TotalHeal for government and air-gapped networks
On-premises and air-gapped: available on request. The control plane installs from one signed kit with an offline licence file and offline update and threat-data bundles — nothing calls out to the internet. The Government profile is also available on the India-region SaaS.
Product by product, as each datasheet states it
| Product | Profile | Status | Note |
|---|---|---|---|
| DeviceSphere UEM | Air-gapped | Available | Android works over the local network; iPhone and iPad management uses Apple Push. |
| PatchPilot Patch Management | Air-gapped | Available | Devices update from your internal sources (WSUS or local mirrors). |
| RemoteLink Remote Access | Air-gapped | Available | Offline kit, offline licence file and offline update bundles. |
| VulnSight Vulnerability Management | Air-gapped | Available | The vulnerability feeds and the control plane run offline. |
| ThreatGuard NGAV / Endpoint Protection | Air-gapped | Roadmap | No offline definitions package yet. |
| ZeroGate ZTNA | Air-gapped | Available | Offline kit, offline licence file and offline update bundles. |
| PrivilegeVault PAM | On-premises / air-gapped | Available | On-premises or fully offline, delivered with our team from one kit. |
| WebShield WAF | Air-gapped | Available | Offline kit, offline licence file and offline update bundles. |
| TrafficShield Bot management & L7 DDoS | Air-gapped | Available | Offline kit, offline licence file and offline update bundles. |
| DNSGuard DNS Firewall | Air-gapped | Available | Offline kit, offline licence file and offline update bundles. |
| LogIntelligence SIEM | Air-gapped | Available | Offline kit, offline licence file and offline update bundles. |
| ThreatFusion XDR | Air-gapped | Available | Offline kit, offline licence file and offline update bundles. |
| ResponseFlow SOAR | Air-gapped | Available | Offline kit, offline licence file and offline update bundles. |
| CyberAware | On-premises / air-gapped | Available | With your own mail and DNS servers. |
- Installed with our team from one kit; licence, updates and threat data arrive offline.
- iPhone and iPad management needs Apple Push, which an air-gapped network cannot reach.
- No third-party security certification is held today.
What the kit installs
The whole control plane on one Linux server, under systemd with no container runtime: the console, a gateway for HTTPS, sign-in and the agent channel, the TotalHeal control plane, a bundled PostgreSQL database and offline threat data (vulnerability advisories, NVD, CISA KEV, GeoIP). At run time it makes no call to TotalHeal or Sttiz cloud.
Sign-in with your directory
Active Directory / LDAP (LDAPS or StartTLS, groups to roles), SAML 2.0 (Entra ID, ADFS, Keycloak, Okta, Shibboleth) or OpenID Connect, plus local accounts with two-step sign-in. The setup administrator is a break-glass account, and at least one always remains.
Air-gapped operation
Licences arrive as signed offline files and updates as signed offline bundles, with upgrade, rollback, nightly backups and threat-data refresh without internet. The Admin Console app (coming) connects only to your gateway.
Measured, not estimated
Tested on Rocky Linux 8, Ubuntu 20.04 and Debian 12 in containers limited to 4 vCPU and 6 GiB RAM: the kit is 213 MiB, install and first-run setup take about a minute, and the control plane used about 4.4 GB of memory holding the offline threat data. Sizing for larger fleets has not been measured yet.
Products in development (ThreatTrace desktop EDR, ThreatFusion XDR, LogIntelligence SIEM and others) list their planned deployment profiles on their own pages when they are ready. See the roadmap.
Talk to us about government & air-gapped.
Tell us what you need to protect and how many devices or users. We reply with a quote and the procurement documents you ask for.
Or email business@totalhealsecurity.com.