A network security architecture that restricts data transmission to a single direction, typically from critical operational networks to external enterprise networks. This ensures that sensitive thermal control systems remain fully isolated from external cyber threats on the IT network.