Cyber Security Suite
Serial & Ethernet Data Encryption

VCL Products > Cyber Security Suite > Serial and Ethernet Data Encryption Equipment
UNMS Supported
Serial and Ethernet Data Encryption - Front
Serial and Ethernet Data Encryption
Serial and Ethernet Data Encryption - Back
Serial and Ethernet Data Encryption - Front
Serial and Ethernet Data Encryption
Serial and Ethernet Data Encryption - Back

VCL-2140: Serial and Ethernet Data Encryption Equipment

Get Data Sheet

VCL-2140 is a low data rate serial and ethernet data encryption equipment with integrated firewall capabilities that may be installed to secure and protect ethernet and RTU data (Remote Terminal Data) in critical infrastructure such as Sub-Stations, Smart Grid Distribution Systems, Oil and Gas Infrastructure and Railway Signalling Networks. The VCL-2140 may be used to secure RTU data and protect it from being compromised or accessed by hostile elements.

The VCL-2140 Data Encryption Equipment may be installed in point-to-point applications and used to provide to secure communications between the RTU Terminals and their corresponding IEC -101, -104, DNP, MODBUS protocol central server(s) located in Load Dispatch Centre(s) / SCADA Management Centre(s) and Rail Traffic Control Room(s).

IEC 60870-5-101 IEC 60870-5-104 MODBUS Firewall DNP

Protocols supported:

  • IEC 60870-5-101 (IEC 101): RS-232 and RS-485 ports
  • IEC 60870-5-104 (IEC 104): 10/100BaseT Ethernet Port
  • DNP (Distributed Network Protocol):
    • RS-232 and RS-485 ports
    • 10/100BaseT Ethernet Port
  • MODBUS RTU and MODBUS TCP/IP:
    • RS-232 and RS-485 ports
    • 10/100BaseT Ethernet Port

Versions and Technology Deployment:

  • VCL-2140 Data Encryption Equipment:
    • High-Security Data Encryption Equipment
    • Point-to-Point -101, -104, DNP, MODBUS Protocol RTU Data Encryption equipment. The VCL-2140 is designed to be used only in point-to-point applications.
    • Encrypting RTU data between two Terminals

Applications:

  • Utilities: Electric generation, transmission, and distribution
  • Smart Grid Distribution Systems
  • Oil & Gas production, pipelines
  • Remote nodes in SCADA networks
  • Railway Signalling Infrastructure: Rail Traffic Control Room(s)
  • All distributed data networks consisting of a central server and multiple edge locations.

Interfaces - Terminal:

  • Total Number of Ethernet Interfaces: 3
    • One, 10/100 RJ45 equipment interface for the local (trusted) LAN side
    • One, RS-232 interface
    • One, RS-485 interface
    • One 10/100 RJ45 network interface to the WAN (untrusted) network side
  • Auto MDI/X (straight or crossover Ethernet cable correction)
  • USB serial port for local access and configuration.

Data Encryption Protocols:

  • IPSec. OpenVPN

Data Encryption Algorithms:

  • AES128, AES192, AES256

Encrypted Data Throughput:

  • Compact, DIN-Rail Remote Data Encryption Terminal, Maximum Encrypted Data Rate, ≤ 12Mbps with AES256 Encryption Algorithm.

Network Support:

  • IPv4 and IPv6 Routing
  • Ethernet
  • VLAN tag preservation
  • MPLS tag preservation
  • IPv4

Monitoring and Access Control:

  • Password Strength Monitor
  • Device Management and Alarm Monitoring
  • Command Line Interface – Telnet, SSH
  • SNMPv2; SNMPv3 Alarm Monitoring
  • Alarm condition detection and reporting (traps and SNMP alarm table)
  • Syslog
  • Audit Log

Firewall - Features and Capabilities:

  • Deep Packet Inspection
  • Per-frame/packet authentication
  • Firewall
    • Port (Soft) - based
    • MAC - based
    • IP Address - based
    • IP Domain - based
  • White List and Black-List options
    • White-List Exception allowed and blocks all other traffic by default (system default mode)
    • Black-List Exception blocked and allows all other traffic by default
    • Seamless scalability
  • Infrastructure neutral
  • Transparent to network and applications
  • Easy installation and management

Power:

  • Power: 1+0 or 1+1 Power Supply Options
  • 12V DC to 60V DC
  • 85V DC to 250V DC
  • 100~240V AC, 50/60Hz
  • Power Consumption: 15W at maximum load

Application Diagram:


RTU Firewall Data Encryption
MouseTrap

UNMS (Unified Network Management System)

  • Secure (supports TLS/SSL for encrypting connections between devices)
  • Permission-based security
  • Uses Software Defined Perimeter (SDP), the username/password login are replaced with Single-Packet Authorization (SPA) and the receiving device cannot be seen by hackers. This introduces an additional layer of security and is beneficial with or without SSL/TLS.
  • Guaranteed message delivery (no data loss or duplication of data)
Read More...

Valiant Communications is an ISO 9001:2015, ISO 10001:2018, ISO 14001:2015, ISO 27001:2013 and ISO 45001:2018 certified equipment manufacturer.

Links

Home

About Us

Solutions

Applications

Data Sheets

Press

Project & Services

Reference Customers

Contact Us

Products

VCL IP/MPLS Routers

Teleprotection over E1, C37.94,
MPLS-TP, MPLS / IP, IEC-61850 GOOSE

IEEE C37.94 Solutions

VCL-PMU-30, Phasor Measurement Unit (PMU)

VCL-PDC, Phasor Data Concentrator (PDC)

Cyber Security Solutions

Next Generation Firewall

Industrial Switches

Products

GPS / GNSS, Primary Reference Clocks (G.811)

GPS / GNSS NTP Time Server

PTP IEEE-1588v2 Grandmaster, PTP Slave, PTP Transparent Clock

NTP to IRIG-B, PTP to IRIG-B

GPS to IRIG-B, GPS to 1PPS Servers

Time Distribution, IRIG-B, 1PPS, RS-232 / RS-485

SDH with MPLS-TP & SONET Multiplexers

E1 PDH, Optical Multiplexer & Digital Cross Connect

Products

IP over TDM / Ethernet over TDM

TDM over IP / Ethernet / Packet / MPLS

E1 / T1 APS, 1+1 Automatic Protection Switch, E1 / T1 Failover

1+1 Ethernet Failover / AB Fallback Switch

Groomer (Hi-Z Non-Intrusive Monitoring) - E1, T1 and STM-1

E1 and T1 Echo Cancellers & VQE

Serial to Ethernet and MODBUS Converters

Patch Panels, AC DC Converters, Passive Products