sentences:  Traditionally, when the IT network provides DMZ server access for an authorized user, the data is vulnerable to intrusions from the IT network.However, with a unidirectional gateways separating a critical side or OT network with sensitive data from an open side with business and Internet connectivity, normally IT network, organizations can achieve the best of both worlds, enabling the connectivity required and assuring security.This holds true even if the IT network is compromised, because the traffic flow control is physical in nature.