A secure edge gateway with dual WAN ports for network segmentation, supporting signed-firmware-only OTA updates under IEC 62443 and NIST frameworks.