Patent attributes
An apparatus includes a first communication interface communicable with a portion of a first network, a second communication interface communicable with a portion of a second network, and a memory. The apparatus is configured to be disposed between the portion of the first network and the portion of the second network. The portion of the first network and the portion of the second network are not otherwise coupled together. The apparatus is switchable between a first mode and a second mode. During the first mode, the apparatus is transparent to data transmission and is configured to store information representing the transmitted data. During the second mode, the apparatus is configured to block data transmission between the first network and the second network via the apparatus so as to form an enclaved network segment of the portion of the first network.