Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Symantec announced ICSP Neural in December 2018 as a physical station for scanning USB media before it is used with industrial control systems (ICS), operational technology (OT) and IoT environments. It was designed as a checkpoint between removable media and protected systems, including deployments intended to remain air-gapped. The announcement and launch reports describe a historical product launch; they do not establish current availability or support.

What ICSP Neural was designed to do

Removable drives can carry files into facilities whose control systems are separated from ordinary networks. ICSP Neural was intended to give staff a dedicated place to inspect and sanitize that media before connecting it to a critical system. Symantec described its detection approach as combining threat intelligence and security technologies, including signatures, reputation, emulation or sandboxing, and machine-learning techniques. Those are vendor descriptions, not independent performance findings.

Symantec’s launch announcement said existing ICSP deployments had found malware on “up to 50 percent of scanned USB devices.” This was a company-reported figure, not an industry-wide rate: the announcement did not specify the sample size, sampling method, participating customers, or observation period. Patrick Gardner, then Symantec senior vice president of advanced threat protection and email security, said, “The impact of connecting an infected device to a critical system can be devastating.” Symantec’s December 2018 announcement

How the scanning workflow works

  1. Scan the removable media at the station. The intended checkpoint is the ICSP Neural appliance, not the protected control system itself.
  2. Connect checked media to the target system. Symantec’s solution brief says the scanner can operate without a connection to the target, so this workflow need not bridge the scanning station to an air-gapped OT network.
  3. Rescan after making changes when enforcement is enabled. SecurityWeek reported that newly added files can remain inaccessible on protected endpoints until the USB device is scanned again. A scan therefore does not provide a permanent pass for later changes.

The solution brief lists Emerson DeltaV, Rockwell, Honeywell Experion, Yokogawa, Siemens, GE, Schneider/Invensys and ABB among industrial platforms on which the solution was tested. These are Symantec-listed examples, not a guarantee that every product revision, operating system or site configuration is compatible. Symantec ICSP solution brief

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Sale
MUNBYN Portable Scanner, 900 DPI Handheld Wand Scanner, A4, 16GB SD, Black
  • 【Easy to Carry--Portable Scanner】Length: 9.5 in = 1.5 pens. Weight: 0.66 lbs = An apple. Carry way: Small bag. Power Source: a pair of AA batteries (NEED TO BUY EXTRA). Support scanning up to A4 size.
  • 【Easy to Scan--Handheld Scan】Portable Scanner scans your photos, documents, and book pages in 3-5 seconds on 900 dpi resolution independently. Easy to use once you take a tiny bit of time to get the hang of this portable scanner. Compared to the feeding scanner, the wand scanner will not fold or damage old photos during scanning.
  • 【Easy to use--No Driver】Portable Scanner does not require downloading a driver. Easily connect the portable scanner to a computer through a USB cable to transfer your scanned photos or documents anywhere and anytime.
  • 【Easy to Digitalize--Clear Image】The highest 900dpi scan resolution can convert pictures, documents, book pages, or other targets into digital files in high clarity.
  • 【Easy to Store--16G SD Card】Wand scanner with 16G SD card will store thousands of scan files. With OCR software (you can find some software from Google Play Store), easy to transfer PDF scan files into Word/Excel format and edit them.

What the optional endpoint driver adds

An optional endpoint enforcement driver can validate that a USB device was scanned and block unscanned devices, according to the product materials and SecurityWeek’s launch coverage. The driver does not require a connection between the endpoint and scanner, preserving the possibility of keeping the target network air-gapped. Emerson’s case study calls the driver optional, recommends it for assurance and says it can be configured with a time expiry.

Enforcement has an operational trade-off: after a scan, files added to the USB device may be inaccessible on protected endpoints until the device is scanned again. Sites considering this safeguard would need to account for repeat scans in maintenance and file-transfer procedures. Emerson case study · SecurityWeek’s December 2018 report

Compatibility and deployment questions

The solution brief names Kingston DataTraveler Vault Privacy v3 in a note about encrypted-drive support. That reference supports only a narrow conclusion: the model was identified as an encrypted-storage option in the brief. It does not show that the drive is mandatory, that every revision works, or that it is currently available.

Rank #2
K7 Total Security Multi Device Antivirus |5 Devices, 1 Year| Fast scans, Anti Malware, Anti Ransomware| Windows, Mac, Android & iOS | 24 hr Email Delivery.
  • AWARD WINNING ANTIVIRUS: Comprehensive PC protection against existing, new, and zero-day threats. Speed-optimized, multi-platform protection for Windows, Mac OS, iOS and Android (PC, Tablet, Mobile) for 5 devices 1 year
  • RANSOMWARE PROTECTION: Monitors potentially-suspicious processes to stop malicious encryption attempts with Fast scans, Anti Malware, Anti Ransomware, Email Scanning, Vulnerability Scan, Exploit Protection, System Monitor, External Device Blocking, Data Locker.
  • ENHANCED ONLINE PROTECTION: Machine Language powered website filtering and cloud-based website verification keeps you safe from phishing and unsafe websites. Comprehensive protection that does not slow down your PC or your internet
  • WEBCAM PROTECTION: Prevent unauthorized applications and hackers from spying on you by restricting or blocking access to your webcam with Browser Protection ,Wi-Fi Advisor and Block Drive-by-Downloads.
  • DIGITAL DOWNLOAD CODE: Digital code along with installation and activation instructions will be emailed to your registered email ID within 24 hours

For any comparable removable-media security deployment, verify the details that affect the actual site rather than relying on a broad platform list:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Which control-system vendors, operating systems and legacy versions are explicitly supported?
  • Can the scanner and target remain disconnected, and how are malware definitions or other updates delivered in an offline environment?
  • How does the product block unscanned media, and what happens to files changed after scanning?
  • What are the current support terms, deployment requirements and total costs?

A related example in the category is Trend Micro Portable Security 3 Pro, which was announced for malware scanning and cleaning in isolated ICS environments, with secure storage and transfer. That establishes it as a related offering, not as an identical product or one currently available under the same terms. Trend Micro Portable Security

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What is known about price and availability

SecurityWeek reported in December 2018 that ICSP Neural pricing started at $25,000, that it could then be ordered, and that shipment was expected in early 2019. Those are launch-period details, not a current quote or evidence that the product remains available. The reviewed launch materials do not establish present product status, current pricing, software version or active support. SecurityWeek’s December 2018 report

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.