Imaging vendor VPN ran 24/7 into the clinical network for diagnostics that happened once a quarter.
−92%
Vendor remote-access hours
Unchanged
Patches applied per quarter
0 open
BIT audit findings · imaging
What happened
Chapter 01
The hospital's imaging fleet included MRI, CT, and ultrasound across 4 facilities. The largest vendor maintained a permanent VPN tunnel into the imaging subnet to support all four sites — a single credential with line of sight to every modality.
Chapter 02
AGN1 units were placed on each modality network's vendor-facing line. Vendor sessions now open on demand via SMS from a biomedical IT phone, or on a recurring monthly schedule for known patch windows. Sessions auto-close after 90 minutes.
Chapter 03
Biomedical IT audit findings around vendor access closed in two cycles. The number of patches applied stayed flat — the change was in when those patches were applied, not whether. The vendor was initially reluctant; after the third successful patch window, they asked if AirGapNet was available for their other hospital customers.
Disclaimer · Composite case based on conversations with healthcare biomedical IT teams in 2024–2025. Specific numbers represent typical scope, not a single deployment.
See if your pattern matches
Most pilots look like one of these three.