VCL Products > Cybersecurity Suite > Data Storage Server
VCL-9090, NAS & Data Storage Server
with Cybersecurity
The VCL-9090 is an industrial-grade Network Attached Storage (NAS) Server that is designed for critical infrastructure organizations that require high-performance, ransomware resilient data storage solutions with up to Three-Factor Authentication (3FA) option, for highly secure environments such as government, financial, and enterprise storage systems. The VCL-9090, when installed in the Valiant Data-storage (VDE) Eco-system provides not only a fault-tolerant, high dependability, high-reliability data storage solution but also offers a high resilience to internal faults as well as to external threats, such as real-time detection of ransomware attacks. The VCL-9090 is scalable to offer 24 (HDD) drives, each with a maximum capacity of up to 24 TB giving a raw data storage capacity of 576 TB (over half a Petabyte).
The VCL-9090 is offered with a “perpetual licence” feature i.e. the hardware, software and all licenses are included with the equipment with no additional or annual licensing cost or charges.
The VCL-9090, also offers a comprehensive network management system (NMS) feature that allows the network administrators, alerts in real-time, in case of any alarms, such as arising from impending disk failures, possible hostile network intrusions, or a possible ransomware attack. The server also provides hard disk isolation, interface isolation options so that any disk (or a set of disks or interfaces) can be dedicated to a particular department which can only be accessed by those select entities thereby improving security and data management. The VCL-9090 supports various RAID configurations for improved redundancy and performance. The Industrial-grade NAS server comes with redundant power supplies, hot-swappable drives in a rugged industrial chassis, making it suitable for installation in data centres where data integrity and data security is of utmost importance.
Administrators can securely manage and monitor the VCL-9090 through its NMS, which is an intuitive, web-based interface. In summary, the Industrial-grade NAS server is an ideal storage solution for all critical infrastructure organizations that are seeking secure, reliable and scalable storage infrastructure with advanced features.
Key Cybersecurity Features:
- Ransomware resilient NAS & Data Storage solution
- Multi-factor Authentication - TOTP (Time + OTP based)
- Audio and Visual Alerts in the event of Disk removal/failure
- Lock-down of Local Console on Primary and Secondary NAS Systems to prevent un-authorized access
- Perpetual Licence at no extra cost
- Data Encryption - AES 256
- Network Management System-Extensive monitoring (HTTP(S) based)
- Encrypted Backup and Disaster Recovery
- On-site and Off-Site data backups
- Periodic, user scheduled, incremental data back up sessions of offsite system with active, hard network isolation
- Encryption key validation before Encrypting any data
- Audio/Visual Alarms in the event when an unvalidated / unauthorized encryption key is attempted to be used
- Recurring Read-only Snapshots
- Snapshots with WORM Technology
- User programmable option to increase the Snapshot
- Retention Duration on the Destination System
- Replicate to a Secondary NAS System
- Using a Separate Replication Network
- Set Separate Administrative Passwords
- Configurable Two-Factor Authentication (2FA) for Administrators.
NAS Data Storage Servers versions:
VCL NAS Data Storage Servers offer different versions to include multiple layers of cyber security that include:
- Network Isolation equipment
- Vaulted Data Storage when coupled with Data Diode
- EMP (electromagnetic pulse) data storage protection available.
Additional Security Features:
- “Pull Replication” in Offsite Server: The offsite backup server autonomously initiates a network connection to facilitate a scheduled data backup and then automatically disconnect from the network after executing its periodic data backup.
- NTP Synchronization for Scheduled Backup Service: The offsite backup server synchronizes its operations with the on-site Network Time Protocol (NTP) Server, establishing connections at predetermined administrator assigned times and seamlessly going offline upon successful backup completion.
- Resilience to Ransomware Attack via Read-Only Snapshots: The immutability of read-only files and folders provides a robust defence against ransomware attacks by preventing their encryption
- IP Filtering Capabilities: Administrators have granular control over access permissions by specifying the allowed IP domains for specific shared resources
- Network Access Protection: Access to server resources and shares is restricted based on predefined IP address ranges, enhancing security and control Two-step authentication for secured access
- HTTPS Secure Connection: A secure Hypertext Transfer Protocol Secure (HTTPS) connection is established to protect the web-based graphical user interface (GUI) against potential Man-in-the-Middle (MITM) attacks.
- Importable SSL Certificate Requirement: The establishment of HTTPS connections necessitates the presence and utilization of SSL certificates for secure data transmission.
- AES 256-bit Volume-Based Data Encryption: Sensitive data may also selectively be safeguarded through implementation of advanced 256-bit AES encryption, applied at the volume level.
3FA (Three-Factor Authentication)
3FA is typically used in highly secure environments, including:
- Military & Government Data Centers
- Healthcare & Medical Record Systems (HIPAA-compliant servers)
- Financial & Banking Systems
- Top-Tier Cloud Storage Providers (AWS, Google, Azure for sensitive data)
- Crypto Exchanges & Secure Vaults
Highlights:
- NAS server with up to 24 hard drives and maximum 24 TB per drive storage.
- Each audio / visual alarm can be assigned to a specific alarm.
- Restrict data access based on IP ranges, physical network connections or predefined network policies.
- Storage elements (i.e. data drives) can be assigned on a per-interface basis.
- Large capacity for storage makes it an ideal solution for government, businesses and research organizations.
- Vast amounts of data can be stored, including high-quality multimedia files, large datasets, and backups.
- Allows the administrator to assign specific storage elements to specific users so that a particular set of users are granted access to only those specific hard drives.
- The VCL-9090 is a reliable and scalable solution for users that require a scalable data storage solution based on their growing needs and requirements.
- Provides an added layer of security for data access.
- Secure, visual NMS. Allows the data administrator to securely manage the VCL-9090 through an intuitive management and monitoring interface with a 24x7 live view of all operational parameters.
- Prompt notifications of any issues allows the network administrators to take appropriate and timely actions to prevent data loss and mitigate ransomware attacks.
- Allows for customization and flexibility in terms of hardware and software components.
- Can store large amounts of data without compromising on speed or performance.
- Helps businesses and organizations manage their data more efficiently.
- Enables quick access to important files and data.
- Provides a centralized location for data storage.
- In addition to primary data storage, additional VCL-9090 data storage servers can be installed on-location and off-location to provide backup data storage. The concept of storing backup data both on-location and off-location helps greatly in mitigating loss of data due to natural or man-made disasters.
- Greatly reduces the risk of data loss due to hardware failure or other disaster related events.
- Allows for easy expansion of storage capacity as needed.
- Provides cost-effective solution for users in need of large-scale and reliable storage.
- Provides integration with 3rd party backup applications.
- Provides integration with Cloud.
- Allows more than 50% compression.
- Facilitates Replication from day one of installation.
- Bandwidth - optimized replication: Supports incremental, blocklevel replication with snapshot based transfer
- Facilitates Deduplication from day one of installation.
Dry Contact external alarm relays
4 x Dry Contact external alarm relays which may be wired to external, multiple user-configurable audio and visual alarms, which shall include:
- Ransomware detection alarm
- Disk removal alarm
- Disk failure alarm
- High Temperature alert
- Power Supply failure alarm
- RAID degradation alarm
- Disk S.M.A.R.T test failure alarm
- Disk-Pool storage capacity usage alert
Available RAID configuration
| No. of Drives | 24 |
| Size of each Drive | 24 TB or higher |
| RAW Data Capacity | 576 TB |
| RAID level | Raw Capacity | Capacity after RAID (for 24 Drives) |
Fault Tolerance |
| RAID 0 | 576 TB | 576 TB | 0 Drive per RAID set |
| RAID 1 | 576 TB | 24 TB | 23 Drives per RAID set |
| RAID Z1 (5) | 576 TB | 552 TB | 1 Drive per RAID set |
| RAID Z2 (6) | 576 TB | 528 TB | 2 Drives per RAID set |
| RAID Z3 | 576 TB | 504 TB | 3 Drives per RAID set |
Supports ≥50% storage expansion via available/additional drive bays with included expansion hardware.
Software Specifications:
| Operating System |
|
| Licences | Software and license is included with the equipment at no additional cost or charge. There will be no recurring or additional bi-annual / or annual recurring licence payments that are required to be made after the purchase of the equipment. The included licence is for perpetual use during the lifetime of the NAS data storage server equipment that is being offered. |
| Protocols | iSCSI, CIFS/SMB, NFS, S.M.A.R.T., FTP, HTTP, HTTPS, SSH, SNMP, SMTP, SFTP, VTL |
| File System |
|
| Networking |
|
| FTP Server |
|
| Disk Management |
|
| iSCSI |
|
| Power Management |
|
| Administration |
|
| Access Right Management |
|
| Web Server |
|
Hardware Specifications:
| Processor | Intel Xeon |
| Number of Cores | 32 Physical Cores |
| RAM | Upto 256 GB |
| Network Access Ports |
|
| Dedicated management Port | 1 x 1G Ethernet Port |
| Additional Access Ports |
|
| Alarms and Display |
|
| Power Supply | 1+1, Dual 220VAC, 50Hz, Hot-Swappable minimum 800W Redundant Power Supplies to support up to 24 data storage HDDs. |
| Operating Temperature | 10C ~ 35C (50F ~ 95F) |
| Storage Temperature | -40C ~ 70C (104F ~ 158F) |
| Storage Humidity | 20% ~ 90% (non-condensing) |
Supported Drive Types:
- SAS HDD (≥10,000 RPM) – Recommended for high performance workloads
- SATA HDD (7,200 RPM) – Suitable for capacity-oriented deployments
- SSD – For latency-sensitive applications
Thermal (Heat Load) Characteristics:
- Base Chassis (24-bay, without disks): ~450 BTU/hr
- Per Drive Heat Dissipation (Maximum):
- SATA HDD (7,200 RPM, 10W): ~34.1 BTU/hr per drive
- SAS HDD (10K RPM, 12W): ~40.9 BTU/hr per drive
- SSD (5W): ~17.0 BTU/hr per drive
Note:Heat load calculations are based on maximum power consumption (Watts × 3.41 =BTU/hr). Actual values may vary depending on workload and operating conditions.
Device Specific Information
| Description | VCL-NAS |
| Maximum number of drives | 24 (optional) |
| Physical Dimensions | D x W x H: 760 x 480 x 180mm |
| Net Weight | 18.5 Kgs. (without HDD) |
| Weight of each HDD | 0.6 Kgs. (maximum upto 24 HDD) |
| Redundant Power Supply | 1+1, 800W Dual AC Power Supply |
Regulatory Compliance:
- RoHS
- CE Marking
- Complies with FCC Part 68 and EMC FCC Part 15
NMS - UI based Configuration Utility Specifications:
The equipment includes an NMS with an intuitive interface for secure, real-time monitoring of multiple Data Storage/NAS servers. The offered equipment provides a 24x7 live view of all operational parameters. The NMS software includes a perpetual NMS license with no recurring fees, valid for the lifetime of the supplied NAS equipment. The NMS is scalable, allowing the network administrator to add NAS servers anytime, both on-site and off-site, for disaster recovery and risk mitigation.
UNMS (Unified Network Management System)
- Secure (supports TLS/SSL for encrypting connections between devices)
- Permission-based security
- Uses Software Defined Perimeter (SDP), the username/password login are replaced with Single-Packet Authorization (SPA) and the receiving device cannot be seen by hackers. This introduces an additional layer of security and is beneficial with or without SSL/TLS.
- Guaranteed message delivery (no data loss or duplication of data)
VCL-Data Diode VCL-9000-EMP, EMP Protected Data Storage VCL-SAN, Industrial Grade Storage Area Network VCL-2143, Network MouseTrαp VCL-2702: Network Isolation (Kill) Equipment VCL-5052/5054 Network Isolation Equipment VCL-MX-5010-R-ES: Router with Enhanced Security VCL-2142, Enigmatron Xcöde VCL-SafeComm-E-GE, 1+1 Automatic Gigabit Ethernet Failover / AB Fallback Equipment VCL-MX-5050-R-ES: Router with Enhanced Security VCL-2243: RTU Firewall IEC -104, IEC 61850 MMS, MODBUS VCL-2457: Cyber-Smart Rack Monitoring and Control Unit VCL-UNMS: Unified Network Management System