A network security design that physically or logically prevents external data from being written to a facility's control network. In thermal engineering, this guarantees that process-critical equipment like high-temperature boilers cannot be remotely modified, ensuring operational safety and data integrity.