Cybersecurity Suite
Network Isolation Equipment
1G, 10G, 40G

VCL Products > Cybersecurity Suite > Network Isolation (Kill) Equipment
UNMS Supported
Network Isolation Equipment
Network Isolation Equipment - Back
Network Isolation Equipment
Network Isolation Equipment - Back

VCL-5052/5054, Network Isolation Equipment

Get Data Sheet

What is a Network Isolation Equipment and why does an organization require it?

The VCL “Network Isolation (Kill) Equipment” provides the last line of defense in the event that a network security breach or unusual network activity is detected. The “Network Isolation (Kill) Equipment” can be used in conjunction with any brand of “Firewalls,” “Network Traffic Sniffers,” and multiple VCL-2143 “Network-MouseTrαp(s)™ / Advanced Honeypot” devices to automatically initiate a series of defensive actions that would have been planned as a counter-defense network policy by the network administrator.

VCL-Network Isolation (Kill) Equipment can be used to trigger the isolation of critical areas of the network, such as data storage servers, etc., to enhance security against potential threats.

Most network administrators rely solely on a “firewall” to secure their IP networks. Some network administrators go one step further and also deploy an additional “Network Traffic Sniffer,” which monitors and flags the transmitted and received data anomalies. However, very few network administrators actually plan for an eventuality after a “firewall” has been breached and the “network traffic sniffer” has recorded anomalies in the data that is being transmitted and received.

The “Network Isolation (Kill) Equipment” provides the last line of defense in the event of a network security breach. The “Network Isolation (Kill) Equipment” can be used in conjunction with a “Firewall,” “Network Traffic Sniffer,” and multiple VCL-2143 “Network-MouseTrαp(s)™ / Advanced Honeypot” to automatically initiate a series of defensive actions that would have been planned by the network administrator in the event of a network security breach.

Such actions would include:

  1. Disconnecting the Local Area Network (LAN) from the Wide Area Network (WAN).
  2. Disconnecting only a specific data storage device (SAN/NAS) or server from the local network.
  3. Generating “Audio-Visual Alarms,”
  4. Sending “SNMP Traps,”
  5. Sending “Network Security Alerts” to a centralized NMS,
  6. Intrusion Detection Alarm indicator
  7. Power LED indication.

Features & Highlights:

Fail-Safe. Never itself becomes a point of failure.

  1. The equipment maintains data connectivity if the port was put in the operational mode, even in power-down condition or upon control card failure.
  2. The network port shall continue to remain in isolated mode if the port was put in the isolation mode prior to power down or control card failure.
Quad Port Network Isolation (Kill) Equipment
  • 2U, 19-inch rack-mount substance chassis
  • May be used where up to four ports are required to be isolated from the network
  • Available with 1G Optical (LC), 10G (LC) Optical, and 40G (LC) Optical Interfaces.
  • Supports:
    • 1 x 1G/10G IN (Optical)
    • 1 x 1G/10G OUT (Optical)
    • 4 x 1G/10G IN (Optical/suitable for SFP/SFP+)
    • 4 x 1G/10G OUT (Optical/suitable for SFP/SFP+)
    • 1 x 40G IN (Optical/suitable for QSFP+ with breakout cable)
    • 1 x 40G OUT (optical/suitable for QSFP+ with breakout cable)

“Network Isolation (Kill) Equipment” provides manual and automatic isolation of the local area network from the wide area network in the event of a network security breach/cyberattack.

1 x Port Optical (LC) Network Isolation Equipment: VCL-5052

Number of Ethernet Ports 2
Interface Orientation 1 x 1G / 10G Gigabit Ethernet Interface towards network
1 x 1G / 10G Gigabit Ethernet Interface towards protected equipment
Guaranteed Maximum Data Throughput 1000 Mbps on 1G Port
10,000 Mbps on the 10G Interface
Interface Types 1 x 1G/10G, MM, OM4 (Optical) IN
1 x 1G/10G, MM, OM4 (Optical) OUT

4 x Port Network Isolation Equipment: VCL-5054

Number of Ethernet Ports 4+4 x 1G / 10G or 1+1 x 40G Interfaces
Interface Orientation Up to 4 x 1G/10G or
1 x 40G Gigabit Ethernet Interfaces towards network
Up to 4 x 1G/10G or
1 x 40G Gigabit Ethernet Interfaces towards protected equipment
Interface Types 1 x 1G/10G, MM, OM4 (Optical) IN
1 x 1G/10G, MM, OM4 (Optical) OUT

Communication Options:

  • SSH / Telnet (option to disable clear text communication)
  • CLI Control Interface (HyperTerminal or VT100)

Management and Control Ports:

  • Serial Management Port – USB (Out of band access)
  • 10/100 BaseT for remote management
  • 10/100 BaseT Control Interface – For switching using SNMP Traps SNMP v2 & v3
  • Serial Control Interface – RS232 out of band access - For switching using scripted commands or Honeypot, Security server, firewall, snifferes, etc.
  • Serial Control Interface – RS485 out of band access - For switching using scripted commands or Honeypot, Security server, firewall, snifferes, etc.

External Trigger Inputs:

Single Port Version Quad Port Version
8 x External Alarm Trigger Inputs
(Contact Open / Contact Close)		 8 x External Alarm Trigger Inputs
(Contact Open / Contact Close)

External Alarm Outputs:

Single Port Version Quad Port Version
1 x 12V DC Visual Alarm and
1 x 12V DC Audio Alarm		 1 x 12V DC Visual Alarm and
1 x 12V DC Audio Alarm

Power Consumption:

Single Port Version Quad Port Version
< 18W, Maximum at ambient
(steady state 24°C)		 < 22W, Maximum at ambient
(steady state 24°C)

Power Supply Options:

  • AC Power (90 to 240V AC, 50/60 Hz)
  • DC Power 24V DC; 48V DC; 110V DC; 220V DC
  • 1+1 redundant (AC and/or DC) power supply option is available for 19-Inch Rack Mount version

Compliance & Regulatory:

  • EMC FCC Part 15 Class 2
  • Operation ETS 300 019 Class 3.2
  • Storage ETS 300 019 Class 1.2
  • Transportation ETS 300 019 Class 2.3

CE Compliance:

  • RoHS, Low Voltage Directive 2014/35/EU
  • Electromagnetic Compatibility 2014/30/EU

IEC Standards:

  • IEC - EMC – Certified to EN 55032: CISPR 32, EN55024:2005
  • IEC 61000-6-2 (Immunity), IEC 61000-6-4 (Emission)
  • Complies to IEEE and IEC standards
VCL-5052, Mechanical Drawing (PDF)
VCL-5054, Mechanical Drawing (PDF)

UNMS (Unified Network Management System)

  • Secure (supports TLS/SSL for encrypting connections between devices)
  • Permission-based security
  • Uses Software Defined Perimeter (SDP), the username/password login are replaced with Single-Packet Authorization (SPA) and the receiving device cannot be seen by hackers. This introduces an additional layer of security and is beneficial with or without SSL/TLS.
  • Guaranteed message delivery (no data loss or duplication of data)
Read More...