VCL-2142, Endpoint Voice and Data Encryption | Valiant

Cybersecurity Suite
Enigmatron Xcöde

VCL Products > Cybersecurity Suite > Enigmatron Xcöde
UNMS Supported
Enigmatron Xcöde
Enigmatron Xcöde
Enigmatron Xcöde
Enigmatron Xcöde


3D View Mechanical Drawing (PDF)

VCL-2142 Enigmatron Xcöde:
Endpoint Voice and Data Encryption

Get Data Sheet

VCL-2142 Enigmatron Xcöde is low data rate endpoint encryption equipment with advanced features that may be installed to secure voice and data communication in critical infrastructure such as defense, financial institutions, electric substations, smart grid distribution systems, oil and gas infrastructure, and railway signalling networks from being compromised or accessed by hostile elements.

The VCL-2142 Enigmatron Xcöde may also be installed in point-to-point as well as in point-to-multi-point applications in centrally managed networks consisting of multiple edge locations to provide secure communications between multiple RTU terminals and their corresponding IEC 60870-5-104, MODBUS-TCP, and DNP central server(s) located in Load Dispatch Centre(s) / SCADA Management Centre(s) and Rail Traffic Control Room(s).

Versions and Technology Deployment:

VCL-2142 Enigmatron Xcöde (Remote Unit)

  • High-Security Data Encryption Equipment
  • Encrypting RTU data between RTUs and the SCADA server.
  • point-to-point -104 and DNP RTU Data Encryptor.

The VCL-2142 Enigmatron Xcöde can be used in “point-to-point” applications. The VCL-2142 Enigmatron Xcöde may also be used with VCL-5040 Enigmatron Equipment in “Point-to-Multi-Point” applications.

VCL-5040 (Central Unit)

  • High-Security Data Encryption Equipment with Integrated Firewall.
  • Designed to work in high data throughput, point-to-multipoint applications.
  • Supports a maximum of up to 500 x Enigmatron Xcöde (remote) units with a maximum combined data throughput of up to 1Gbps.
  • Encrypting data between multiple RTU terminals and the IEC 60870-5-104, MODBUS-TCP, and DNP server(s) located in load dispatch centres/SCADA management centres and rail traffic control.

Interfaces—Terminal:

  • Total Number of Ethernet Interfaces : 5
    • Four 10/100 RJ45 equipment interfaces in the local (trusted) LAN interfaces
    • One 10/100/1000 RJ45 network interface to the WAN (untrusted) network interface
  • Integrated four-port Ethernet switch
  • Auto MDI/X (straight or crossover Ethernet cable correction)
  • USB serial port for local access and configuration.

Supported Security Protocols:

  • IPSec, OpenVPN

Supported Data Encryption Algorithms:

  • AES128, AES192, AES256

Form factor and maximum encrypted data throughput per VCL-2142 Enigmatron Xcöde terminal:

  • Compact, DIN-Rail Remote Data Encryption Terminal
  • Maximum Encrypted Data Rate = 10 Mbps with AES256 data encryption

Network Support:

  • IPv4 Routing
  • Ethernet
  • VLAN tag preservation
  • IPv4

Monitoring and Access Control:

  • Password Strength Monitor
  • Device Management and Alarm Monitoring
  • Command Line Interface—Telnet, SSH with clear text disable option (default)
  • SNMPv2 Alarm Monitoring
  • Alarm condition detection and reporting (traps and SNMP alarm table)

Power:

  • 15V DC ~ 60V DC (DIN Rail Mounting Version)
  • 85V DC ~ 250V DC (External Adapter Option).
  • 100~240V AC, 50/60Hz (external adapter option).
  • Power Consumption: 9W at maximum load (DC)
  • Power Consumption: 15W at maximum load (AC, with external AC to DC adapters)

Firewall—Features and Capabilities:

  • Deep Packet Inspection
  • Per-frame/packet authentication
  • Firewall
    • Port (Soft) - based
    • MAC - based
    • IP address-based
    • IP domain-based
  • Whitelist and blacklist options
    • White List Exception allowed and blocks all other traffic by default (system default mode)
    • Black List Exception blocked and allows all other traffic by default.
  • Seamless scalability
  • Infrastructure neutral
  • Transparent to network and applications
  • Easy installation and management

Application:

  • Utilities: Electric generation, transmission, and distribution
  • Smart Grid Distribution Systems
  • Oil & Gas production, pipelines
  • Remote nodes in SCADA multi-drop networks
  • Railway Signalling Infrastructure: Rail Traffic Control Room(s)
  • All distributed data networks consisting of a central server and multiple edge locations.

Application Diagram #1:


Enigmatron

Application Diagram #2:


Enigmatron
Mechanical Drawing (PDF)

UNMS (Unified Network Management System)

  • Secure (supports TLS/SSL for encrypting connections between devices)
  • Permission-based security
  • Uses Software Defined Perimeter (SDP); the username/password login is replaced with Single-Packet Authorization (SPA), and the receiving device cannot be seen by hackers. This introduces an additional layer of security and is beneficial with or without SSL/TLS.
  • Guaranteed message delivery (no data loss or duplication of data)
Read more