Bridge the gap between your CNC machine and your network.

CodePod and CodeNet are purpose-built devices that carry program files to your machines over an encrypted connection. The control stays off your office network, and nobody walks another USB drive across the shop floor.

The problem

Your machines outlive your IT policy.

A CNC machine stays on the floor far longer than the software inside it stays current, and even a brand-new control has no business sitting on your office network. That gap is where shops lose time — and where auditors start asking questions.

Controls that can’t be patched

The systems inside most controls stopped receiving security updates long ago and can’t be brought up to date. If the machine can read a file share or a USB drive, we can connect it, whatever its age or brand, and it stays on your floor. Replacing a machine that still holds tolerance is an expensive way to fix a file transfer problem.

File sharing that got switched off

The file-sharing methods these controls were built around have been switched off on modern networks. They were never secure, so IT departments removed them. Every year, fewer of the old ways still work.

So the USB drive comes back

Sneakernet is what’s left. A drive in someone’s pocket carries no encryption and leaves no record of where it has been, and somebody walks it out to the machine again every time a program changes. It is also the hardest habit to defend in a CMMC assessment.

How it works

A data broker in the middle

The device stands on both sides of the boundary and hands files across. Your network sees a modern, authenticated, encrypted endpoint. The machine sees the same file share or USB drive it has always seen. Neither side is ever on the other’s network.

How an Iron Glacier device sits between your network and your CNC machine Your shop and office network connects to the Iron Glacier device using SFTP or HTTPS over Wi-Fi or Ethernet. The device authenticates the user, accepts only the file types you allow, keeps each user’s files separate, and stores them encrypted. It then presents the file to the CNC machine as a standard network file share or a USB drive. Traffic does not route between the two sides. Shop & office network Engineering, programming, scheduling SFTP / HTTPS Wi-Fi or Ethernet CODEPOD / CODENET Authenticate the user Reject by file type Store encrypted at rest Separate files by user no traffic routes across File share / USB isolated segment CNC machine Any age, any brand, unchanged How an Iron Glacier device sits between your network and your CNC machine Your shop and office network connects to the Iron Glacier device using SFTP or HTTPS over Wi-Fi or Ethernet. The device authenticates the user, accepts only the file types you allow, keeps each user’s files separate, and stores them encrypted. It then presents the file to the CNC machine as a standard network file share or a USB drive. Traffic does not route between the two sides. Shop & office network Engineering, programming, scheduling SFTP / HTTPS Wi-Fi or Ethernet CODEPOD / CODENET Authenticate the user Reject by file type Store encrypted at rest Separate files by user File share / USB isolated segment CNC machine Any age, any brand, unchanged

The two sides of the device cannot see each other. Only what you allow crosses the middle.

Encrypted on the network side

Connect over secure Wi-Fi or plain Ethernet. Every upload is encrypted, and every person gets their own login and their own file space instead of one shared folder the whole building can reach.

Filtered in the middle

The device accepts only the file types you allow and refuses the rest at the upload. Files sit encrypted at rest, and every connection is authenticated before anything moves.

Familiar on the machine side

The control sees a standard network file share or a USB drive, which is exactly what it already knows how to read. Nothing is installed on the machine, and nothing about the way your operators work has to change.

Products

Two ways to solve it. Built the same way.

Which one fits depends on how your machines connect and how many of them you have. If you’re not sure, tell us what’s on your floor and we will point you at the right one.

CodePod

One device per machine · Ethernet

The full-capability option. Beyond file transfer, CodePod can bridge machine data protocols back to your office network, making it both a file bridge and a monitoring gateway for the same machine.

  • Secure file transfer over SFTP and HTTPS
  • MTConnect and OPC‑UA port forwarding for uptime monitoring
  • Ethernet-type DNC drip feed for programs too large to fit in control memory
  • Remote connection support for authorized service access
  • Multiple named users with per-user file isolation
CodeNet

One server · up to 8 machines · USB

The cost-effective route for smaller shops, and the answer for machines that can take a USB drive but cannot share files over Ethernet. One server distributes files to receivers that plug straight into each control.

  • Secure file transfer to multiple machines from one server
  • Receiver plugs into the machine’s USB port and draws power from it
  • Appears to the control as an ordinary USB flash drive
  • Upload once, then send to one machine or push to all of them
  • Files encrypted at rest and delivered only to the paired receiver
  • Nothing for the operator to configure; receivers pair automatically
Why Iron Glacier

Built for the shop floor, not adapted to it

Iron Glacier is an American company, small by choice and working on a single problem. Twenty years on the machines shaped these products.

No PC to maintain

No Windows PC to buy, license, patch, or babysit in the corner of the shop. It is one sealed device that does one job.

Works with what you own

Age, brand, and control generation don’t matter. If the machine can read a file share or a USB drive, it can be connected.

Nothing to teach the operator

Programs appear where they have always appeared, so there is no new screen to learn at the control. What changes is that the file waiting there is the one the programmer just sent, and nobody is hunting for a USB stick that works.

Built from the floor up

Twenty years of hands-on CNC experience is behind these products, and a lifetime around computers before that. The design decisions come from both sides of the problem.

Compliance Upgrade

Facing CMMC? Add it when you need it.

If you handle Controlled Unclassified Information, the file path to your CNC machine is part of your assessment scope. A Compliance Upgrade adds audit logging, certificates issued to your users, and enforced password rotation to either product.

It is a signed software update. Order it with your unit, or unlock it years later without sending anything back. If nobody is assessing you, you do not need it yet.

The upgrade helps you close a specific gap. It supports your compliance program. It does not by itself certify your organization.

  • Access Control (AC)
    Named accounts, role separation, per-user file isolation
  • Media Protection (MP)
    Removes the loose USB drive from the workflow entirely
  • System & Communications Protection (SC)
    Encrypted transport, default-deny firewall, network isolation
  • Audit & Accountability (AU)
    Connection and configuration logging with user attribution

Tell us what’s on your floor.

Send us your machine list, with makes, models, and how they connect, and we’ll come back with a straight recommendation and a quote. No pressure and no drip campaign.