(Part Number – CEP-007-2530-01) BlackTube RS530 CEP – Converts RS530 serial data connections into AES encrypted IP packets – Encrypted RS530 Over IP – Switches – BABA Certified Switches – BABA Switches – Made in USA Switches – Made in America Switches – Engage

Description

Overview

Leverage Existing Bulk Data Encryption for Data over IP

The Black•Tube CEP RS530, whose synchronous serial interfaces are configurable as DCE or DTE, provides for the leveraging of existing synchronous serial bulk rate encryptors such as; KIV-7, KIV-7M, KIV-19, OMNI, and KG-84. The Black•Tube CEP RS530 encapsulates synchronous serial data from Data Terminal or Communication Equipment into IP packets. These IP packets are sent to a remote Black•Tube CEP RS530 where the serial data is de-encapsulated and synchronously clocked into the remote Data Equipment. The IP connection provides for the transparent interconnection of Synchronous Serial Data Equipment via LANs, WANs, MANs, Satellite and Wireless Ethernet. Configured Data rates from 2.4 Kilobits per second to 2.048 Megabits per second.

Layer 1

In Layer 1 operating mode every bit is encapsulated into an IP packet. The size and frequency of the IP packets can be setIn Layer 1 operating mode every bit is encapsulated into an IP packet. The size and frequency of the IP packets can be setwith data rates from 75 bits to 2.048 Megabits per second. Latency minimization is accomplished with FIFO sizing for the lowdata rate settings. A configured number of incoming packets are buffered in order to compensate for the packet delivery jitterintroduced by the Ethernet network. The size of this buffer is configured to accommodate the peak amount of jitter.

Asynchronous Over IP

Asynchronous characters from the RS530 interface with 5 to 8 data bits, baud rates from 1.2 to 38.4 kilobits, 1 or 2 stop bitsAsynchronous characters from the RS530 interface with 5 to 8 data bits, baud rates from 1.2 to 38.4 kilobits, 1 or 2 stop bitsthat are with or without parity are efficiently encapsulated into IP packets. The encapsulation supports block mode transfersto minimize the bandwidth required. Additionally the latency is controlled by setting the Tube Bytes per packet.

HDLC Over IP

In Layer 2 operating mode HDLC Data frames, such as those used by Wide Area Networking protocols PPP and Frame RelayIn Layer 2 operating mode HDLC Data frames, such as those used by Wide Area Networking protocols PPP and Frame Relayor proprietary Data Links, are transported within IP packets as HDLC over IP. The latency introduced is dependent upon theclocking rate and the HDLC frame size. Minimum latency is obtained by maximizing the clock rate and minimizing the MTU.HDLC Over IP frames are directly sent out the Serial interface since Clock synchronization is not required. WAN securityprovisioning, such as firewalling, is maintained.+

Assured Delivery Protocol

In order to assure high quality communications over linkswith intermittent or noisy performance, such as Wireless, the Black•Tube CEP RS530 employs Engage’s robust AssuredDelivery Protocol with the following benefits:• Packet out of sequence detection and re-sequencing• Duplicate skipping• Lost packet retransmissions with configured delay

Three LAN Interfaces

All Black•Tube CEP RS530 models ship with three10/100BaseT Ethernet LAN ports. The Ethernet interfaces provide for:

• Management interface on MLAN
• The Dual LAN Data Plane ports can be configured for:

• Connections over 2 Asymmetrical bandwidth links
  
• Protector Option for Redundant Packet Paths with Constant or Switch Over Criteria

Applications

Flexible Synchronous Serial Data Extension Over IP

The Black•Tube CEP RS530, whose serial interfaces are configurable as DCE or DTE, facilitates the transport of bulk dataacross a combination of IP and WAN infrastructures. The Black•Tube CEP RS530’s flexibility supports internetworking acrossvaried LAN/WAN/MAN/Satellite networks. The size and frequency of the IP packets can be set with data bit rates from 76bits per second to 16 million bits per second. Latency minimization is accomplished with multidimensional adaptive clockconfigurations.

Typical Applications:

• RS530 LAN to LAN interconnect
  
• Secure Video TeleConferencing
  
• Field Command Centers
  
• Secure Wireless Bridge connections

+

Black•Tube CEP RS530 for Type 1 Encrypted Data Over Internet Protocol

Defense and other Government agencies and Contractors face an ever-increasing need to establish Type 1 secure data communications links. These organizations often have access to flexible IP services such as Intranets, LANs, Metropolitan-Area Networks, WANs, or Wireless Ethernet. The Engage Black•Tube CEP RS530 allows users to leverage existing Bulk Data Encryption Modules for use over IP/Ethernet connections. Encrypted Data over IP with the Black•Tube CEP RS530 is a veryeconomical solution that leverages a proven installed base.

Encrypted Bulk Data-over-IP utilizing the Black•Tube CEP RS530 is an economical “Purpose Built” proven solution that leverages aninstalled base of high-performance INFOSEC devices. Approved Data Encryptors include:

• KIV-7 • KIV-19 • OMNI • KG-84

Flexible DCE to DTE Synchronous Serial Data Extensions over IP

+

Black•Tube CEP Management

Management Module

Black•Tube CEP isolates management and data plane func-tionality with the use of two separate processor modules. Management processor access is limited to encrypted ses-sions via SSH, or SNMPv3, that employ AES 256 bit keys and sophisticated NIST passwords. These sessions may be estab-lished after authentication via TACACS+ or Radius.

The independent Linux based management plane of the Black•Tube CEP ensures Critical Infrastructure Data is iso-lated from management network access. The Management Module uses internal serial ports to connect to the Data Planeprocessor.

Administration and User Logs are available with Syslog.

CEP security features include:

• Administrative policies for adding, removing, disabling andrenaming authorized users; limiting user access to assignedcommands; and enabling only desired port numbers.

• User authentication directly to the Black•Tube CEP or in conjunction with TACACS+ or RADIUS servers

• RSA SecureID support for two factor trusted compliance.

• An SSH command interface encrypting management traffic
with powerful 256 bit symmetric keys and NIST based pass-words.

+

NERC Critical Infrastructure Protection Compliance

The Black•Tube CEP installations achieve NERC CIP compliance with a combination of internal and external functions.

Internally the Management Module software has the sophistication to implement comprehensive policies and privileges for administrator and user accounts. Administrator policy includes removal, disabling or renaming.

Interoperability with external functions such as Syslog, Network Timing Protocol, TACACS+ and Radius with its support for RSA SecureID delivers trusted compliance.

Electronic Security Perimeter

The Black•Tube CEP in combination with industry standard services meets the Electronic Security Perimeter’s NERC CIP-005 specifications. In addition Control Plane isolation from the Data plane provides a higher level of security for the Cyber Assets.