RackTop Systems
Products / BrickStor SP / SAN Gateway
Deployment Option — SAN Gateway

BrickStor SP SAN Gateway — Cyberstorage on any block storage

Connect to block capacity via iSCSI or Fibre Channel and convert it into high-performance, highly-available secure NAS. BrickStor SP as a SAN gateway delivers the full Cyberstorage stack — Active Defense, ABAC, ImmutaVault, immutable audit — without replacing the storage you already own.

Why a Gateway

Preserve the SAN. Add Cyberstorage.

Roughly 80-90% of the world's data is unstructured — file and object — but a huge share of enterprise investment is in block SAN platforms that were never designed to defend that data against modern threats. Replacing them is rarely an option.

BrickStor SP SAN Gateway sits in front of any iSCSI or Fibre Channel SAN and turns its block capacity into secure NAS — NFS, SMB, and S3 — with the same Cyberstorage stack that ships in the bare-metal BrickStor SP platform: inline Active Defense, native ABAC, ImmutaVault virtual air gap, immutable audit, and surgical recovery.

You keep the SAN you already own. You add the active defense it doesn't have.

Full BrickStor SP Feature Set

The same Cyberstorage stack — on your block storage

SAN Gateway is not a stripped-down version. Every BrickStor SP capability runs on top of the SAN you point it at.

Cross-protocol file and object

NFS 3 / 4 / 4.1 / 4.2, SMB 2 / 3 / 3.1, and S3 served from the same dataset on top of your SAN capacity — with the same Cyberstorage policy across every protocol.

AES-256 encryption with integrated KMIP

FIPS 140-3 validated AES-256 protects data at rest and in flight. Integrated KMIP-compliant key management with automated rotation — no separate encryption project.

Inline compression and deduplication

Reduce the SAN footprint of file data with inline compression and dedup. RAM cache acceleration keeps active datasets hot.

Space-efficient snapshots with file indexing

Immutable, policy-driven snapshots capture change with a sub-minute RPO. File indexing makes recovery searchable, not a guessing game.

Active Defense — inline threat detection

Every file operation evaluated against behavioral analytics and ABAC policy inline. Ransomware, insider misuse, and bulk exfiltration are stopped at the storage layer before they propagate.

UBA and integrated compliance reporting

Immutable user-behavior audit and continuous compliance evidence produced as a byproduct of how the platform operates — exportable to your SIEM, accreditation package, or audit team.

Architectural Benefits

Economical, easy to install, easy to operate

  • Preserve existing SAN investment — add Cyberstorage without a forklift upgrade.
  • Convert block capacity to secure NAS capacity in under an hour in most environments.
  • Capacity-based licensing — pay for usable, not raw.
  • Same BrickStor management plane — Hub Central, ABAC policy, audit, snapshots, replication.
  • No agents, no proxies in front of the SAN — BrickStor SP runs as the gateway, your SAN is the back-end.
Validated SAN Partners

Works with the block platforms you already run

BrickStor SP SAN Gateway works with any iSCSI or Fibre Channel SAN. These are the platforms where we have established partnerships and deployment experience.

Everpure

Formerly Pure Storage — high-performance all-flash arrays.

HPE

HPE Primera, Alletra, Nimble, 3PAR, and other HPE block platforms.

IBM

IBM FlashSystem and other IBM block storage.

JetStor

JetStor SAN arrays for cost-optimized capacity tiers.

Have a different SAN platform? BrickStor SP SAN Gateway is designed to work with any iSCSI or Fibre Channel target. Talk to an engineer about your environment.

Use Cases

Where SAN Gateway earns its keep

Add Cyberstorage to an existing SAN footprint

A program office has a fleet of all-flash SAN already in production. BrickStor SP SAN Gateway adds Active Defense, ABAC, ImmutaVault, immutable audit, and surgical recovery on top — without replacing the block layer or migrating data off it.

Convert under-used block capacity to secure NAS

SAN bought for one workload, partially under-subscribed? Stand up BrickStor SP as a SAN gateway and convert the spare capacity into secured SMB / NFS / S3 shares for unstructured workloads — without provisioning a new appliance.

High-availability secure NAS on enterprise SAN

Pair BrickStor SP with the enterprise SAN your operations team already runs (Everpure, HPE, IBM, JetStor) to deliver high-performance, highly-available Cyberstorage with the resilience characteristics of the underlying block platform.

Defend file workloads on block-only platforms

For programs whose primary investment is in block storage but whose data security gap is on the unstructured side, SAN Gateway closes the gap without forcing a separate NAS purchase.

Other Deployment Options

The same BrickStor SP, three deployment paths

Cyberstorage on the SAN You Already Own

Talk to a RackTop storage architect about sizing SAN Gateway against your existing block platform and converting capacity into secure NAS without a forklift upgrade.

SAN Gateway: Cyberstorage for Existing Block Storage | RackTop | RackTop Systems