NetCrypt U1000

ST Electronics (Info-Security) Pte Ltd.

Description

High Performance IP Encryptor

NetCrypt U1000 is a high performance IP encryptor that enables the user to leverage on public Ethernet/ IP infrastructure to connect to multiple sites in a secure manner. NetCrypt U1000 employs AES algorithm for data confidentiality, Secure Hash Algorithm (SHA) for integrity protection as well as internet key exchange (IKE) protocol for keys derivations and authentications. The built-in Firewall performs packet filtering and supports NAT/PAT features.

Supporting up to 300 tunnels with a maximum encrypted throughput of 500Mbps, NetCrypt U1000 is ideal for deployments as a security gateway in a corporate LANs, site-to-site VPN and site-to-site wireless inter-offices connectivity.

Key Features

Key Features

  • • High-assurance IP encryptor with Firewall capabilities
  • • 500Mbps throughput aggregate.
  • • IPSec standards-based encryption, authentication, digital certificates and key management
  • • Supports AES algorithm for data confidentiality
  • • Supports 300 concurrent IPSec tunnels
  • • Easy deployment in existing network environment
  • • 19” rack mountable size

Specifications

EtherCrypt U1000

Network Interfaces
  • • Trusted LAN 1 and Trusted LAN 2 ports: 2 x Ethernet RJ45 10/100/1000 Mbps auto-sensing port
  • • External port: 1 x Ethernet RJ45 10/100/1000 Mbps auto-sensing port
Networking Features & Protocols
  • • IP Security/Encapsulating Security Protocol
  • • Support Layer 2 and Layer 3 encryption capability
  • • IP Compression
  • • QoS support
  • • Traffic flow confidentiality
High Availability Features
  • • Failover (Active/Passive mode)
  • • Load Balancing (Active/active mode)
  • • Priority Based Redundant Secure Nodes
Authentication
  • • Pre-shared Key
  • • RSA Public Key Signature (up to 4096 bit)
Key Management
  • • Support Internet Key exchange (IKEv2)
  • • DH supports up to 8192 bit
  • • Supports ECDH (up to P-521 bit)
  • • Group Transport Protection: The device has the option of providing encryption and data integrity protection to all key exchange traffic including the initial key exchange traffic
Encryption Algorithm/ Modes
  • • AES-CBC (256 bit)
Hash Algorithm
  • • HMAC-SHA1
  • • HMAC-SHA2 (256, 384, 512 bit)
Performance
  • • Zero-loss encrypted throughput up to 1Gbps, aggregated (depending on IP packet size and used encryption mode)
  • • Support 300 concurrent IPSec tunnels
Management

Interfaces

  • • 10/100/1000 Mbps Ethernet RJ45 (remote management and local configuration) RS232 local console interface

Security/Configuration

  • • Extensive audit logging
  • • Alarm detection and logging
  • • SNMP v2c network management (operates with standard SNMP network management station)
  • • Supports up to 3-factor authentication
Security Features
  • • Tamper-resistant chassis
  • • Anti-tamper detection and response
Physical Characteristics
  • • Dimensions: 44mm(H) x 430mm(W) x 505mm(D)
  • • Power Supply: 110/230VAC @ 50/60 Hz Auto-ranging
  • • Power Rating: 400W max
  • • Weight: 5.6 KG
Environmental
  • • Storage Temperature: -20ºC to 70ºC
  • • Operating Temperature: 0ºC to 40ºC
  • • Humidity: Relative 95%, non-condensing
Regulatory
  • • EMC/EMI: FCC Part 15 Class B
Optional Feature
  • • Supports customized algorithm loading feature