SecuriVPN® ED100 The main building block of the SecuriVPN system SecuriVPN is a hardware encryptor system providing means for connecting several protected IP networks securely through an untrusted network. SecuriVPN is a flexible system for high demands and includes all components needed for a reliable network administration and secure communication. ED100 19” rack device ED100P portable device Highlights The ED100 devices are designed for high availability with advanced failover functionality and support for redundancy routing protocols. Low latency, high packet throughput and 100Mbit data speed makes the ED100 devices ideal for general data transfer, multimedia, VoIP and video conferencing. Special functions like multicast support, quality of service, radio-silence, mobility settings and the ability to handle satellite communication provide tools to manage a wide range of use cases. Models The ED100 series is available in two physical models that allow for easy integration in various use cases: ED100 - 19” rack device, suitable for use in server environment as well as deployable installations ED100P - portable device, intended for remote offices and vehicle use where space is of essence Administration Point to point connections and small networks can easily be administered by using the Configuration Application. Keys and configurations can be distributed using smart cards. Administration of large networks is facilitated using key server and remote administration including remote configuration, network monitoring and extensive logging. Key Features Full hardware encryption of classified information over untrusted IP networks. Red/black separation in hardware, a security feature that prohibits plain text channels Full support for three-domain separation with hardware separation between administrative data and user traffic data Manages several communication paths including IP over radio with transmit silence and satellite hops Multicast support Support for redundant network paths in high availability installations Resources can be separated within the same LAN with multiple VPN units Certificates and keys distributed on PIN protected smart cards Versions available for usage up to SE TOP SECRET level Versions available for usage up to SECRET EU / EU SECRET level (approved by EU) Versions available with TEMPEST EU/SWE MIL-STD approval Made in Sweden About Advenica Advenica is a leading European supplier of cyber security. As an independent and privately owned Swedish company, Advenica develops user friendly and leading security products and solutions for customers with high security demands, such as the armed forces, the police, multinational corporations and banks. Please visit www.advenica.com for more information. Advenica AB www.advenica.com Tel: +46 46 38 60 50 Technical specification - ED100 VPN basics IPsec enhanced 512 unicast + 512 multicast tunnels NAT traversal 100 Mbit/s linespeed 4000 keys Modes of Operations Two-way tunnel One-way tunnel (diode functionality) Network modes: fixed, mobile and deployable Ports Optical 100Base-FX (LC connectors) for data, Optical interface for local configuration and log output or Electrical interface RJ45 100Base-TX for data, 9-pin Dsub RS232 for local configuration and log output Encryption Algorithms in hardware AES-256 Custom/national algorithms EU approved algorithms Device authentication X.509 certificates and CRLs Symmetric keys Device management Front panel user interface Local configuration port Smart cards Secure in-band remote management Secure local or remote firmware upgrade Key Management Session keys from Key Server System Authenticated Session key exchange Enhanced IKE using RSA-PSS signatures (2048-bit modulus) Keys distributed on smart card Monitoring & Log handling Local interface for log output Remote management with event secure syslog SNMP remote monitoring and control Security Features Hardware based random number generator Red/black separation in hardware Emergency erasure of keys Tamper evident chassis Active and passive tamper resistance POST (Power On Self Test) Replay protection Auto detection of local red/black circuit High Availability and QoS Up to 10 units in parallel QoS, DiffServ 14 hours key backup Failover installation Regulatory Compliance Common Criteria EAL 4+ CE Versions available with Tempest EU/SWE MIL-STD approval up to Top Secret Power source (dual) 85-264 VAC (standard) 10-66 VDC (optional) Dual power supply optional Operating Temperature -5 ºC – +40 ºC, 5 – 95% rel. H Physical Dimensions Measures: 442 x 44 x 272 mm (19” rack device) 257 x 44 x 272 mm (portable device) Weight: 4-5,8 kg Models ED100 19” rack device (height 1U) Front Connector Module (option) ED100P portable device MTBF >75 000 h Further details available upon request © Copyright 2014 Advenica AB. All rights reserved. Advenica, the Advenica logo and SecuriVPN are trademarks of Advenica AB. All registered and unregistered trademarks included in this publication are the sole property of their respective owner. Our policy of continuous development may cause the information and specifications contained herein to change without notice. Doc. no.: 14344 v1.4.