Black•Tube RS530 CEP

The Black•Tube CEP RS530, whose serial interfaces are configurable as DCE or DTE, facilitates the transport of bulk dataacross a combination of IP and WAN infrastructures. The Black•Tube CEP RS530's flexibility supports internetworking acrossvaried LAN/WAN/MAN/Satellite networks. The size and frequency of the IP packets can be set with data bit rates from 76bits per second to 16 million bits per second. Latency minimization is accomplished with multidimensional adaptive clockconfigurations.

Typical Applications:

• RS530 LAN to LAN interconnect
  
• Secure Video TeleConferencing
  
• Field Command Centers
  
• Secure Wireless Bridge connections

Defense and other Government agencies and Contractors face an ever-increasing need to establish Type 1 secure data communications links. These organizations often have access to flexible IP services such as Intranets, LANs, Metropolitan-Area Networks, WANs, or Wireless Ethernet. The Engage Black•Tube CEP RS530 allows users to leverage existing Bulk Data Encryption Modules for use over IP/Ethernet connections. Encrypted Data over IP with the Black•Tube CEP RS530 is a veryeconomical solution that leverages a proven installed base.

Encrypted Bulk Data-over-IP utilizing the Black•Tube CEP RS530 is an economical "Purpose Built" proven solution that leverages aninstalled base of high-performance INFOSEC devices. Approved Data Encryptors include:

• KIV-7 • KIV-19 • OMNI • KG-84

Black•Tube CEP isolates management and data plane func-tionality with the use of two separate processor modules. Management processor access is limited to encrypted ses-sions via SSH, or SNMPv3, that employ AES 256 bit keys and sophisticated NIST passwords. These sessions may be estab-lished after authentication via TACACS+ or Radius.

The independent Linux based management plane of the Black•Tube CEP ensures Critical Infrastructure Data is iso-lated from management network access. The Management Module uses internal serial ports to connect to the Data Planeprocessor.

Administration and User Logs are available with Syslog.

CEP security features include:

• Administrative policies for adding, removing, disabling andrenaming authorized users; limiting user access to assignedcommands; and enabling only desired port numbers.

• User authentication directly to the Black•Tube CEP or in conjunction with TACACS+ or RADIUS servers

• RSA SecureID support for two factor trusted compliance.

• An SSH command interface encrypting management traffic
with powerful 256 bit symmetric keys and NIST based pass-words.

The Black•Tube CEP installations achieve NERC CIP compliance with a combination of internal and external functions.

Internally the Management Module software has the sophistication to implement comprehensive policies and privileges for administrator and user accounts. Administrator policy includes removal, disabling or renaming.

Interoperability with external functions such as Syslog, Network Timing Protocol, TACACS+ and Radius with its support for RSA SecureID delivers trusted compliance.

The Black•Tube CEP in combination with industry standard services meets the Electronic Security Perimeter's NERC CIP-005 specifications. In addition Control Plane isolation from the Data plane provides a higher level of security for the Cyber Assets.