USB Scan Solution

Use our USB Cleaner for secure handling of external files. It protects your organization from viruses and malware when files from employees or suppliers are introduced into the system. The link22 USB Scan Solution leverages multiple antivirus engines, provides a user-friendly interface, and ensures easy administration.

Validated technology

Built on link22’s trusted Data Guard for robust and secure file flow management.

Important protection​

Scanning external files for potential threats, such as viruses and malware, is one of the most critical and straightforward measures to enhance security.

COTS hardware

link22’s solution uses commercial off the shelf hardware for high performance, cost efficiency, and simplified lifecycle management.

Automatic updates

Automatic antivirus definition updates ensures maximal protection.

USB Scan Solution is easy to use

To enhance security, two USB drives are used: one containing the external files and another, clean USB drive, for the approved files. The scan station has two USB ports where  the user connects their USB drives. The touchscreen interface allows the user to select the files and folders to scan, which are then processed by multiple antivirus engines. Approved files are transferred to the clean USB drive and are safe for use. Potentially harmful files are blocked, with a clear warning displayed on the screen. All events are logged for traceability.

USB and Portable Media as Attack Vectors

USB drives are an underestimated security risk. Attackers can plant malicious code on USB drives, hoping to infiltrate secure environments. Additionally, USB drives can act as keyboards or mice to execute unauthorized actions, a technique known as Bad USB. Some USB drives, referred to as USB Kill, can physically damage hardware by discharging electrical surges upon insertion, potentially paralyzing entire systems. The link22 USB Scan Solution addresses these risks, enabling the secure use of portable media.

USB Gate

Secure Architecture

The link22 USB Scan Solution consists of two components: a USB Scan Station and a Data Guard Server. The Scan Station operates in kiosk mode, where users select the external files that shall be imported and therefore scanned. These files are sent to the Data Guard Server, which uses multiple antivirus engines for scanning. Approved files are sent back to the clean USB drive, while all other files are blocked. With extensive hardening and other security mechanisms, the solution ensures high levels of security. The solution supports automatic updates of anti virus definitions to ensure up-to-date protection. Automatic updates can for example be triggered every 24 hours.

Cost Effective Scalability

Multiple scanning stations can connect to a single central server. This allows organizations to deploy a scanning station on every floor or location, all managed through a central system, ensuring cost-efficient administration and resource use.

Swedish Product Development

For over 16 years, significant organisations have relied on link22’s expertise in cybersecurity and information security. We develop cybersecurity products and software through rigorous processes that integrate security into every stage, from architecture to implementation and verification. The USB Scan Solution builds on this tradition, ensuring safety for our clients.

Compatible with Cross Domain Solutions

The link22 USB Scan Solution is part of our Cross Domain Solutions offering, enabling continuous functionality enhancements and integration with additional antivirus engines. It also provides a future-proof solution with migration pathways, allowing files from external USB drives to be securely transferred into secure domains without the need for additional USB drives.

Details about USB Scan Solution

  • Flow control between domains.
  • Authorization of transfers with consideration for PKI.
  • Integrity check of files.
    Scans file content using anti-virus engines and filters.
  • Supports multiple anti-virus engines. Flexible API for adding additional protection.
  • Supports “Deep Inspection” Content Disarm Reconstruction as an add-on module.
  • Configurable redirection.
  • Data redirection based on encrypted metadata.
  • All import and export passes through Data Guard, which determines if data is approved for passage based on data and metadata.
  • Detailed logging of activities.