VCL-2702 Network Isolation Kill Equipment

VCL Products > Cyber Security Suite > Network Isolation (Kill) Equipment

UNMS Supported

VCL-2702, Network Isolation (Kill) Equipment

Get Data Sheet

Network Isolation (Kill) Equipment: What is a Network Isolation Equipment and why does an organization require it?

The VCL “Network Isolation (Kill) Equipment” provides the last-line-of-defence in the event that a network security breach or unusual network activity is detected. The “Network Isolation (Kill) Equipment” can be used in conjunction with any brand of “Firewalls”, “Network Traffic Sniffers” and multiple VCL-2143 “Network-MouseTrαp(s)™ / Advanced Honeypot” devices to automatically initiate a series of defensive actions that would have been planned as a counter-defence network policy by the network administrator.

VCL-Network Isolation (Kill) Equipment can be used to trigger the isolation of critical areas of the network such as Data Storage Servers etc., to enhance security against potential threats.

Most network administrators rely solely on a “Firewall” to secure their IP networks. Some network administrators go one step further and also deploy an additional “Network Traffic Sniffer” which monitors and flags the transmitted and received data anomalies. However, very few network administrators actually plans for an eventuality after a “Firewall” has been breached and the “Network Traffic Sniffer” has recorded anomalies in the data that is being transmitted and received.

The “Network Isolation (Kill) Equipment” provides the last-line-of-defence in the event of a network security breach. The “Network Isolation (Kill) Equipment” can be used in conjunction with a “Firewall”, “Network Traffic Sniffer” and multiple VCL-2143 “Network-MouseTrαp(s)™ / Advanced Honeypot” to automatically initiate a series of defensive actions that would have been planned by the network administrator, in the event of a network security breach.

Such actions would include:

Disconnecting the Local Area Network (LAN) from the Wide Area Network (WAN).
Disconnecting only a specific data storage device (SAN / NAS), or Server from the local network.
Generating “Audio-Visual Alarms”,
Sending “SNMP Traps”,
Sending “Network Security Alerts” to a centralized NMS,
Intrusion Detection Alarm indicator
Power LED indication.

Features & Highlights:

Fail-Safe. Never itself becomes a point of failure.

The equipment maintains data connectivity if the port was put in the operational mode, even in power down condition or upon control card failure.
The network port shall continue to remain in isolated mode if the port was put in the isolation mode prior to power down or control card failure.

Single Port Network Isolation (Kill) Equipment

1U, 19-Inch Rack Mount substance chassis
May be used where only one port is required to be isolated from the network
Available with 1G Electrical (RJ45) Interfaces.
Supports:

1 x GigE IN (Electrical RJ45)
1 x GigE OUT (Electrical RJ45)

“Network Isolation (Kill) Equipment” provides manual and automatic isolation of the Local Area Network from Wide Area Network, in an event of a network security breach / cyber-attack.

1 x Port Electrical (RJ45) Network Isolation Equipment: VCL-2702

Number of Ethernet Ports	2
Interface Orientation	1 x 1G Gigabit Ethernet Interface towards network 1 x 1G Gigabit Ethernet Interface towards protected equipment
Guaranteed Maximum Data Throughput	1000 Mbps on 1G Port
Interface Types	10/100/1000 BaseT Electrical

Communication Options:

SSH / Telnet (option to disable clear text communication)
CLI Control Interface (HyperTerminal or VT100)

Management and Control Ports:

Serial Management Port – USB (Out of band access)
10/100 BaseT for remote management
10/100 BaseT Control Interface – For switching using SNMP Traps SNMP v2 & v3
Serial Control Interface – RS232 out of band access - For switching using scripted commands or Honeypot, Security server, firewall, snifferes, etc.
Serial Control Interface – RS485 out of band access - For switching using scripted commands or Honeypot, Security server, firewall, snifferes, etc.

External Trigger Inputs:

8 x External Alarm Trigger Inputs (Contact Open / Contact Close)

External Alarm Outputs:

1 x 12V DC Visual Alarm and
1 x 12V DC Audio Alarm

Power Consumption:

< 18W, Maximum at ambient (steady state 24°C)

Power Supply Options:

AC Power (90 to 240V AC, 50/60 Hz)
DC Power 24V DC; 48V DC; 110V DC; 220V DC
1+1 redundant (AC and/or DC) power supply option is available for 19-Inch Rack Mount version

Compliance & Regulatory:

EMC FCC Part 15 Class 2
Operation ETS 300 019 Class 3.2
Storage ETS 300 019 Class 1.2
Transportation ETS 300 019 Class 2.3

CE Compliance:

RoHS, Low Voltage Directive 2014/35/EU
Electromagnetic Compatibility 2014/30/EU

IEC Standards:

IEC - EMC – Certified to EN 55032: CISPR 32, EN55024:2005
IEC 61000-6-2 (Immunity), IEC 61000-6-4 (Emission)
Complies to IEEE and IEC standards

Mechanical Drawing (PDF)

UNMS (Unified Network Management System)

Secure (supports TLS/SSL for encrypting connections between devices)
Permission-based security
Uses Software Defined Perimeter (SDP), the username/password login are replaced with Single-Packet Authorization (SPA) and the receiving device cannot be seen by hackers. This introduces an additional layer of security and is beneficial with or without SSL/TLS.
Guaranteed message delivery (no data loss or duplication of data)