Paradigm Change in IT Security How Zero Trust is Revolutionizing IT Security In traditional security models, the internal network is generally regarded as trusted because it is monitored by internal IT staff and separated from the outside world by perimeter protection. However, as the complexity of applications, the use of clouds and the sharing of infrastructures increases, so does the potential for attack. At the same time, with growing digitization comes an increase in dependency on available and confidential data processing – and this is becoming more attractive as a target for attack. Under such circumstances, past confidence in the security of internal networks is no longer justified. If an attacker manages to penetrate a network, they can often move laterally without being noticed – with wide-ranging access opportunities. In addition, employees nowadays often access company resources from different locations – either from their home office, via private end devices or to carry out remote maintenance on industrial control systems. This fragmentation requires a completely new approach to security: Zero trust offers exactly that. Instead of relying on network affiliation or the location, zero trust checks every access request individually, dynamically and according to context. What is Zero Trust? The Security Principle Explained in Simple Terms Zero trust is a modern security concept which assumes that no device, no user and no application is automatically trustworthy. Accesses are checked critically and related to context – based on identity, role, device security, location, time and risk factors. Communication via non-trusted networks is encrypted. The goal is to minimize the avenues for attack by means of granular access control and to mitigate the impact in the event of a compromise (assume breach). At its core is the principle of least privilege: Access rights are strictly limited to what is necessary, and checked regularly. Zero trust replaces implicit confidence in the internal network with continuously verified trust. Zero trust networking does not rely on the security of the network as a whole, but rather on the security of explicitly authorized communication endpoints. The result: granular access control, transparency of the data flows, reduced potential for attack. Comparison of Security Concepts Classic Security Models vs. Zero Trust Aspect Classic security models Zero Trust Trust model Implicit trust in the internal network No automatic trust – every request is checked Access control Devices in the internal network are trusted. User-specific access controls at application level. Granular control of access to network and applications taking into consideration the roles and tasks of a user, security of the end device and the context of the access request (time, location, ...) Assignment of rights Far-reaching, often static rights in the internal network and in applications Granular, dynamic assignment of rights according to the principle of least privilege Protection boundary (perimeter) Perimeter firewall at network boundaries with the Internet and between sites, VPN Zero trust gateways upstream of applications, microperimeters and microsegmentation at network level Visibility / logging Poor transparency of accesses and low degree of detail, limited clarity Complete and detailed logging and real-time monitoring Response to attacks Reactive, often delayed (after intrusion into network) Proactive security through granular access rights, continuous evaluation, rapid detection and isolation of incidents Remote/cloud access Complex, often via VPN with broad network sharing Simple, targeted and secure: Access to individual applications without VPN and without network sharing, but encrypted at application level Scalability Limited, high outlay in the case of distributed sites and hybrid infrastructures High, optimized for decentralized, hybrid and dynamic environments Example Access to the company network via VPN enables access to numerous systems. Access to a certain web application for a certain person at a certain time. Zero Trust for Applications What is Zero Trust Application Access (ZTAA)? Zero trust demonstrates its practical benefits wherever it is implemented – particularly in the case of the fine-grained control of access rights to applications. This is exactly where zero trust application access (ZTAA) comes in: Unlike classic remote access, for example via VPN, ZTAA does not enable access to the entire network. Instead, it allows identity- and context-based access to individual applications – e.g., to a certain web application, for a defined time only and depending on the device status. ZTAA is particularly suitable for safeguarding environments with high requirements regarding the flexibility, scalability and granularity of the access controls, for example in remote work models, hybrid cloud environments, industrial infrastructures (Industry 4.0) and critical infrastructures. ZTAA is a concrete technical solution within the zero trust paradigm. In addition there are other variants such as zero trust network access (ZTNA), which controls access to resources at network level instead of application level. ZTAA and ZTNA can interact with each other within a multi-layer access control system. Elements of a Powerful ZTAA Architecture Zero trust application access is not simply an extension of existing coarse-grained controls in the network. It requires a profound understanding of the assets to be protected and under what fine-grained conditions access is to be enabled. To be able to function in practice, this approach needs an architecture in which multiple security components perfectly coordinate with one another – from authentication and access control through to logging and analysis. A powerful ZTAA architecture typically consists of the following components: 1. Monitoring and analysis > All accesses and sessions are logged and monitored seamlessly. This not only enables auditability, but also the early detection of anomalies and a rapid response to security incidents. 2. Endpoint security and device status check > In addition to identity verification, the device status (e.g., operating system, patch status, certificates) can also be included in the access control. 3. Adaptive access control > Complements the static check with context- and risk-based adaptations – based on behavior, context and risk. Here, factors such as time of day, location, device status or anomalies in user behavior are taken into consideration. Typically, this is implemented via the ZTAA gateway. 4. ZTAA gateway or broker (e.g., genusphere) > Provides access to specific applications without network sharing. Applications remain hidden in the backend, only authorized sessions are set up (application cloaking). Here, communication with the user and application is encrypted. 5. Policy engine / access control instance > This component makes access decisions based on predefined, static policies, e.g., identity, role, device status or location. 6. Identity and access management (IAM) with multi-factor authentication (MFA) > Authentication takes place via a central instance, often coupled with existing identity providers. MFA additionally safeguards identity. ZTAA architecture with genusphere network as an example A ZTAA-based system therefore replaces static network boundaries with individual, context-based access decisions in real time. This significantly reduces the potential for attack. Like firewalls and VPN connections, zero trust access controls also carry out a critical security function and have insight into sensitive communication. It is therefore essential that these components perform their function reliably and are not vulnerable to attack themselves. Accordingly, such products should be developed and implemented with Security by Design and Security by Default and should come from trusted manufacturers. Challenges in Implementing a ZTAA Environment One of the greatest challenges in introducing zero trust – particularly in the form of ZTAA – is not the technology but rather the structured mapping of access rights based on concrete tasks. The central question is: Who is allowed to access which application, why and under what conditions? In order to answer this question systematically, a granular authorization model is needed which is not based on departments or sites but rather on the actual tasks and responsibilities of the individual persons. The development of such a model requires interdisciplinary cooperation – between IT, HR, specialist departments and management. In practice, this means that access rights must be oriented to specific tasks and not merely to job titles. Roles and responsibilities must be systematically translated into access logic, linked to real processes and continuously kept up to date. Particularly challenging is the automated adaptation of authorizations in the event of task modifications, e.g., when a person changes projects or roles within a company. At the same time, access control must be context-sensitive: Factors such as location, time, device type or risk assessment are taken into account in the decision – for example, whether access to sensitive applications from private or compromised devices is blocked. A zero-trust-capable system always knows which application may be used by whom, for what purpose and under what conditions – and can enforce these rules automatically and transparently. Contact us + 49 89 991950-902 sales@genua.eu Request a consultation The genua DNA For more than 30 years, IT security has been at the core of our corporate culture. As genua products are intended for use in critical infrastructure and at companies with an obligation to maintain secrecy, security has been included in their design from the outset. Introducing Zero Trust Technical Integration of Zero Trust into Existing IT Infrastructures In addition to the structured mapping of roles and access rights, the introduction of zero trust also poses technical and organizational challenges which companies need to plan strategically and address holistically. A key aspect here is the migration of legacy systems. Many existing applications – especially in industrial and critical infrastructure environments – were not designed for dynamic access control, identity verification or context-based security management. These systems must be either integrated such that they are ZTAA-capable, or replaced with more modern applications. Aspects such as interface capability, data storage, network segmentation and authentication mechanisms play a key role here. At the same time, zero trust must be embedded in existing IT security architectures without giving rise to redundant structures or security gaps. This includes, e.g., connection to existing identity providers, integration into monitoring and SIEM systems for event detection and tracking, as well as compatibility with existing endpoint protection solutions, firewalls and network zone models. Zero trust is not a finished project but rather a continuous transformation process. Alongside investments in technology, its implementation above all requires changes to processes, responsibilities and corporate culture. Employees not only have to use new access methods such as MFA or role-based authorizations, they also need to understand why processes change, and develop trust in the new security model. Zero trust changes how employees access resources. It affects how security rules are explained, implemented and accepted. It requires a clear allocation of responsibility for access and security. Zero trust can unfold its full potential only if technology, organization and humans interact. Zero Trust in Practice Implementation of Zero Trust Using Solutions from genua When implementing zero trust, it pays to use field-tested, integrable solutions that seamlessly blend into existing infrastructures – without disruptive intervention or costly network modifications. With its specialized products, genua offers practical tools for implementing zero trust – particularly in the form of zero trust application access (ZTAA). Zero Trust Application Access genusphere genusphere is the central solution for identity- and application-specific access – completely without classic VPN structures. Instead of allowing access to the entire network, genusphere enables internal and external users browser-based access to only those applications for which they are authorized to use, and ensures secure communication by encrypting all data traffic. Learn more Remote Maintenance Solution genubox genubox is a solution specially developed for industrial scenarios and used for secure remote maintenance of machinery and plants – in accordance with the zero trust principles. It enables the targeted unlocking of individual accesses (supplier and partner access), which can be controlled technically and organizationally, logged and optionally recorded. Learn more AI as a Catalyst for ZTAA and Zero Trust Increased networking, dynamic infrastructures and an ever more complex threat situation mean that even well-designed zero trust models are pushed to their limits – especially when it comes to detecting risk patterns early on, responding to deviant behavior and continuously refining security policies. Artificial intelligence (AI) enhances classic, rule-based security mechanisms with the addition of learning processes which help identify trends, deviations and risks more quickly. For example, AI can detect anomalies in user behavior and automatically restrict access to sensitive applications or demand additional authentication. This creates a dynamic and adaptive security architecture which constantly adapts to new threats. AI-Assisted Enhancement of Zero Trust: Automated threat detection: : AI continuously analyzes user and system behavior and detects deviations before they become relevant to security. Adaptive access control: Risks are assessed intelligently – taking, e.g., altered behavior, changes in location or unusual times into consideration. Rules can then be adapted automatically, for example by means of additional authentication requests or temporary blocking. Behavior-based policy adaptation: AI uses usage patterns to derive recommendations for policies – e.g., if roles change or new access routines arise. Early risk detection: By analyzing large volumes of data, AI is often able to detect threat scenarios much earlier than manual evaluation – a decisive advantage in sensitive and industrial environments. AI will not replace zero trust, but will be essential in helping to further develop and scale the security concept in extensive, dynamic IT and OT environments. Particularly in conjunction with ZTAA solutions such as genusphere, this results in a security architecture that not only reacts – but acts proactively. Cryptographic Protection for Communication and Identities In zero trust, cryptography plays a key role, which is, however, seldom at the forefront. Solid cryptography forms the basis for strong identities both for clients and for applications and is also the basis for securely encrypted and authenticated communication. Here, the methods used must be regularly adapted to evolving threats. Crypto agility and the future assistance of PQC (post-quantum cryptography) are therefore essential requirements. FAQ: Frequently Asked Questions Regarding Zero Trust What is a zero trust environment? > A zero trust environment is an IT or OT architecture in which no network area per se is regarded as secure. Every access request is individually checked, irrespective of location or network affiliation. Access to resources is provided only after clear authentication and authorization. Why is zero trust important for industry? > Industrial environments have a large number of networked machines, remote maintenance interfaces and external accesses. Frequent patch cycles like those in IT, however, are usually contrary to the stability and approval requirements of production. And then there is the long service life of the systems, which means that patches are often no longer available. Consequently, the potential for attack is particularly great. Zero trust helps specifically reduce this potential for attack by means of controlled access to individual applications and systems and thereby boost the protection and therefore the availability of industrial processes. What are the disadvantages of zero trust? > The implementation of zero trust is complex. It requires redesigning of the access models, integration into existing IT infrastructures and a rethink in terms of organization and processes. Without good change management, this can lead to opposition or inefficiency. Request a consultation You have questions regarding this topic or our security products? hen please contact our experts. We look forward to hearing from you! ANREDE Mr. Ms./Mrs. Various Keine Angabe Salutation * First Name Last Name * E-Mail * Phone Company * Your Request * For further information on the processing of your personal data, please refer to our data privacy police . Submit Security by Design Security by Design and by Default Products IT Security Solutions for High Security Requirements

What is AI Security? In the race to leverage the benefits of using AI systems, the security of these systems is becoming increasingly important. Companies and governments must ensure that they develop robust AI security strategies , in order to prevent malicious AI-powered attacks and, at the same time, to establish their own AI-assisted defense measures . On the other hand, the AI systems themselves must be safeguarded through the use of special technologies, tools and frameworks and protected against potential attacks. Key aspects of a secure AI are tamper protection, data security and system integrity. For this reason, the German Federal Office for Information Security (BSI) recommends that cyber security be given top priority. According to the BSI, it will be essential to increase the speed and scope of defense measures. This includes building a resilient IT infrastructure, improving attack detection, strengthening the prevention of social engineering (e.g., awareness training, multi-factor authentication, zero trust architecture) as well as using the general benefits of AI for defense purposes (e.g., threat and vulnerability detection). Safeguarding Against AI Attacks Protecting AI-Assisted Products Against AI Attacks AI poses considerable risks for IT security because it not only creates potential vulnerabilities in existing systems, but can itself also be the target of and a tool for attacks. The risk of cyber threats is particularly high for the public sector and critical infrastructures. To protect products with AI against attacks (also by other AIs), companies should implement multiple strategic measures. The topic of data protection in particular is becoming increasingly relevant. As AI analyzes large volumes of data, there is a risk that sensitive information could be compromised. Companies therefore need to ensure that they comply with data privacy regulations and take appropriate security precautions in order to prevent data misuse. 1. Averting complex social engineering attacks > Their aim is to acquire confidential information or obtain access by manipulating human behavior. Companies can significantly reduce the risk of such attacks by training employees and raising their awareness, by introducing strict security guidelines for access rights, password guidelines and security protocols, by using anomaly detection and by implementing clear-cut response mechanisms. 2. Detecting and averting prompt injection and manipulation > A key issue is the risk of prompt injections. In cases of prompt injection, manipulated inputs (prompts) cause an AI, particularly a language model, to unknowingly implement the intentions of the attacker. Prompt injections are especially relevant for AI-based applications such as chatbots, AI agents or language models that react to user input. The results of a successful prompt injection attack can vary greatly. They range from acquiring sensitive information through to influencing critical decision-making processes under the guise of normal operation. Protective measures include strict prompt validation and filter mechanisms that prevent non-secure or manipulated prompts from being processed. Regular tests and the monitoring of model outputs also help detect such attacks early on. 3. IT security for AI agents > As AI agents increasingly react autonomously, malfunctions or misinterpretation during the data analysis can lead to incorrect security measures. For example, a legitimate user could be wrongly refused access or an attack could be overlooked. Through a combination of technical robustness, human monitoring and continuous improvement (audits, updates and patches), companies can ensure that AI agents function reliably and potential risks are thus minimized. 4. Use of monitoring and anomaly detection systems > Similar to how anomalies can be detected with so-called machine learning (ML for short), cybercriminals can use AI-assisted systems to scan networks and systematically search for vulnerabilities via which disguised malware can be introduced and attacks on (other AI) systems carried out. AI-assisted systems for anomaly detection can help detect suspicious activities or unexpected behavior within the AI application or infrastructure. They identify unusual patterns, which could indicate a potential attack, and boost the capability to respond to possible attacks. 5. Protecting models against data manipulation > AI models that are trained using sensitive or critical data must be protected against data poisoning attacks. In such attacks, data manipulated during training is injected in order to impair the performance of the model. To ensure the integrity of the model, the training data must be checked regularly and its integrity monitored. Furthermore, only trustworthy data sources may be used. 6. Adversarial robustness and testing of models > Attackers can use so-called adversarial attacks in which slight changes to the input data mislead AI models. To avert such attacks, models should be tested with regard to their robustness against adversarial examples. Various tools can help harden models by running simulated attacks and revealing vulnerabilities. 7. Security architectures and zero trust > Zero trust architectures can help control access to AI models and their training data. With zero trust, every request for access to data or applications is checked and validated so that only authorized systems or users are granted access. This makes it difficult for attackers to penetrate the training or production environment of AI models. White paper Securely Integrating Generative AI The main strengths of AI (artificial intelligence) lie in its ability to analyze large amounts of data, adapt through learning processes, and solve complex problems. It is increasingly making decisions independently and implementing them. However, the increased use of AI in more and more areas means that AI security is becoming increasingly important. Traditional IT security architectures are often based on static rules that ward off known threats. However, these systems are often unable to adapt to the dynamic processes surrounding AI. In the white paper “Controlled Intelligence,” we present an architectural proposal for the secure local operation of generative AI models in a zero-trust network with active traffic monitoring and multi-layered perimeter security using solutions from genua. Read white paper Request consultation White paper Paths for the Secure Use of Generative AI in Business Solutions from genua for Protecting Your IT Infrastructure Reliable Protection for Networks, Data and Critical IT Infrastructures The fact is that attacks aided by AI systems are now also commonplace. genua offers a series of specialized IT security applications and solutions which you can use to protect yourself and your IT infrastructure against AI attacks. These solutions are designed for high-security environments and focus particularly on the protection of networks, data and critical IT infrastructures. High Resistance Firewall genugate Complete data analysis for maximum network security Certified Approved Firewall & VPN Appliance genuscreen Reliable protection for data transfers and networks Certified Approved VPN Software Client genuconnect Secure connection of Windows devices to internal networks up to classification level German VS-NfD Approved Secure E-Mail Gateway genumail Secure e-mail communication with the AI-supported Secure E-mail Gateway genumail for a reliable real-time defense against spam, phishing, malware, etc. Zero Trust Application Access genusphere Secure, browser-based access to shared applications IT Security Services On-site Support, 24/7 Hotline and Regular Update Services Safeguarding with AI How is AI Used as a Tool in Cyber Security? Many modern IT security products use artificial intelligence to detect and neutralize threats early on. They include tools for anomaly detection and authentication services. In these systems, machine learning (referred to below as ML) plays a central role in analyzing patterns and detecting atypical behavior so that potential threats can be identified before they cause damage. AI can thus provide consistent and long-term protection for IT systems. What is Machine Learning? By training algorithms using historical data, an AI can use ML to learn what is considered as normal behavior. AI is then able to detect data patterns that deviate from this normal behavior. In the cyber security recommendation from the BSI (BSI-CS 134), anomaly detection is given particular attention as a means for protecting networks. By analyzing (behavior) patterns, unusual activities and threats such as cyber attacks can be detected early on, data leaks revealed or system failures prevented. As part of network monitoring, abnormal data traffic or unusual user activities, for example, can be identified or malicious code detected by means of anti-virus software. Unlike conventional systems, which are based on signature-based approaches, ML algorithms learn continuously and can detect anomalies in real time. This then allows new threats (e.g., zero-day exploits) to be averted. The sorting and prioritization of the warning messages continues to be a key factor. This task is particularly prone to misclassification. To do this, ML models process extremely large volumes of data (scalability) and detect complex correlations which are not immediately obvious to human analysts. What are the Advantages of Machine Learning? Through continuous learning and optimization, the ML models improve constantly, which reduces the number of false positives. ML models can adapt to changing data patterns without the need for manual updating and remain effective even in the case of evolving threat landscapes or new behavior patterns. Furthermore, AI can use existing data to predict future threats and initiate protective measures early on, which reduces the workload on IT departments considerably. A further major advantage is the ability of AI to automate processes. Here it is not just a matter of detecting attacks in real time, but also reacting to them. So-called AI agents, i.e., autonomous, independently acting AIs, enable the automatic detection and elimination of threats. Routine tasks such as patch management and incident response can be automated. Automation and Intelligent Monitoring Zero trust architectures play a key role in IT security, but require a high level of monitoring and data processing. Through automation and intelligent monitoring, AI can help detect potential threats in real time and manage access dynamically. AI agents can, for example, analyze the behavior of users and devices. If the AI detects unusual access times or suspicious volumes of data, it can react in real time by automatically restricting or blocking access, requesting additional authentication measures, placing affected systems into quarantine or conducting an in-depth analysis. Moreover, they can initiate countermeasures autonomously and restore, e.g., corrupted or infected systems to a secure condition without human intervention. If AI is integrated into authentication and access control systems, known vulnerabilities such as purely password-based solutions can be overcome. This improves the accuracy and reliability of authentication and increases the security of the system. The targeted implementation of AI can help companies save time and resources, drastically increase the speed at which companies respond to threats and, at the same time, reduce the risk of human error. What is Retrieval-Augmented Generation? Retrieval-augmented generation (RAG) is one of the most important applications of AI. RAG is an enhanced AI system which can extract information from various data sources and allow this information to be used in the generation of responses. It not only uses the training data, but if required also accesses various other sources, e.g., databases of an organization, in order to improve the responses or to close knowledge gaps. In this way, RAG extends the already powerful functions of large language models (LLMs) without the model having to be retrained. Example: A user asks about a specific technical detail in a manual. The RAG system then compiles content-related text segments from its document database. This data together with the user's question is forwarded to the AI model, which uses the data to generate an informed response. In this way, even complex questions can be answered with tailored responses and the knowledge expanded dynamically. Hallucinations, i.e., responses invented by the model itself, are effectively reduced. Arrange a consultation now You are interested in arranging a consultation with our experts to find out how you can reliably protect your own IT infrastructure against AI attacks? Contact us now! Salutation Mr. Ms./Mrs. Various not specified Salutation * First Name Last Name * E-Mail * Phone Company * Your Request * For further information on the processing of your personal data, please refer to our data privacy police . Submit Security by Design Security by Design and by Default Zero Trust Protection With Confidence

Contact Form We appreciate your interest in our company and products. For general requests please use the following form. SALUTATION Mr. Ms./Mrs. Various Not specified Salutation * First name Last name * Email * Phone Company Street/No. Zip City COUNTRY Aland Islands Albania Algeria Andorra Angola Anguilla Antarctica Antigua and Barbuda Argentina Armenia Aruba Australia Austria Azerbaijan Bahamas Bahrain Bangladesh Barbados Belarus Belgium Belize Benin Bermuda Bhutan Bolivarian Republic of Venezuela Bolivia Bonaire Sint Eustatius and Saba Bosnia and Herzegovina Botswana Bouvet Island Brazil British Indian Ocean Territory British Virgin Islands Brunei Darussalam Bulgaria Burkina Faso Burundi Cambodia Cameroon Canada Cape Verde Cayman Islands Central African Republic Chad Chile China Christmas Island Cocos (Keeling) Islands Colombia Comoros Congo Cook Islands Costa Rica Cote d'Ivoire Croatia Cuba Curaçao Cyprus Czech Republic Democratic People's Republic of Korea Denmark Djibouti Dominica Dominican Republic Ecuador Egypt El Salvador Equatorial Guinea Eritrea Estonia Ethiopia Falkland Islands (Malvinas) Faroe Islands Fiji Finland France French Guiana French Polynesia French Southern Territories Gabon Gambia Georgia Germany Ghana Gibraltar Greece Greenland Grenada Guadeloupe Guam Guatemala Guernsey Guinea Guinea-Bissau Guyana Haiti Heard Island and McDonald Islands Holy See (Vatican City State) Honduras Hong Kong SAR of China Hungary Iceland India Indonesia Iraq Ireland Isle of Man Israel Italy Jamaica Japan Jersey Jordan Kazakhstan Kenya Kiribati Kuwait Kyrgyzstan Lao People's Democratic Republic Latvia Lebanon Lesotho Liberia Libyan Arab Jamahiriya Liechtenstein Lithuania Luxembourg Macao SAR of China Madagascar Malawi Malaysia Maldives Mali Malta Martinique Mauritania Mauritius Mayotte Mexico Micronesia Monaco Mongolia Montenegro Montserrat Morocco Mozambique Myanmar Namibia Nauru Nepal Netherlands New Caledonia New Zealand Nicaragua Niger Nigeria Niue Norfolk Island Northern Mariana Islands Norway Occupied Palestinian Territory Oman Pakistan Palau Panama Papua New Guinea Paraguay Peru Philippines Pitcairn Poland Portugal Puerto Rico Qatar Republic of Korea Republic of Moldova Reunion Romania Russian Federation Rwanda Saint Barthélemy Saint Helena Saint Kitts and Nevis Saint Lucia Saint Martin (French part) Saint Pierre and Miquelon Saint Vincent and the Grenadines Samoa San Marino Sao Tome and Principe Saudi Arabia Senegal Serbia Seychelles Sierra Leone Singapore Sint Maarten (Dutch part) Slovakia Slovenia Solomon Islands Somalia South Africa South Georgia and the South Sandwich Islands South Sudan Spain Sri Lanka Sudan Suriname Svalbard and Jan Mayen Swaziland Sweden Switzerland Syrian Arab Republic Taiwan（中国台湾) Tajikistan Thailand The Democratic Republic of the Congo The former Yugoslav Republic of Macedonia Timor-Leste Togo Tokelau Tonga Trinidad and Tobago Tunisia Turkey Turkmenistan Turks and Caicos Islands Tuvalu Uganda Ukraine United Arab Emirates United Kingdom United Republic of Tanzania United States Uruguay US Virgin Islands Uzbekistan Vanuatu Viet Nam Wallis and Futuna Western Sahara Yemen Zambia Zimbabwe Country TOPIC Sales Workshops & Trainings Recruiting PR & Marketing genudkids genufix general request Topic Request For further information on the processing of your personal data, please refer to our data privacy police . Send Head Office Kirchheim near Munich genua GmbH Domagkstraße 7 85551 Kirchheim near Munich Germany T + 49 89 991950-0 F + 49 89 991950-999 M info@genua.de Applicants: + 49 89 991950-0 jobs@genua.eu Accounting: Customers: invoice@genua.eu Suppliers: accounting@genua.eu Directions > With Public Transport from Munich Rapid-transit Railway (S-Bahn) S2 (Erding) until station Heimstetten Bus 263 (Messestadt West) until bus stop Kirchheim Rathaus Walk back the road Münchener Straße Cross the square Pfarrer-Caspar-Mayr-Platz turn right into the Merowingerstraße turn left into the Schwabener Weg Cross the Überrheinerstraße and follow the footpath to genua Subway (U-Bahn) U2 / U7 until Messestadt West Bus 263 (Heimstetten) until bus stop Kirchheim Rathaus Walk further the road Münchener Straße Cross the square Pfarrer-Caspar-Mayr-Platz Turn right into the Merowingerstraße Turn left into the Schwabener Weg Cross the Überrheinerstraße and follow the footpath to genua With Car Autobahn A99, gateway Kirchheim Turn into the road Staatsstraße 2082 towards Kirchheim Follow this road for about 2,5 km until the road Erdinger Straße Turn left into the Erdinger Straße Turn the next road left into the Liebigstraße Turn the next left into the Domagkstraße Hotels nearby Kirchheim > We recommend the following hotels in the immediate vicinity: Hotel Huber Moarstraße 10 85551 Kirchheim bei München tel +49 89 900592-51 Hotel Website Hotel Beim Schrey Dorfstraße 14 85551 Kirchheim bei München tel +49 89 907748-0 Hotel Website Office Berlin genua GmbH Oranienstraße 91 10969 Berlin Germany T + 49 89 991950-116 Directions > With Berlin Public Transport From Hauptbahnhof Berlin (Main railway station) Take Bus M41 (direction Sonnenallee/Baumschulenstraße) to Anhalter Bahnhof Change to Bus M29 (direction Hermannplatz) to Waldeckpark Walk onto Oranienstraße 91 From Airport Berlin Tegel (TLS/BER) Take Bus 128 (direction Osloer Str.) to Kurt-Schumacher-Platz Change to U6 (direction Alt-Mariendorf) to Kochstr./Checkpoint Charlie Change to Bus M29 (direction Hermannplatz) to Waldeckpark Walk onto Oranienstraße 91 From Airport Berlin Schönefeld (SFX/BER) Take Bus X7 (direction U Rudow) to last stop Change to U7 (direction S+U Rathaus Spandau) to U Hermannplatz Change to U8 (direction S+U S+U Wittenau) to U Moritzplatz Change to Bus M29 (direction Grunewald, Roseneck) to Waldeckpark Walk onto Oranienstraße 91 Office Cologne genua GmbH Hohenzollernring 39-41 50672 Cologne Germany T + 49 221 27263846 Directions > With COLOGNE Public Transport From Central Station Cologne U5 (direction Appellhofplatz) to station Friesenplatz use exit Friesenplatz From Airport Cologne/Bonn S13 (direction Hansaring) to station Hansaring U15 (direction Ubierring) to station Friesenplatz use exit Friesenplatz With Car From Central Station Cologne start in Trankgasse drive straight on until you can turn left to Hohenzollernring From Airport Cologne start in Flughafenstraße drive along until the interchange Wahn keep right and continue on A59 towards Cologne turn to road A559 in direction to interchange Gremberg use the B55/Deutzer Ring (direction Zentrum/Severinsbrücke) follow this road about 3 km afterwards, turn right to Hohenstaufenring drive straight on for 1 km, then turn right to Hohenzollernring Office Leipzig genua GmbH Neumarkt 29-33 04109 Leipzig Germany T + 49 89 991950-0 Directions > With Public Transport From Leipzig main station Take lines S1, S2, S3, S4, S5, S5X or S6 to Wilhelm-Leuscher-Platz Cross Roßplatz, through the park, to Neumarkt From Leipzig/Halle airport Take line S5 oder S5X (direction Zwickau Hbf) to Wilhelm-Leuschner-Platz Cross Roßplatz, through the park, to Neumarkt With Car From Leipzig main station Starting at Willi-Brandt-Platz, drive onto Georgiring (direction Grimma/A38) Follow the road and go straight ahead, crossing Augustusplatz At Roßplatz turn right into Universtitätsstraße Turn left into Schillerstraße Turn right into Neumarkt From Leipzig/Halle airport Take the A14 (direction Dresden/Leipzig) Leave A14 at exit 23 (Leipzig-Mitte) and access B2 Follow B2 in the direction of the city center Turn right into Dresdner Straße Keep to the right at Johannisplatz Drive straight ahead into Grimmaischer Steinweg Turn left at Augustusplatz At Roßplatz turn right into Universtitätsstraße Turn left into Schillerstraße Turn right into Neumarkt Office Stuttgart genua GmbH Heilbronner Straße 150 70191 Stuttgart Germany T + 49 711 49004152 Directions > With Public Transport The U-Bahn (tram) stop Pragfriedhof is directly in front of the building. Take the line U5, U6, U7 or U15 to get there From Nordbahnhof (Northern Station) The S-Bahn (suburban railway) stop "Nordbahnhof" (lines S4, S5, S6) is about 5 minutes away from the building by foot From Main Station The building is about 1 km away, northern direction With Car Turning off the express highway A 8 or A 81, you reach our office at Heilbronner Strasse 150 directly via Bundesstrasse B 27 direction city center (Stadtzentrum) Training Center Kirchheim near Munich genua GmbH Training Center Überrheinerstraße 5 85551 Kirchheim near Munich Germany T + 49 89 991950-0 F + 49 89 991950-999 M training@genua.de Directions > With Public Transport from Munich Rapid-transit Railway (S-Bahn) S2 (Erding) until station Heimstetten Bus 263 (Messestadt West) until bus stop Kirchheim Rathaus Walk back the road Münchener Straße Cross the square Pfarrer-Caspar-Mayr-Platz turn right into the Merowingerstraße turn left into the Schwabener Weg Cross the Überrheinerstraße and follow the footpath to genua Subway (U-Bahn) U2 / U7 until Messestadt West Bus 263 (Heimstetten) until bus stop Kirchheim Rathaus Walk further the road Münchener Straße Cross the square Pfarrer-Caspar-Mayr-Platz Turn right into the Merowingerstraße Turn left into the Schwabener Weg Cross the Überrheinerstraße and follow the footpath to genua With Car Autobahn A99, gateway Kirchheim Turn into the road Staatsstraße 2082 towards Kirchheim Follow this road for about 2,5 km until the road Erdinger Straße Turn left into the Erdinger Straße Turn the next road left into the Liebigstraße Turn the next left into the Domagkstraße Other Training Centers PC • COLLEGE, Berlin Stresemannstraße 78 (Near Potsdamer Platz) 10963 Berlin Germany Prokoda GmbH, Cologne Stolberger Straße 309 50933 Cologne Germany

Insights 30.04.2024 Research for Secure Software Development in the Post-Quantum World AMiQuaSy: Quantum Safe Software Supply Chain Based on CI/CD Platforms How can complex, heterogeneous IT networks be protected from quantum computers using the means currently at our disposal? This question is being addressed by the AMiQuaSy research project. Within the framework of this project, the consortium partners genua GmbH, XITASO GmbH and OTH Amberg-Weiden (a university of applied sciences) are investigating how the security processes of today's IT systems can be quickly adapted in the future to protect them against attacks from quantum computers. The AmiQuaSy Research Team The Project Details Project coordinator: XITASO GmbH IT & Software Solutions Partners: genua GmbH, OTH Amberg-Weiden Duration: 05/2023 – 04/2026 BMBF project website for AMiQuaSy (in German) Quantum computers are right around the corner – and in the foreseeable future will be able to open protective doors locked using currently effective cryptographic processes. It is therefore time to arm ourselves to ensure data security in the age of the quantum computer. After all, encryption methods and digital signatures are used for everything – from exchanging chat messages and visiting secure websites to shopping online and performing bank transfers. Even debit card and smartphone payments in stores would not be secure without cryptography. To ensure that communications remain quantum-safe in the future, potentially vulnerable cryptographic processes must be quickly replaced with secure alternatives. Quantum Resistant IT: On the Way to Implementation Selecting suitable quantum-resistant algorithms is a big challenge, especially when it comes to existing, complex infrastructures – such as the Internet – into which are incorporated many different types of software, some of which are old or proprietary, and various cryptographic processes. There is no longer a small set of proven, efficient processes that suffice for all applications. Moreover, post-quantum cryptography (PQC) processes have rarely been used so far, meaning that there is a lack of experience in this area. However, they are under constant development and several methods have proven feasible for the first steps of migration toward quantum-resistant IT. One example is the practical, trustworthy and secure mechanisms identified through genua's QuaSiModO research project – in the near future, it will be possible to operate quantum-secure virtual private networks ( VPNs ) using these mechanisms. How Does a Smooth Transition to Quantum Resistant Systems Work? Answering this question is the aim of the follow-up project AMiQuaSy (Agile Migration to Quantum-resistant Systems). A central component of this project is the migration to quantum-resistant processes and mechanisms in the context of secure software development. The recently discovered backdoor in the tool XZ Utils, which is also used in many other software products, demonstrates how seriously attacks on software supply chains must be taken. The subject of the AMiQuaSy research is a platform for Continuous Integration and Continuous Delivery (CI/CD). A system of this kind enables software developers and manufacturers to continuously work on code and regularly provide functional software versions via a (semi-)automated test and distribution system. This practice-oriented and generalizable development platform does not just provide all programming levels that are worthy of protection: A development network of this type also includes many kinds of technologies, from individual systems on dedicated hardware to cloud services, and from secure web protocols to VPNs. As a result, even in this relatively manageable scenario, transferrable quantum-resistant solutions can be developed. However, due to the lack of PQC solutions, it is first necessary to develop individual strategies to fulfill the variety of functionalities and requirements. As an initial step, the central components of a typical CI/CD platform must be secured. Here there is a lot of control over the systems and applications used – for example, thanks to open-source tools – so it is possible to draw conclusions regarding the behavior of individual systems and the overall system. The modified system is measured and analyzed in terms of stability, performance, interoperability and compatibility. Interchangeable Crypto Modules as the Basis for Cryptoagility In addition to this first research goal of developing suitable PQC-based systems in a wide range of application scenarios, cryptoagility concepts provide the second focus of genua's research. The integration of new processes or simply the use of bigger cryptographic keys repeatedly posed a challenge for IT even with classic processes. As a result, especially with the emergence of PQC, a vision formed: cryptoagility. There are many definitions of this term, but the aims are similar. Firstly, to ensure that all IT systems can be updated, since unfortunately even this is still not a matter of course. Furthermore, interchangeable crypto modules should make it possible to migrate from a cryptographic process to a PQC process quickly and as easily as possible, even in mature, real-world network infrastructures. It should also be possible to quickly replace one process with another in the event that a security gap is discovered, thereby minimizing the security risk while also reducing a system's downtime. But these solutions are often highly complex to implement and therefore require a lot of research to ensure that the solutions developed are not only secure but also practical. The results achieved are integrated into a demonstrator and evaluated to show the use of cryptoagility in the post-quantum context and the agile development approach in the CI/CD environment. The developed processes should secure the development platform used while also being transferrable to other systems and applications. Insofar as the developments in the project concern open-source projects, the results will be fed back into the corresponding projects as far as possible and new developments will also be made available on an open-source basis. This is necessary so that the developments resulting from the project can be standardized and the project partners can continue utilizing them even after the end of the project. Four questions to Stefan-Lukas Gazdag What are the Biggest Challenges Regarding the Migration to Post-Quantum Algorithms in Existing Networks? Stefan-Lukas Gazdag, crypto researcher at genua The current IT infrastructure, especially the Internet and all connected networks, is outdated and contains legacy vulnerabilities. New technologies are constantly being integrated, but all the systems and communication protocols still have to meet old standards from the 1980s and 1990s. This confusing and extremely heterogeneous blend of different types of system generally makes it difficult to integrate security mechanisms. Migrations in this environment are often expensive and time-consuming, as demonstrated spectacularly by the introduction of IPv6. However, delays in post-quantum migration are significantly riskier. With post-quantum algorithms, overcoming the known hurdles is significantly harder in practice because post-quantum algorithms mostly have higher requirements such as larger data structures and more computing power, they generally need to be used at least in a hybrid format in conjunction with a classic process rather than alone, and future changes need to be made simpler via cryptoagility. Therefore, progress can only be achieved gradually – by looking at smaller scenarios and consulting with standardization committees and the competent authorities. What Makes a CI/CD Platform Suitable? You have to choose one of the many different problems to focus on in order to answer the relevant questions in a targeted manner. CI/CD platforms are an important and increasingly popular basis for software development. However, a platform of this kind uses many different technologies, which also have practical relevance in other contexts. Thus, you can test one system while also developing transferrable solutions that are relevant to many applications. Another big advantage is that in this area, there are multiple popular open-source projects that can be used as a basis. What Role Does the Open Source Community Play? The migration to post-quantum cryptography is not just a technological challenge, but also an organizational one. Not only must authorities, standardization committees, universities, manufacturers and also users worldwide work together to develop solutions so that these have a chance of being used in practice, but also these solutions must actually be implemented in applications. When researching and investigating a topic in a holistic manner, a particular challenge is posed by dependencies resulting from proprietary solutions, since you are reliant on the associated manufacturers and their timely cooperation. It is far more practical when, as in the CI/CD context, important systems are available on an open-source basis. This enables potential solutions to be implemented and tested immediately. If, over time, solutions prove to be secure and practical, these can be offered to the open-source projects to directly generate added value for the general public. What Stage Is the Research Project Currently At? After an initial literature review, which reflected the current state of knowledge on PQC solutions and an associated migration, multiple strands began in parallel. On the one hand, the project is currently working on creating a crypto inventory. It is therefore necessary to find all places where cryptography is used in communication protocols and on systems. This can mean analyzing network traffic, looking at individual computers or surveying administrators. In addition, the project is evaluating this data and using it for network modelling so that the migration concepts can also be planned and tracked on an abstract level. Also, the first small tests were already carried out on the gitlab CI/CD platform. Moreover, a CI/CD platform like this is a complex construct made from a wide range of software, which is also being inventoried and will then be gradually adapted. Related links [1] To the BMBF (German Federal Ministry of Education and Research) project page for AMiQuaSy : The project is supported as part of the "KMU-innovativ" initiative of the German Federal Ministry of Education and Research. (in German) [2] To the project page for the previous project, QuaSiModO [3] Article: Watch Out, Crypto Hackers: The Gradual Progression to Quantum-Safe Cryptography [4] Read more about genua's current and completed research projects . Sales Contact Sales + 49 89 991950-902 sales@genua.eu Topics Research Encryption VPN Share Article Back to Overview

What is Security by Design? The Security by Design approach means that security is not simply "retrofitted" to a finished system as an add-on. Instead, it is taken into consideration starting at the first concept phase and integrated in all aspects of the development process – security by design and by default . This includes not only technical security measures, but also organizational processes and principles that ensure that potential vulnerabilities are detected and eliminated at any early stage. The strength of this approach lies in prevention: The goal is to stop security problems occurring in the first place instead of having to react later with elaborate and costly measures. This mindset minimizes risks, protects data and creates stable systems that are also able to meet tomorrow's challenges. genua's aim is to use Security by Design to make products which do not require customers to install critical security patches at a moment's notice and which never leave customers open to attack before patches are available. Secure by Design Pledge Commitment to Greater Security The Secure by Design Pledge is an initiative which was brought into being by the American Cybersecurity and Infrastructure Security Agency (CISA) and is supported by leading technology companies and security organizations. Its objective is the cross-industry promotion of security standards and to ensure that products and systems are developed with optimum security from the outset. Through this voluntary commitment, the signatories work together to minimize cyber risks, boost innovation and build trust in consumers and companies. genua is the first German company which in 2024 committed itself to the Secure by Design Pledge alongside numerous large, international firms. Basic Principles: This is How Security by Design Works Security by Design is based on the conviction that security should not be treated as a retrofitted add-on. Instead, it is regarded as an indispensable part of technologies and services. This gives rise to the following basic principles: Security awareness from the outset Special attention is already given to security issues in the planning phase of a project. This concerns not only the choice of technologies and architectures, but also the identification of potential attack vectors and vulnerabilities. Minimum principle Each system should provide only those functions that are absolutely necessary. Unnecessary features and open interfaces increase the number of weak points and are therefore avoided. Multi-layer security architecture (defense in depth) Instead of relying on a single security measure, protection mechanisms are integrated on multiple levels. Even if one layer of protection is breached, the system remains secure thanks to further barriers. Secure failover and restoration In the event of a system failure or disruption, the system must automatically switch to a secure condition. This means that no sensitive data is disclosed and the basic functions remain protected. Restoration following an incident also takes place in accordance with strict security guidelines in order to prevent unauthorized access or tampering. Automation and standardization Automated processes and standardized security modules minimize human errors and make security scalable. This allows security measures to be implemented efficiently in large and complex environments. Contact + 49 89 991950-902 sales@genua.eu The genua DNA For more than 30 years, IT security has been at the core of our corporate culture. As genua products are intended for use in critical infrastructure and at companies with an obligation to maintain secrecy, security has been included in their design from the outset. Long-Term Cost Savings Thanks to Efficient Security by Design Although implementation of Security by Design right at the beginning of the development process initially requires higher investment, it allows companies to realize considerable cost savings in the long term. Cost reduction through early error correction The removal of vulnerabilities during the development phase is far more cost-effective than eliminating them after the market launch or in the production environment. Retroactive intervention often requires substantial changes and extensive tests. Savings through the prevention of security incidents Cyber attacks and data leaks can cause enormous costs – both directly as a result of repair measures and indirectly due to legal consequences, financial penalties or the loss of customer confidence. With Security by Design, such incidents are less likely in the first place. More efficient operating processes Automated security solutions and standardized processes reduce maintenance and operating costs. A well thought-out security concept minimizes the need for subsequent updates and adaptations. Avoidance of image loss and recall campaigns Products with security flaws may make recalls and repairs necessary, which is not only expensive, but also harms the reputation of a company. Security by Design protects against such scenarios and boosts customer confidence. White paper Security by Design White paper Security by Design Digitization and networking is advancing almost everywhere. Unfortunately, IT and OT vulnerabilities are growing at least as fast. Particularly critical: These vulnerabilities are often found in security products that should actually provide protection. For this reason, Security by Design is becoming increasingly important. It is the foundation for more resilient systems and concrete steps that should be taken by manufacturers, operating companies, users and political decision-makers. This white paper shows how security can be embedded deep in the design of the product, thereby ensuring long-term security. Read White paper request a Consultation Example Applications: Security by Design is Particularly Important Here In systems where vulnerabilities can lead to attacks resulting in serious data loss, the use of security measures such as encryption, systematic access control and regular software updates is crucial. Only then is it possible to create a secure and reliable environment and instill confidence. Devices and applications in the IoT (Internet of Things) IoT devices are used in many areas, from smart homes and industrial applications to medicine. However, they are frequently poorly protected, which makes them susceptible to attacks. Such devices often have weak (default) passwords, open ports or unencrypted data connections. A successful attack could result in attackers compromising entire networks. They should therefore be equipped with encrypted communication channels, strong authentication mechanisms and restricted access from the outset. Cloud platforms Cloud services have become indispensable in modern IT. However, they also constitute major avenues of attack and an extremely lucrative target due to the huge volumes of sensitive data they process. Without security measures, data could be intercepted, manipulated or deleted. Inadequately protected services also pose a risk. Integrated security mechanisms such as access control, data encryption and automated threat detection protect cloud services. Modern vehicles In modern vehicles – in particular autonomous vehicles – software plays a crucial role. Vulnerabilities could facilitate tampering, which endangers vehicle occupants and other road users. Attacks on the vehicle could affect, for example, steering, braking or navigation, but also read out other important sensitive user data stored in the system. The strict separation of security-critical functions as well as secure software updates and protected data traffic make vehicles resilient against attacks. Security as Integral Part of Modern IT Security by Design is more than just a trend – it is a paradigm change in the development of modern IT systems and products. Companies that focus on security from the outset benefit from more robust systems, long-term cost savings and better protection of their data and customers. In a world which is increasingly affected by cyber threats, Security by Design is not just a choice, it is a necessity. Now is the time to integrate security awareness at the core of every project – for secure, sustainable and future-proof IT solutions. Arrange a consultation now Request a consultation You are interested in arranging a consultation with our experts to find out how you can better protect your own infrastructures and use our Secure by Design products to avoid data loss, tampering, regulatory issues and reputational damage? We would be pleased to make you a non-binding offer! ANREDE Mr. Ms./Mrs. Various Not specified Salutation * First Name Last Name * E-Mail * Phone Company * Your Request * For further information on the processing of your personal data, please refer to our data privacy police . Absenden

Product Trainings genucenter The genua security solutions can be configured, administrated and continuously monitored using the standardized GUI of the Central Management Station. Thanks to this overview, it is easy to stay on top of IT security and make sure all systems are up-to-date and running flawlessly. Changes and updates can be simultaneously transferred to any number of systems using convenient grouping functions. Policies can thereby be systematically implemented – on the entire network. And, if the IT security is reinforced with new appliances, they are easily integrated in the Central Management Station, where they are immediately set up with established configurations. Please note that we offer our regular training dates only in German. English speaking courses are available on request. Training Types genucenter Administrator Training To help you get to know the new features and learn how to use them correctly, we offer 1.5 training courses on genucenter. The most important functions are presented, demonstrated and tried out in practice. In addition to the new GUI structure, participants also learn about the new high availability concept. Prerequisites Previous participation in genuscreen Administrator Training Venue and Costs The training course takes place in Kirchheim near Munich , Cologne and Berlin . English speaking trainings are available on request. If you are interested in German speaking courses, please switch to our German website. Related Products Central Management Station genucenter Convenient and efficient administration of IT security solutions Your Contact +49 89 991950-906 training@genua.eu Information material IT Security Trainings Flyer Product trainings overview Training Catalog All about genua's product and partner trainings

IT Security Solutions for Industry, Critical Infrastructure KRITIS, Public Sector and Secret Protection: the Fields of Use of genua Organizations in both the private and public sectors are dependent on effective protection of digital infrastructures in order to master social tasks and the development of new business models with confidence. As an integral part of the IT security ecosystem in Germany, genua ensures future-oriented IT security in four fields of application. As a subsidiary of Bundesdruckerei, we combine long-term strategic and financial stability with innovation and research intensity. genua Einsatzfelder Public Sector genuas Solutions for Government Organizations IT security solutions for authorities and public institutions Read more Critical Infrastructure genuas Solutions for Critical Infrastructure Organizations IT security solutions for companies and organizations with critical infrastructure and sensitive systems Read more Defense genuas Solutions for Defense and Military IT security solutions for military networks and data communications Read more Protection of Classified Information genuas Solutions for Projects with Confidentiality Requirements IT protection for organizations with security tasks and companies that are subject to secrecy protection Read more Industry genuas Solutions for Industrial Value Networks IT security for networked machines and plants Read more Security by Design Security by Design and by Default Zero Trust Protection With Confidence AI Security Artificial Intelligence in Cybersecurity Knowledge Base Case Studies, White Papers, Specialist Articles, Interviews and Insights from the IT Industry Our sales team will be glad to answer your questions. We are looking forward to the contact with you. Request a consultation

Product Training: Keep Your Knowledge Up-to-Date In various training formats for our products, we show you how to correctly use and administrate the systems. Our product training courses focus on the current releases of the security solutions. Furthermore, we explain the structure, and function of our products in detail, discuss installation, configuration and support and explore other current aspects for use. Regardless of whether you participate in a course at our training location in Kirchheim near Munich, Berlin, Cologne or online (if available) – you always complete the course with an online test to become a "Certified Administrator" for the respective genua product. Sales Training for genua partners We offer exclusive training courses for our partners in order to familiarize you with the genua product portfolio and to continuously develop your know-how. Find all the important information about our training courses in the partner portal. LEARN MORE Exciting Change of Perspective: Welcome to the Hacking Bootcamp The Hacking Bootcamp is a three day workshop that realistically simulates the dangers of attacks to company networks or network infrastructures. On the basis of real scenarios, users learn how hackers operate and what tools they use. From the perspective of the attacker, you can better understand where vulnerable points may lie in your infrastructure and what safeguards are necessary. Learn more about the Hacking Bootcamp Your Contact +49 89 991950-906 training@genua.eu Information material IT Security Trainings Flyer Product trainings overview Training Catalog All about genua's product and partner trainings

Product Trainings genubox genubox can do a great deal! To help our customers fully utilize the possibilities, we offer you the Remote Maintenance Administrator Training course. Our training courses always cover the current releases of the security solutions and are held at our company headquarters in Kirchheim near Munich. Please note that we offer our regular training dates only in German. English speaking courses are available on request. Training Types Remote Maintenance Administrator Training To start with, the structure and functionality of genubox are clearly presented to teach you step-by-step about the installation, management via the server and how to load updates. Interesting application examples are another important point. As a participant, you should have basic knowledge of UNIX and TCP/IP. At the end of the course, you can take an online test to become a Certified Remote Maintenance Administrator. Venue and Costs The training courses take place in genua’s training rooms in Kirchheim near Munich . English speaking trainings are available on request. If you are interested in German speaking courses, please switch to our German website. Related Products Remote Service Solution genubox Secure service access to sensitive networks supports Zero-Trust concepts Your Contact +49 89 991950-906 training@genua.eu Information material IT Security Trainings Flyer Product trainings overview Training Catalog All about genua's product and partner trainings

Secure IT Infrastructures in Critical Infrastructure Organizations Whether for the energy and water supply or in the health sector: the functionality of many of the systems on which the population relies in daily life run digitally. This ensures fast communication but also makes the systems the target of cyber attacks. Operators of critical infrastructure therefore need to verify in accordance with § 8a BSIG that their IT security is state of the art and is, therefore, optimally protected. Above all, precise monitoring of the connections between internal and external communication networks is essential here. The products from genua ensure a secure IT landscape in critical infrastructures by, among other things, protecting data against unauthorized access by means of unique firewalls. Our IT security applications, which are produced exclusively in Germany, are certified with Common Criteria (CC) EAL 4+. More Information Success story: genubox secures remote access to Hitachi Energy‘s customers (PDF) Whitepaper: Securing critical infrastructure & implementing NIS2 (PDF) Success story: Eurogate puts its trust in genugate (PDF) Success story: Anomaly detection protects internal data traffic of the public services Bad Reichenhall Reasons Why IT Security Made in Germany For us, the label "IT Security Made in Germany" means combining quality, performance and service at a world-class level with a company culture whose pillars are integrity, customer orientation, sustainability and loyalty to location. Maximum Security genua meets the highest national and international security standards, a fact documented by, among other things, certificates and approvals for the restricted data sector. Our VPN solutions, for example, are approved by the German Federal Office for Information Security (BSI) up to the German classification level RESTRICTED (Classified – For official use only). Stability and Reliability genua considers itself to be part of the IT security ecosystem in Germany. As a company of the Bundesdruckerei Group, we combine long-term, strategic and financial stability with innovation and research intensity. Effective Solutions in the Critical Infrastructure Environment genua accompanies critical infrastructure organizations from the conception of a legally sound IT security infrastructure to the selection and implementation of compliant IT security products and the training and on-site support of the internal teams. Quality Without Compromise The solutions from genua are developed on the basis of certified quality management processes. Our QM certification verifies the highest quality standards for products, services and processes. Furthermore, genua uses the IT security certificates of the BSI for periodic quality assurance by an external, recognized testing authority. genua offers IT security solutions for critical infrastructures Products genua Ensures the IT Security of Critical Infrastructures Remote Service Solution genubox Secure service access to sensitive networks supports Zero-Trust concepts Industrial Firewall genuwall Strong Protection for Production Networks Data Diode cyber-diode High-Security Industrial Monitoring VPN Software Client genuconnect Enterprise The VPN Software Client connects Windows devices easily and reliably to company networks High Resistance Firewall genugate Complete data analysis for maximum network security Certified Approved High Resistance Firewall genugate Virtual Virtualized application level gateway for processing classified data Certified Approved IDS & IPS cognitix Threat Defender High-performance attack detection for reliable protection of IT and OT networks Firewall & VPN Appliance genuscreen Reliable protection for data transfers and networks Certified Approved Zero Trust Application Access genusphere Secure, browser-based access to shared applications See all IT security solutions Our sales team will be glad to answer your questions. We are looking forward to the contact with you. Contact us With the genucenter as a central management station, we administrate all remote maintenance elements from a central point. (…) The remote maintenance solution is simple and secure. Even if a laptop belonging to an external service technician is stolen, the laptop will make it only as far as the parking lot in front of the building. The interior of the building itself remains secure. This is security by default. Tobias Birk Deutsche Rentenversicherung Baden-Württemberg Certification of the components in accordance with the BSI protection profile is no longer required. But after having very good experiences with the components from genua, we continue to do so. This has proven to be very effective. These are complete appliances with hardware and software components built to match. Security and functionality are already optimized for the increased requirements. The genua company brings a great deal of experience to the table in this regard. Project Manager of the VPN Access Service CompuGroup Medical Deutschland Customer Stories from the Public Sector Our solutions secure the exchange of information in the application fields with the highest security requirements. Learn more from the practical experience of our customers. Case Study Remote Maintenance for the Energy Sector Hitachi Energy – A Fast Response Center for the Energy Transition Headquartered in Switzerland, Hitachi Energy plans and implements substations, high-voltage direct current transmission connections, transformer stations and numerous other energy supply systems. Through its Grid Automation Service, the company also maintains energy technology facilities worldwide. Hitachi Energy uses genubox technology from genua GmbH for secure remote… Read Article Case Study Remote Maintenance for Critical Infrastructure: Made Possible through Security Remote maintenance for critical infrastructure? A sensitive matter. The IT systems of the German Pension Insurance Association process medical and social data and are classified as critical infrastructure. The German Pension Insurance Association shows how remote… Read Article Case Study Anomaly Detection Protects Internal Data Traffic High reliability during operation and cost savings in service and support: The remote maintenance of SAP systems provides considerable user benefits. However, risks need to be avoided during remote access by external experts and a very high level of protection must be… Read Article Get More Information Would you like to set up a highly secure and sustainable IT infrastructure? Our experts will be glad to assist you: ANREDE Mr. Ms./Mrs. Various Keine Angabe Salutation * First Name Last Name * E-Mail * Phone Company * Your Request * For further information on the processing of your personal data, please refer to our data privacy police . Submit Public Sector genuas Solutions for Government Organizations Critical Infrastructure genuas Solutions for Critical Infrastructure Organizations Industry genuas Solutions for Industrial Value Networks Protection of Classified Information genuas Solutions for Projects with Confidentiality Requirements

IT Security for the Smart Factory The automation and networking of production processes is the decisive success factor in mechanical and plant engineering for increasing efficiency, continuously optimizing the OEE, implementing new business and service models, and sustainably improving resilience and responsiveness. The requirements for this are the most extensive possible use of environment, plant, and process data as well as the connectivity of all relevant assets such as machines, tools or automated guided vehicle systems both in the smart factory itself and with customers and suppliers. Only on this basis can central Industry 4.0 concepts such as remote monitoring & management, predictive maintenance, usage-based billing of systems or AI-supported predictive planning be implemented. Cyber attacks on production can be very costly. When production lines are down after an attack, it can threaten the very existence of a company. , Ralf Schubert, Geschäftsführer, Gerhard Schubert GmbH Cyber Security Risks in Production Networks The merging of classic IT, cloud platforms, operational technology (OT), and communication systems creates flexible and high-performance production landscapes that are largely autonomous and can increasingly be controlled virtually. However, it also confronts companies in the mechanical and plant engineering sector with enormous cyber security risks: from the sabotage of production processes and systems to the corruption of databases and industrial espionage. Remote maintenance in particular proves to be a critical gateway into the company's systems. Complete Control with Highly Secure Remote Access Solutions genua has proven expertise in this complex environment: We protect sensitive IT and OT interfaces, enable the highly secure connection of critical infrastructures and ensure reliably encrypted data communication. With our highly secure remote access solutions, our customers control machines, systems, and production processes while maintaining complete control over their systems. Here, among other things, video recordings ensure audit security. For a high level of protection at the critical transitions between IT and OT, we offer solutions that are developed according to the "security-by-design" principle. This significantly reduces the attack surfaces and eliminates human errors. Contact + 49 89 991950-902 sales@genua.eu Contact us genua has extensive experience in protecting systems and communication processes in networked and automated production systems. In particular with regard to remote maintenance, industrial cloud solutions, at the interface between IT and OT, and the use of AI solutions, we develop efficient, scalable and reliable IT security approaches. Products Industry 4.0 and IIoT: IT Security for Mechanical and Plant Engineering IDS & IPS cognitix Threat Defender High-performance attack detection for reliable protection of IT and OT networks Industrial Firewall genuwall Strong Protection for Production Networks Data Diode cyber-diode High-Security Industrial Monitoring Remote Service Solution genubox Secure service access to sensitive networks supports Zero-Trust concepts Central Management Station genucenter Convenient and efficient administration of IT security solutions See all IT security solutions More Information & Events Interview Highly Secure in Non-Secure Networks With OPC UA Read more White paper An Industrial Data Diode for Especially Critical Plants and Processes Download Events & Webinars Meet us: We look forward to talking to you in person! Event Calendar Get More Information Do you have questions about IT security in mechanical and plant engineering? Use the contact form or call us: +49 89 991950-902 . SALUTATION Mr. Ms./Mrs. Various Not specified Salutation * First name Last name * Email * Phone Company Street/No. Zip City COUNTRY Aland Islands Albania Algeria Andorra Angola Anguilla Antarctica Antigua and Barbuda Argentina Armenia Aruba Australia Austria Azerbaijan Bahamas Bahrain Bangladesh Barbados Belarus Belgium Belize Benin Bermuda Bhutan Bolivarian Republic of Venezuela Bolivia Bonaire Sint Eustatius and Saba Bosnia and Herzegovina Botswana Bouvet Island Brazil British Indian Ocean Territory British Virgin Islands Brunei Darussalam Bulgaria Burkina Faso Burundi Cambodia Cameroon Canada Cape Verde Cayman Islands Central African Republic Chad Chile China Christmas Island Cocos (Keeling) Islands Colombia Comoros Congo Cook Islands Costa Rica Cote d'Ivoire Croatia Cuba Curaçao Cyprus Czech Republic Democratic People's Republic of Korea Denmark Djibouti Dominica Dominican Republic Ecuador Egypt El Salvador Equatorial Guinea Eritrea Estonia Ethiopia Falkland Islands (Malvinas) Faroe Islands Fiji Finland France French Guiana French Polynesia French Southern Territories Gabon Gambia Georgia Germany Ghana Gibraltar Greece Greenland Grenada Guadeloupe Guam Guatemala Guernsey Guinea Guinea-Bissau Guyana Haiti Heard Island and McDonald Islands Holy See (Vatican City State) Honduras Hong Kong SAR of China Hungary Iceland India Indonesia Iraq Ireland Isle of Man Israel Italy Jamaica Japan Jersey Jordan Kazakhstan Kenya Kiribati Kuwait Kyrgyzstan Lao People's Democratic Republic Latvia Lebanon Lesotho Liberia Libyan Arab Jamahiriya Liechtenstein Lithuania Luxembourg Macao SAR of China Madagascar Malawi Malaysia Maldives Mali Malta Martinique Mauritania Mauritius Mayotte Mexico Micronesia Monaco Mongolia Montenegro Montserrat Morocco Mozambique Myanmar Namibia Nauru Nepal Netherlands New Caledonia New Zealand Nicaragua Niger Nigeria Niue Norfolk Island Northern Mariana Islands Norway Occupied Palestinian Territory Oman Pakistan Palau Panama Papua New Guinea Paraguay Peru Philippines Pitcairn Poland Portugal Puerto Rico Qatar Republic of Korea Republic of Moldova Reunion Romania Russian Federation Rwanda Saint Barthélemy Saint Helena Saint Kitts and Nevis Saint Lucia Saint Martin (French part) Saint Pierre and Miquelon Saint Vincent and the Grenadines Samoa San Marino Sao Tome and Principe Saudi Arabia Senegal Serbia Seychelles Sierra Leone Singapore Sint Maarten (Dutch part) Slovakia Slovenia Solomon Islands Somalia South Africa South Georgia and the South Sandwich Islands South Sudan Spain Sri Lanka Sudan Suriname Svalbard and Jan Mayen Swaziland Sweden Switzerland Syrian Arab Republic Taiwan（中国台湾) Tajikistan Thailand The Democratic Republic of the Congo The former Yugoslav Republic of Macedonia Timor-Leste Togo Tokelau Tonga Trinidad and Tobago Tunisia Turkey Turkmenistan Turks and Caicos Islands Tuvalu Uganda Ukraine United Arab Emirates United Kingdom United Republic of Tanzania United States Uruguay US Virgin Islands Uzbekistan Vanuatu Viet Nam Wallis and Futuna Western Sahara Yemen Zambia Zimbabwe Country TOPIC Sales Workshops & Trainings Recruiting PR & Marketing genudkids genufix general request Topic Request For further information on the processing of your personal data, please refer to our data privacy police . Send Public Sector genuas Solutions for Government Organizations Critical Infrastructure genuas Solutions for Critical Infrastructure Organizations Industry genuas Solutions for Industrial Value Networks Protection of Classified Information genuas Solutions for Projects with Confidentiality Requirements

Highlights High-Speed VPN Appliance genuline Hardware variants Information material Request Offer request for genuline We are pleased that you are interested in our product and are looking forward to your request. We will gladly send you a free quote without obligation. For this we need some information from you in advance. Salutation Mr. Ms./Mrs. Various Not specified Salutation * First Name Last Name * E-Mail * Phone Company Street/No. ZIP Andorra United Arab Emirates Afghanistan Antigua and Barbuda Anguilla Albania Armenia Angola Antarctica Argentina American Samoa Austria Australia Aruba Azerbaijan Bosnia and Herzegovina Barbados Bangladesh Belgium Burkina Faso Bulgaria Bahrain Burundi Benin Bermuda Brunei Bolivia Brazil The Bahamas Bhutan Bouvet Island Botswana Belarus Belize Canada Cocos (Keeling) Islands Congo Central African Republic Congo-Brazzaville Switzerland Côte d’Ivoire Cook Islands Chile Cameroon China Colombia Costa Rica Cuba Cape Verde Christmas Island Cyprus Czech Republic Germany Djibouti Denmark Dominica Dominican Republic Algeria Ecuador Estonia Egypt Western Sahara Eritrea Spain Ethiopia Finland Fiji Falkland Islands Micronesia Faroes France Gabon United Kingdom Grenada Georgia French Guiana Ghana Gibraltar Greenland Gambia Guinea Guadeloupe Equatorial Guinea Greece South Georgia and the South Sandwich Islands Guatemala Guam Guinea-Bissau Guyana Hong Kong SAR of China Honduras Croatia Haiti Hungary Indonesia Ireland Israel India British Indian Ocean Territory Iraq Iran Iceland Italy Jamaica Jordan Japan Kenya Kyrgyzstan Cambodia Kiribati Comoros Saint Kitts and Nevis North Korea South Korea Kuwait Cayman Islands Kazakhstan Laos Lebanon Saint Lucia Liechtenstein Sri Lanka Liberia Lesotho Lithuania Luxembourg Latvia Libya Morocco Monaco Moldova Madagascar Marshall Islands North Macedonia Mali Myanmar Mongolia Macao SAR of China Northern Marianas Martinique Mauritania Montserrat Malta Mauritius Maldives Malawi Mexico Malaysia Mozambique Namibia New Caledonia Niger Norfolk Island Nigeria Nicaragua Netherlands Norway Nepal Nauru Niue New Zealand Oman Panama Peru French Polynesia Papua New Guinea Philippines Pakistan Poland Saint Pierre and Miquelon Pitcairn Islands Puerto Rico Portugal Palau Paraguay Qatar Reunion Romania Russia Rwanda Saudi Arabia Solomon Islands Seychelles Sudan Sweden Singapore Saint Helena, Ascension and Tristan da Cunha Slovenia Svalbard Slovakia Sierra Leone San Marino Senegal Somalia Suriname São Tomé e Príncipe El Salvador Syria Eswatini Turks and Caicos Islands Chad French Southern Territories Togo Thailand Tajikistan Tokelau Turkmenistan Tunisia Tonga Timor-Leste Türkiye Trinidad and Tobago Tuvalu Taiwan Tanzania Ukraine Uganda United States Minor Outlying Islands United States Uruguay Uzbekistan Vatican City Saint Vincent and the Grenadines Venezuela British Virgin Islands US Virgin Islands Vietnam Vanuatu Wallis and Futuna Samoa Yemen Mayotte South Africa Zambia Zimbabwe Palestine Åland Heard Island and McDonald Islands Montenegro Serbia Jersey Guernsey Isle of Man Saint Martin Saint Barthélemy Bonaire, Sint Eustatius and Saba Curaçao Sint Maarten South Sudan Kosovo Country Your Request * For further information on the processing of your personal data, please refer to our data privacy police . Submit * required field CONTACT + 49 89 991950-902 sales@genua.eu

Highlights High-Speed VPN Appliance genuline Hardware variants Information material Request Information Material genuline genuline Facts & Features Transparent listing of all features of the VPN appliance genuline Flyer Basic information about the VPN appliance genuline Hardware, Data Sheet Clear listing of all features of the hardware variants

Highlights Highly Secure Certificate Solution genutrust Hardware variants Information material Request Hardware Variants for the genutrust Initialization Server Compare hardware Reset < > Model genuscreen XS Hardware ▴ ▾ Revision 2.1 CPU Intel Celeron N2807 (2 Cores, 1.58 - 2.16 GHz) Memory 4 GB Network interfaces default 4 x 1 Gbit/s RJ45 Optional network cards - Available network cards - Flash Drive 1 x 16 GB SSD DVD-ROM Drive - Graphics Connector - Serial Ports 2 x RS-232 USB Port 1 x High-Speed Type-A, 1 x USB 5Gbps Type-A Smartcard Slot 1 x Format ID-1 Performance ▴ ▾ Firewall TCP 940 Mbit/s 1 Firewall UDP 1970 Mbit/s 2 IPsec TCP 160 Mbit/s 3 IPSec UDP 195 Mbit/s 4 [1] tcp packets: 1448 byte [2] udp packets: 1500 byte bidirectional [3] Transparent IPsec tunnel (AES GCM, sha2-256), packets: tcp 1448 byte [4] Transparent IPsec tunnel (AES GCM, sha2-256), packets: udp 1400 byte bidirectional Chassis ▴ ▾ Power Supply 40 W Power consumption load 15 W BTU/h load 51.15 Fixture 19" rackmount optional Width 270 mm Height 44 mm (1 U) Depth 198 mm Weight 1.8 kg Weight (incl. Packaging) 3.0 kg Environment Operation ▴ ▾ Voltage 90 - 240 V AC, 60 - 50 Hz, 1 - 0.5 A, connector 1 x IEC-C14 Temperature 0 - 50 ℃ at 50 % humidity, non condensing Humidity 20 - 80 % non condensing Shock 1 G 11 ms half-sine Vibration 5 - 500 Hz, PSD 0.02 G²/Hz, 0.5 Grms Norms CE Environment Storage ▴ ▾ Temperature -20 - 70 ℃ at 50 % humidity, non condensing Humidity 10 - 90 % non condensing Shock 10 G 11 ms half-sine Vibration 5 - 500 Hz, PSD 0.02 G²/Hz, 0.5 Grms Our sales team will be glad to answer your questions. We are looking forward to get in touch with you. Contact Us

Our Guiding Principle The competent mastery of tasks faced by society as well as the establishment of new business models and the use of future technologies are based on an effective protection of digital infrastructures. A high level of IT security is necessary for laying the foundation for making courageous and creative decisions and for finding innovative solutions and opportunities in a dynamic world that is full of surprises and disruptions. As an IT security company of the German federal government, we have a special responsibility for ensuring the information security for the citizens of the Federal Republic of Germany. We play an active role in shaping the technological and political framework conditions here for a secure information society. Our mission is to continuously improve central fields of activity in the digital transformation through our expertise. To accomplish this, we combine a global perspective of the trends in IT security with intensively applied research, continuous further development of our products and solutions as well as excellent craftsmanship. Our work here is guided by non-negotiable principles: integrity, reliability, sustainability, and commitment to employees and location. These values also define the framework for our company growth. With our ideas and products, we are continually improving security in the digital world. We provide no backdoors, but rather place top priority on a responsible collaboration. After all, we are convinced that technological potentials should be utilized and improved – we are working on this together with our employees, customers and partners. Company Brochure Download PDF What Sets Us Apart Employees We value diversity in every regard and offer an attractive perspective, both for those just getting started in the working world as well as those who are developing further professionally. Stability genua can look back on a successful history that spans more than 30 years and, as a company of the Bundesdruckerei Group, stands for stability and sustainability in a dynamic market. Made in Germany All of genua’s solutions are developed and produced in Germany and satisfy the highest national and international security standards. Responsibility Fairness, integrity and an appreciation of employees, customers and partners as well as a commitment to location and social responsibility are the core of our culture. Quality genua is among the world’s most renowned IT security experts for complex and critical digital infrastructures. We develop and optimize our solutions on the basis of certified quality management processes. Trainee Firm genufix Our trainee firm is committed to social projects Career Munich, Berlin, Leipzig, Cologne, Stuttgart: Your career with the leading IT security specialist Innovation IT research projects with genua Facts & Figures A compact overview of our key business data Workshops & Trainings Bootcamps and Product Training at genua genukids Childcare with the Highest Standards Awards genua is regularly honored with renowned awards. All Awards "Qualified Manufacturer" in the New BSI Approval Process In 2019, genua was the first company to receive the manufacturer qualification for the "Qualified Approval Process" by the German Federal Office for Information Security (BSI). Innovator of the Year An analysis conducted by the business magazine "brand eins Wissen" and the statistics portal "Statista" named genua "Innovator of the Year" in 2019 and 2018. Our Sales Partners genua works together trustfully and successfully with sales partners from various industries and market segments. Using their technological know-how and comprehensive expertise in their business fields, our partners precisely gather the requirements of our customers. They plan, realize and manage solutions that meet these requirements with the highest commitment to quality. Learn more Our Customers genua enjoys the trust of important national and international public organizations, public authorities and companies that operate critical infrastructures. Moreover, we protect central systems in the manufacturing industry and thereby make an important contribution to the successful implementation of Industry 4.0 initiatives as well as the secure introduction of pioneering technologies. Our Network genua works intensively with key governmental organizations, leading technology enterprises, research institutions, committees and associations. We are convinced that the successful establishment of a sustainable and future-proof IT security ecosystem requires a multidisciplinary approach based on partnership. Our IT Security Ecosystem The competence network of genua includes internationally renowned technology partners, associations and organizations as well as renowned cooperation partners from the further education sector. In exchange with these players, we continuously broaden our perspective and jointly create innovative approaches for the further development of IT security. Technology Partners Avira Operations GmbH & Co. KG | CPN Satellite Services GmbH | CRYPTOCard | infodas | Kernkonzept GmbH | Microsoft Corporation | Pyramid Computer GmbH Associations, Societies and Sponsorships AFCEA | bayme vbm | Bitkom | DEUTSCHEN GESELLSCHAFT FÜR WEHRTECHNIK e. V. (DWT) | Erfolgsfaktor Familie | German Unix User Group (GUUG) e.V. | MÜNCHNER KREIS | IT Security made in Germany | Bundesverband IT-Sicherheit e.V. (TeleTrusT) | VDMA e. V. | Zukunftsforum Öffentliche Sicherheit e.V. | Sicherheitsnetzwerk München e.V. | SOS-Kinderdörfer weltweit | Verein Lachen Helfen e. V. Cooperation Partners IHK Akademie München und Oberbayern gGmbH | Fraunhofer-Gesellschaft zur Förderung der angewandten Forschung e.V. | G+F Verlags- und Beratungs- GmbH The History of genua Since the founding of the company in 1992, genua has specialized in challenging tasks in the area of IT security. Milestones in our successful history include: October 2025 First virtualized firewall & VPN gateway solution with VS-NfD approval genuscreen Virtual is the first virtualized firewall and VPN gateway solution to receive approval for processing data classified as VS-NfD (restricted) from the German Federal Office for Information Security (BSI). Juli 2024 First and only virtualized firewall with VS-NfD approval genugate Virtual is the first and so far only* virtualized firewall to receive approval from the German Federal Office for Information Security (BSI) for processing VS-NfD-classified data in Germany. *As of January 2025 November 2023 Great Place to Work genua is once again recognized as an attractive employer this year as part of the Great Place to Work® certification. November 2023 genua is a member of the Association for Office Dogs We believe that wellbeing in the workplace is essential, and our fluffy friends are at the heart of this philosophy. Juni 2022 genua turns 30 We celebrate with partners, customers and friends, look back and look to the future. Mai 2020 Excellence in Digital Security. genua Presents new Logo. Every now and then you need to reinvent yourself. For this reason, genua has revised its logo. Oktober 2019 First Firewalls with BSI Approval up to German Security Level RESTRICTED The solutions from genua enable use up to the German classification level "RESTRICTED." genua is thus the first manufacturer to offer firewalls with BSI approvals. Mai 2019 genua Takes Over IT-Security Start-Up cognitix The start-up cognitix now operates under the flag of genua. Through this cooperation, we are able to expand our portfolio of high-quality security solutions. März 2019 BSI Names genua First "Qualified Manufacturer" in the new BSI Approval Process As a result of this award, product approval is shortened from approximately one year to just a few months. Juli 2018 Data Diode vs-diode: BSI Approval for the SECRET Classification Level To transfer data at black-red interfaces, genua scores with the vs-diode data diode. The high security solution convinced the BSI to grant approval up to the SECRET classification level. Juni 2017 genua Celebrates its 25th Anniversary We look back on a quarter century of company history. genua celebrates this event under the motto "With certainty, just the start." November 2016 Recipient of the TeleTrusT Innovation Award 2016 We are pleased to receive the renowned award for our cyber-diode data diode. August 2015 Bundesdruckerei Acquires Majority Stake of genua With 52%, Bundesdruckerei GmbH holds a majority stake of genua GmbH. The common vision: Develop high security solutions "Made in Germany." Juli 2015 Third Award as "Bavaria’s Best 50" for High-Growth Companies For the third time, genua is again among the fifty highest growth companies. August 2013 We Open our Capital City Office in Berlin-Mitte genua is also located in the heart of the capital city beginning in the summer of 2013. April 2013 Third Top Ranking in "Germany's Best Employer" Competition We receive the bronze medal in category "Germany's Best Employer." November 2011 genua Opens a Location in Stuttgart Following the location in Cologne, a location is also opened in the German state of Baden-Württemberg. August 2008 We Open a Branch Office in Cologne – our Second Location After our Headquarters in Munich genua expands and, with the second location in Cologne, shortens travel distances for companies and public authorities in the region. September 2009 Childcare in the genukids Company Day-Care Center Interest was expressed in having a childcare option available within genua’s facilities at the company headquarters in Kirchheim – that’s precisely what genua accomplishes with the genukids day-care center beginning in 2009. September 2008 We Welcome the 100th Employee The number of employees at genua is now a three-digit figure: genua welcomes the one-hundredth coworker. Juli 2007 genuscreen Firewall 1.0 Receives a Security Certificate Acc. to Common Criteria EAL 4+ From the BSI Based on careful analyses of the security functions, the firewall is certified on a high level. September 2006 genugate Firewall 6.0 is Recertified by the BSI and Classified as Highly Resistant Having satisfied the high requirements of security level EAL6, the firewall receives the designation "Highly Resistant." Oktober 2005 Deloitte Recognizes genua with the "Fast 50" Award for Successful Technology Companies Consulting firm Deloitte names us as recipient of the award for the fastest growing technology companies. Juni 2004 System Change: The genugate Firewall Runs on the Free Operating System OpenBSD A change occurs for the firewall products. In the future, the proven firewalls will run on the free software OpenBSD which, due to the open source code, is especially well suited to this task. Februar 2003 New genubox Appliance Enables Convenient Remote Maintenance With genubox, high-security remote maintenance solutions are possible practically anywhere. Januar 2003 genua Moves into new Company Building in Kirchheim near Munich We are happy with the move to our new headquarters. März 2002 Quality Seal: genugate is First Firewall to Receive a BSI Certificate Experts of the German Federal Office for Information Security (BSI) test the firewall and classify it as "Highly Resistant." Oktober 2001 The 50th Employee Joins the genua Team Nearly ten years after its founding, genua welcomes its 50th employee to the team. November 1997 Start of the genugate Series of Firewall Products genua starts its genugate product series. The high resistance firewall satisfies the highest IT security requirements through strong content analysis. November 1995 MAN Corporation Becomes Major Client genua acquires the leading commercial vehicle corporation MAN as a client. Januar 1994 genua Installs the First Firewall Solution Two years after the founding of the company, the first firewall solution is used by our customers. Januar 1992 The First Step: genua is Founded in Munich genua is founded as a company for network and UNIX administration. Right from the start, we focus on the challenges and solutions in IT security.