian Air sensors is sent to Vantage for analysis alongside network and endpoint data. This consolidated analysis provides a holistic view of your OT and IoT environments.

Continuous visibility and monitoring

While many OT security solutions only see wireless assets once they are connected to the wired network, the Guardian Air sensor continuously monitors all prominent wireless frequencies. These include:

  • Bluetooth
  • Wi-Fi
  • Building automation protocols
  • Drones, and
  • Long range technology such as cellular and LoRaWAN

Guardian Air operates in a wide variety of frequencies, which allows it to provide real-time monitoring and detailed information of assets such as rogue installations or drones. Drones can be utilized to perform attacks, take pictures of critical facilities or carry equipment for attacks or for the exfiltration of valuable information. With Guardian Air, you can detect the presence of drones and the equipment attached to them, enabling security teams to take corrective action.

Ongoing detection of wireless-specific threats

The nature of a wireless connections means that cyber adversaries don't need to be in close proximity to exploit an asset’s vulnerabilities. Guardian Air provides ongoing threat detection of wireless-specific threats, such as:

  • Brute force attacks
  • Spoofing
  • Bluejacking

For example, Guardian Air can detect de-authentication attacks and triangulate the location of the devices performing the attacks. Alarms can be set to notify security teams enabling them to take immediate countermeasures, improve defenses and minimize impacts to critical operations.