VCL-2142, Endpoint Voice and Data Encryption

VCL Products > Cybersecurity Suite > Enigmatron Xcöde

UNMS Supported

3D View Mechanical Drawing (PDF)

VCL-2142 Enigmatron Xcöde:
Endpoint Voice and Data Encryption

Get Data Sheet

VCL-2142 Enigmatron Xcöde is low data rate endpoint encryption equipment with advanced features that may be installed to secure voice and data communication in critical infrastructure such as defense, financial institutions, electric substations, smart grid distribution systems, oil and gas infrastructure and railway signaling networks from being compromised or accessed by hostile elements.

The VCL-2142 Enigmatron Xcöde may also be installed in point-to-point as well as in point-to-multi-point applications in centrally managed networks consisting of multiple edge locations to provide secure communications between multiple RTU Terminals and their corresponding IEC 60870-5-104, MODBUS-TCP, and DNP central server(s) located in Load Dispatch Centre(s) / SCADA Management Centre(s) and Rail Traffic Control Room(s).

Versions and Technology Deployment:

VCL-2142 Enigmatron Xcöde (Remote Unit)

High-Security Data Encryption Equipment
Encrypting RTU data between RTUs and the SCADA server.
Point-to-Point -104 and DNP RTU Data Encryptor.

The VCL-2142 Enigmatron Xcöde can be used in “Point-to-Point” applications. The VCL-2142 Enigmatron Xcöde may also be used with VCL-5040 Enigmatron Equipment in “Point-to-Multi-Point” applications.

VCL-5040 (Central Unit)

High-Security Data Encryption Equipment with Integrated Firewall.
Designed to work in high data throughput, point-to-multipoint applications.
Supports a maximum of up to 500 x Enigmatron Xcöde (remote) units with a maximum combined data throughput of up to 1Gbps.
Encrypting data between multiple RTU terminals and the IEC 60870-5-104, MODBUS-TCP, and DNP server(s) located in load dispatch centres / SCADA management centres and rail traffic control.

Interfaces—Terminal:

Total Number of Ethernet Interfaces : 5

Four 10/100 RJ45 equipment interfaces in the local (trusted) LAN interfaces
One 10/100/1000 RJ45 network interface to the WAN (untrusted) network interface

Integrated four-port Ethernet switch
Auto MDI/X (straight or crossover Ethernet cable correction)
USB serial port for local access and configuration.

Supported Security Protocols:

IPSec, OpenVPN

Supported Data Encryption Algorithms:

AES128, AES192, AES256

Form Factor and Maximum Encrypted data throughput per VCL-2142 Enigmatron Xcöde terminal:

Compact, DIN-Rail Remote Data Encryption Terminal
Maximum Encrypted Data Rate = 10Mbps with AES256 data encryption

Network Support:

IPv4 Routing
Ethernet
VLAN tag preservation
IPv4

Monitoring and Access Control:

Password Strength Monitor
Device Management and Alarm Monitoring
Command Line Interface – Telnet, SSH with clear text disable option (default)
SNMPv2 Alarm Monitoring
Alarm condition detection and reporting (traps and SNMP alarm table)

Power:

15V DC ~ 60V DC (DIN Rail Mounting Version)
85V DC ~ 250V DC (External Adapter Option).
100~240V AC, 50/60Hz, (External Adapter Option).
Power Consumption: 9W at maximum load (DC)
Power Consumption: 15W at maximum load (AC, with external AC to DC adapters)

Firewall - Features and Capabilities:

Deep Packet Inspection
Per-frame/packet authentication
Firewall

Port (Soft) - based
MAC - based
IP Address - based
IP Domain - based

White List and Black List options

White List Exception allowed and blocks all other traffic by default (system default mode)
Black List Exception blocked and allows all other traffic by default

Seamless scalability
Infrastructure neutral
Transparent to network and applications
Easy installation and management

Application:

Utilities: Electric generation, transmission and distribution
Smart Grid Distribution Systems
Oil & Gas production, pipelines
Remote nodes in SCADA multi-drop networks
Railway Signalling Infrastructure: Rail Traffic Control Room(s)
All distributed data networks consisting of a central server and multiple edge locations.

Application Diagram #1:

Application Diagram #2:

Mechanical Drawing (PDF)

UNMS (Unified Network Management System)

Secure (supports TLS/SSL for encrypting connections between devices)
Permission-based security
Uses Software Defined Perimeter (SDP); the username/password login is replaced with Single-Packet Authorization (SPA), and the receiving device cannot be seen by hackers. This introduces an additional layer of security and is beneficial with or without SSL/TLS.
Guaranteed message delivery (no data loss or duplication of data)