What is an air-gapped network?
Understand what an air-gapped network is, how physical isolation differs from logical segmentation, and where the control fits in a layered security architecture.
Read guideAIRGAPNET Guides
Make critical connectivity a deliberate decision.
Practical guidance for reducing unnecessary network reachability without losing sight of operations, recovery or layered security.
External network
Potentially exposed
Ethernet path disconnected by default
Protected system
Connected when authorised
Start here
9 min read
What Is an Air-Gapped Network? Definition, Benefits and Practical Limits
Understand what an air-gapped network is, how physical isolation differs from logical segmentation, and where the control fits in a layered security architecture.
Read the foundation guideKnowledge library
Ten guides. One connected security model.
Move from definitions and control comparisons to ransomware recovery, OT maintenance and risk governance. Each guide links to the next practical decision.
Foundations
3 guidesAir gap vs network segmentation
Compare physical air gaps with VLANs, firewalls and network segmentation, including strengths, limitations and a practical selection framework.
Read guideData diode vs air gap vs firewall
Compare firewalls, data diodes and physical air gaps by directionality, availability, assurance and operational use case.
Read guideRansomware and resilience
2 guidesPhysical isolation and ransomware
Learn how physical network isolation can limit selected ransomware paths while complementing segmentation, endpoint security and tested offline backups.
Read guideDesigning an isolated backup network
A practical guide to reducing backup-network exposure with controlled transfer windows, separated administration and tested recovery procedures.
Read guideOT and critical systems
3 guidesOT segmentation and physical isolation
Plan layered OT network zones, conduits and physically isolated access paths while preserving safety, availability and maintainability.
Read guideSecure remote maintenance for OT
Design remote maintenance that is disabled by default, approved for specific work, monitored while active and closed when the task ends.
Read guideAlways-on vs on-demand connectivity
Evaluate whether a critical system truly needs continuous network access and design controlled connection windows for tasks that do not.
Read guideArchitecture and governance
2 guidesAir gapping and Zero Trust
Understand how physical isolation and Zero Trust address different security questions and can work together around high-value resources.
Read guideNIS2 and physical isolation
Map physical network isolation to a broader NIS2 risk-management programme without treating one technical control as automatic compliance.
Read guide