Ruggedized Firewall & Router

VCL Products > Cyber Security > VCL-5010-F: Ruggedized Firewall & Router

UNMS Supported

VCL-5010-F: Ruggedized Firewall & Router

Get Data Sheet

VCL-MX-5010-F is an integrated IEC-61850 compliant ruggedized firewall and router equipment with advanced features that may be installed to secure critical infrastructure such as utilities, sub-stations, smart-grid distribution systems, airports and railways as well as IT Networks of financial institutions such as banks and corporate networks. VCL-MX-5010-F is password protected with capabilities that meet and exceed NERC as well as all mandatory requirements of password protection and control as provided in the GR-815-CORE-2 specifications.

FIREWALL:
32 GBPS IPSEC VPN:
5.2 GBPS NGFW:
4 GBPS THREAT PROTECTION:
2.95 GBPS

Firewall - Features and Capabilities:

Next Generation Firewall (NGFW)
Allows firewall rule creation for each port, independently.
May be installed in non-redundant 1+0 or redundant 1+1 in an automatic failover* configuration. Support active-active mode.
Deep Packet Inspection (DPI)
Point-to-Point and Point-to-Multipoint applications
IPv4 & IPv6 support.
Unified NMS – Up to 1000 devices may be configured and managed through unified NMS.
HTTP based smart GUI for individual nodes
Per-frame/packet authentication
Support NAT, PAT & Policy based NAT/PAT, Mapped IP (MIP), Virtual IP(VIP), VoIP protocols
Authentication protocols: RADIUS, LDAP support
Supports IKE, IKEv2, PKI (X.509)
Maximum Concurrent Sessions: 8,300,000
New Connections per second: 150,000
802.1Q VLANs : 4,094
Filtering of protocols like FTP, SMTP, HTTP, HTTPS, SNMP, UDP, ICMP, RPC, DNS, DHCP, ARP, TCP, POP3
Firewall:

Port based, MAC based, IP Address based
IP Domain based
Protocol type
URL based

Whitelist and blacklist options:

Allows traffic based on user configured rules

Two-factor Authentication with time-based OTP for secure access
Traffic Shaper
Forward Caching Proxy (transparent) with Blacklist support
Virtual Private Network (OpenVPN site to site and remote VPN client support)
Supports upto 500 IPSec Site to Site Tunnels
High availability and hardware ethernet failover*
Intrusion Detection and Prevention
Built-in reporting and monitoring tools including real-time graphs
Network Flow Monitoring
DNS Server, DNS Forwarder, Dynamic DNS
DHCP Server and Relay
Stateful inspection firewall
Granular control over state table
MAC layer filtering
VXLAN supported
Infrastructure neutral
Transparent to network and applications
Easy installation and management
LDAP user authentication support
Export logs locally or on a server.

*Redundant Firewall Failover switching with VCL-Ethernet Failover Switch.

Firewall and Security:

Ruggedized, IEC-61850-3 compliant firewall
Fanless, High-reliability hardware
Suitable for 1+0 non-redundant and 1+1 redundant installation with automatic failover
Designed to be installed in sub-stations, SCADA networks and industrial / harsh environments
Secure Boot
Firewall Security:

Inclusion Policy - Access Control based upon White List IP addresses, MAC address and IP Domain
Exclusion Policy - Access Control based on Black-List Continuous monitoring of the TLS connection to nullify MitM attacks.

Brute Force attack mitigation
Content filtering
Non-volatile Access Log with capability to "fingerprint" all successful and failed log-in attempts and keep a log of the IP
Resistance to Denial of Service (DoS) Attack
Prevention of DDoS & DoS-added
SSH (Secure Access Control) with encrypted password protection
SYN cookie protection
Zone based IP spoofing
Malformed packet protection
DNS guard features
Antivirus, Anti-worm, anti- spam and anti-spyware protection
Anti-APT (or Anti BOT), Adv Persistent Threat

VCL-MX-5010-F offers a wide range of VPN technologies ranging from modern SSL VPN's to IPsec. Site-to-Site and road warrior setups are possible and with the integrated OpenVPN client exporter, the client can be configured within minutes.

Routing Features and Capabilities:

OSPF v2 and V3
RIP v1, RIP v2
BGPv4, IS-IS
ARP, IP Forwarding
Static routing, VLAN based routing, NATL1, CARP redundancy support tracking
802.1Q VLAN
ACL Layer 2/3 Security
Layer 2/3 Routing, Dynamic Discovery Routing
TCP/IP, UDP, DHCP
Remote access authentication via RADIUS
IEEE 1613
IEC 61850-3, IEC 60068-2-27, IEC 60068-2-6 compliance
QoS
IP Forwarding
Detailed system logging
Multiple IP address supported.

Specifications:

Integrated Storage Drive	Internal, soldered 16GB High Performance SATA Drive
Additional Storage	M.2 SATA - 120GB, 240GB, 500GB and 1TB SSD Options
Power Supply	Dual (1+1) Redundant Power Inputs* (Power Supply Options)
Indicators and Alarms	- 2 x Power Supplies - 1 x System Alarm Inputs - 1 x Dry Contact Alarm Relay (NO/NC)
Processor	Quad Core up to 2.5 Ghz per core
RAM (DDR 3L)	8GB
Performance	Ruggedized Fanless System
MTBF (hours)	101292
IP Level Protection	Ip20
Power Consumption @ 48VDC	15 Watts
Power Consumption @ 80~240, 50/60Hz VAC	20 Watts

CE Compliance:

Low Voltage Directive 2014/35/EU (48V DC Version)
Electromagnetic Compatibility 2014/30/EU

Other Regulatory Compliances:

RoHS
CE Marking
Complies with FCC Part 68 and EMC FCC Part 15
Telcordia GR-1089 Surge and Power Contact

Interfaces:

6 x 100/1000Base-T Interface (RJ45)	Any 6 interfaces are usable. May be selectively configured either as a WAN interface or LAN interface.
6 x SFP 1G Optical Interface (SFP)
4 x 10/100/1000Base-T RJ-45 (Shared Mode)
1 x 10/100Base-T RJ-45 (LAN)
2 x 10/100Base-T RJ-45 Electrical (LAN)
1 x RS-232 (V.24)
1 x RS-485
2 x Dry Contact External Alarm Relay Outputs
2 x External Alarm Relay Closure Sense Inputs

UNMS (Unified Network Management System)

Secure (supports TLS/SSL for encrypting connections between devices)
Permission-based security
Uses Software Defined Perimeter (SDP), the username/password login are replaced with Single-Packet Authorization (SPA) and the receiving device cannot be seen by hackers. This introduces an additional layer of security and is beneficial with or without SSL/TLS.
Guaranteed message delivery (no data loss or duplication of data)