I think you misunderstood iuguy's description. > unconnected system I understood this to be a literal description. I presume that this sheep dip station is m

I think you misunderstood iuguy's description. > unconnected system I understood this to be a literal description. I presume that this sheep dip station is maintained and updated, from time to time. However, that would be done using controlled, vetted media. And, if something goes wrong there, it has to been in the nature of something that will cause the masking of problems existing on the written/finalized media that the sheep dip station is in turn vetting. (Unless it's something that can "un-finalize" the vetting media and further write to it.) Or is the sheep dip station periodically connected while it is itself maintained/updated? That I could see presenting problems. In any event, I read this to mean in particular that the sheep dip station is not networked with the air gapped system.