AIR-GAPPED & ISOLATED NETWORKS
Run the full NXLog Platform inside your air gap. No internet, no callbacks, no exceptions.
NXLog Platform now runs in fully isolated environments with no loss of capability: deployed, licensed, updated, and operated entirely offline. If your network is isolated by mandate, your telemetry stack no longer has to be the exception.
THE CHALLENGE
When isolation is mandated, most telemetry tools quietly break the rule
Isolation is not optional.
Defense, government, and classified networks; ICS / SCADA and critical infrastructure; and some regulated financial and manufacturing estates are required to run disconnected from the public internet. The mandate is the security control, not a preference.
Running on-prem doesn’t mean running offline.
Software installed in your own data center can still need a path out to the internet: license activation, an update channel, a cloud-hosted management plane, or threat-intel feeds. In a connected network that’s a reasonable assumption. In an isolated one, it turns deployment into a fight and leaves features half-working.
The hidden-tunnel problem.
Some “air-gapped” offerings still require a link back to the vendor: an IPsec tunnel, a periodic online license check, a sync job through the internet. That is not an air gap. It is a smaller hole in the same wall.
Cloud and SaaS telemetry are off the table.
SaaS SIEMs and cloud observability can’t be reached from an isolated network, so teams end up stitching together partial, manual, or out-of-date tooling.
THE SOLUTION
The whole platform, fully inside your boundary
NXLog Platform runs air-gapped: the same telemetry pipeline enterprises already run on-prem, deployable and operable with no internet connection at all. Collect from every source, process and enrich at the source, store and analyze locally, and route wherever you need, all within the isolated network.
Nothing about the air-gapped deployment depends on reaching NXLog Platform. Licensing, updates, and management all work offline, through your own approved transfer process. There is no callback, no update-server dependency, and no tunnel back to the vendor. It is 100% feature parity with the standard NXLog Platform: you give up the internet, not the capabilities.
THE GUARANTEE
What air-gapped support means
A true air gap, not a qualified one. Six guarantees a security reviewer can test.
01No internet to deploy
- Install and configure the full platform inside the isolated network.
- No online license activation and no internet package downloads during setup.
02No internet to run
- Every function runs with zero outbound connection: collection, processing, storage, search, routing, dashboards.
- Normal operation does not depend on reaching an external service.
03No phone-home, no vendor tunnel
- Nothing in the deployment reaches out on its own: no license callback, no automatic usage reporting, no required IPsec tunnel, and no scheduled sync to NXLog.
- The air gap stays intact. There is no “except for this one connection.”
04Offline licensing
- License and activate with a signed license file, imported over your approved transfer path.
- When license usage needs reporting, you export a file and send it on your own schedule. You control what leaves the network and when.
05Offline updates
- Bring platform and configuration updates in as packages through your own approved transfer path (removable media, data diode, or review gate), on your schedule.
- Delivered as signed, verifiable offline update packages you stage and apply internally.
06Local storage, analytics, and audit
- Built-in high-compression storage, real-time full-text and SQL-like search, and custom dashboards.
- Tamper-evident logs, retention policies, File Integrity Monitoring, and PII handling, all inside the boundary.
Put the six guarantees to the test
We’ll deploy and run the full platform with no internet connection, with your security reviewer watching every step.
KEY FEATURES & BENEFITS
A complete platform, not a reduced offline edition
Air-gapped is the same NXLog Platform as the standard on-prem build, not a cut-down offline mode. The full collection, processing, storage, search, and fleet-management pipeline runs entirely inside the isolated network.
One agent across the whole isolated estate
Windows, Linux, macOS, BSD, AIX, and Solaris on x64, x86, ARM, and PowerPC, plus ICS / SCADA collection, so the OT and legacy systems common inside an air gap are covered without per-OS tooling.
Store, search, and analyze inside the boundary
High-compression storage with real-time full-text and SQL-like search and custom dashboards, so investigation doesn’t depend on a SIEM you can’t reach.
Manage the fleet from inside the network
Up to 100,000 agents per node from a self-hosted console, with auto-enrollment, configuration templates, and RBAC, and no cloud control plane.
Use Cases & Business Impact
Defense, government, and classified networks
The Challenge
Accreditation requires the network to stay disconnected, and most telemetry tools can’t operate there without breaking that requirement.
The NXLog Solution
Deploy and run the full platform inside the classified boundary, with offline licensing and updates and no phone-home.
Business Impact
The same telemetry visibility as a connected enterprise, without breaching the isolation the accreditation depends on.
Critical infrastructure and OT (ICS / SCADA)
The Challenge
Industrial and utility networks are segmented and often isolated, yet still need security and operational logging from PLCs, ICS, SCADA, and field devices.
The NXLog Solution
Collect and process OT telemetry inside the segment, store and analyze it locally, and route to a local SIEM, with no external connection.
Business Impact
Security and compliance coverage for the OT estate, aligned to NERC CIP and IEC 62443, without bridging IT and OT or opening the air gap.
Regulated and sovereign on-prem estates
The Challenge
Data-sovereignty or regulatory rules require telemetry to stay in a controlled, disconnected environment.
The NXLog Solution
Keep collection, storage, and analytics entirely on-prem and offline, with full retention and audit trails.
Business Impact
Meet sovereignty and isolation requirements while keeping complete, audit-ready telemetry.
GET STARTED
See it running inside an air gap
Book a demo and we’ll show the full platform deploying and running with no internet connection: licensing, updates, collection, storage, and search, all offline. Bring your isolation requirements and we’ll map them to the deployment.
Follow us
© Copyright NXLog Ltd.