Home
Industry Solutions
Products
Support Center
Design Services
Contact Us
The EncryptorPak L provides secure Ethernet-to-serial and serial-to-serial communications
between MTU and RTUs. The unit encrypts and tunnels serial DNP3 or Modbus data and
its operation requires no change to your network or applications.
Overview ▲Top
IEEE 1711-2010 standard for cyber security of substation serial links
- AES encryption, HMAC authentication
- Key management (2 -level)
- Modbus RTU/ASCII, DNP3
- Point-to-point (P2P) & multi-drop operation
- Asynchronous 300 to 115 Kbps
Plus Ethernet TCP/UDP-to-serial connections
Plus Multi-protocol support
- AES (8-bit CFB) in P2P for Allen-Bradley DF-1, Bristol BSAP, Fisher ROC & more
Plus 3-in-1 software-configurable ports
- RS-232/422/485 interfaces
Plus Up to 200 secure tunnels
- Each tunnel has its own encryption key and protects one or group of RTUs
Plus Web interface for easy configuration & management
- Access is controlled by three separate roles: admin, security officer, and operator
Benefits ▲Top
Cost-effective
- No change to existing software or equipment
Improves security posture
- By easily defining and deploying policy-based security across serial links
Quickly integrates into existing network
- “Bump-in-the-wire” security for serial DNP3, Modbus, and others
- Secures serial data over radio paths, dial-up, or leased lines
- Supports mixed encrypted and clear traffic for seamless operation
Flexible configuration
- Any mix or match of RS-232, RS-422, or RS-485 (2- or 4-wire) interfaces via DB-9
or terminal block
- Supports point-to-point, multi-drop, radio, leased, dial-up
Conforms to NERC CIP audit logging
- Multi-role access control with system activity logging
Specs ▲Top
Standards
- IEEE 1711-2010 Standard for a Cryptographic Protocol for Cyber Security of Substation
Serial Links
Cryptographic Suites
- Advanced Encryption Standard (AES) 128-bit
- MD5 128-bit hash (RFC 1321)
- SHA-1 160-bit hash (ANSI X9.30-2 and FIPS 180-1)
Simultaneous Secure Tunnels
Encryption Keys
- Automated rekey of data key
- Two-level key management:
- Key Encrypting Key
- Data Key (unique for tunnel)
Topologies
- Multi-drop
- Point-to-point (P2P)
Protocols
Serial-to-Serial
- DNP3
- Modbus RTU
- Modbus ASCII
- Any byte-oriented protocol in P2P
Ethernet-to-Serial
- Modbus TCP and UDP
- Modbus RTU/ASCII Over TCP and UDP
- DNP3 Over TCP
Interfaces
- LOCAL/REMOTE: 10-pin terminal block
- REMOTE:DB9 male (RS-232/422/485)
- LOCAL: DB9 female (RS-232/422/485)
- MGMT: DB9 female (RS-232)
- LAN: RJ45 Ethernet (10/100BaseT)
Web Interface
- 3-level, role-based, password protected login
LED Indicators
- Power
- Ethernet Activity
- Secure Link Activity
Power
Physical
- Enclosure: 18 gauge steel
- Weight: 1 lb
- Size: 1 x 8 x 5 inches (2.54 x 20.32 x 12.7 cm)
Operating Environment
- -40° C to 85° C (-40° F to 185° F)
Green Technology
- Low-power
- All components are RoHS compliant
Warranty
1 x 8 x 5 in.
2.54 x 20.32 x 12.7 cm
|
Ordering Info
|
|
Description
|
|
EncryptorPak L
|
|
Model No.
|
|
Pak-L
|
|
For pricing and other information, please complete Ask Our Team online form
|
EncryptorPak L
Overview
Benefits
Network Diagram
Specs