ASD ISM 1157Use Evaluated Diodes to Control Unidirectional Gateway Data Flow
Unidirectional gateways between networks must use evaluated diodes to control the direction of data flow.
Plain language
This control ensures that when a unidirectional gateway connects two networks, an evaluated diode is used to control the direction that data can flow. A diode is a hardware device that permits information to move in only one direction, so data cannot travel back the other way. Choosing a diode that has been formally evaluated gives confidence that this one-way restriction genuinely holds and cannot be bypassed. This matters because it prevents sensitive information leaking, or unwanted traffic entering, across the boundary between the two networks.
Framework
ASD Information Security Manual (ISM)
Control effect
Preventative
Classifications
NC, OS, P, S, TS
ISM last updated
Mar 2022
Control Stack last updated
10 Aug 2026
E8 maturity levels
N/A
Official control statement
Evaluated diodes are used for controlling the data flow of unidirectional gateways between networks.
Why it matters
If unevaluated diodes are used, the one-way data flow of a unidirectional gateway may not be reliably enforced, allowing sensitive information to leak or unwanted traffic to cross between networks.
Operational notes
Periodically reconfirm that each deployed diode still holds a current evaluation and that no reverse data paths have been introduced at the gateway.
Implementation tips
- When deploying a unidirectional gateway between two networks, have network architects select a diode that has completed a formal evaluation rather than an unevaluated product.
- Configure the diode to enforce data flow in the intended single direction, and document which network is the sending side and which is the receiving side.
- Place the diode at the network boundary so all traffic between the two networks is forced through it, leaving no alternative path that could allow reverse flow.
- Record the make, model and evaluation status of each diode in the network design documentation and asset register so the evaluated component can be verified.
- When replacing or upgrading a diode, have engineers confirm the replacement product also holds a current evaluation before connecting it into the gateway.
Audit / evidence tips
- AskAsk which unidirectional gateways connect networks and what devices control their one-way data flow.GoodEvery unidirectional gateway is shown controlling one-way flow through a named diode device.
- AskAsk for evidence that each diode in use has been formally evaluated.GoodEach deployed diode model maps to a current, valid evaluation record.
- AskAsk how each diode enforces the intended direction of data flow.GoodConfiguration confirms data is permitted to flow only in the approved single direction.
- AskAsk whether any path could allow data to flow back around the diode.GoodNo alternative routes exist and all traffic between the networks is forced through the diode.
- AskAsk how diode assets and their evaluation status are tracked over time.GoodRecords list each diode's make, model and evaluation status and are kept up to date.
Cross-framework mappings
How ISM-1157 relates to controls across ISO/IEC 27001, ISO/IEC 42001, Essential Eight, and ASD ISM.
ISO 27001
| Control | Notes | Details |
|---|---|---|
layersPartially meets(2)expand_less | ||
| Annex A 7.10 | ISM-1157 addresses secure destruction of media by mandating the use of NSA-evaluated degaussers to reliably render magnetic media unreadable | |
| Annex A 7.14 | ISM-1157 requires that when destroying magnetic storage media, organisations use NSA-evaluated degaussers to ensure the destruction metho... | |
These mappings show relationships between controls across frameworks. They do not imply full equivalence or certification.
Related ASD ISM controls in Gateways
See all Guidelines for gateways controls, or browse the full ASD ISM library.