|
The Advanced Network Infrastructure Security (ANIS) PowerCryptor is a small and compact IP network encryption device, offering fast throughput and high reliability. Armed with a full set
of self-defending mechanisms, the ANIS PowerCryptor is able to detect various forms of attacks. The privacy of the key is maintained, under any circumstances.
The ANIS PowerCryptor can actively defend itself, even when the power supply is removed. The size and performance of the ANIS PowerCryptor makes it an ideal solution for a wide range of network security applications, especially in non-trusted environments, such as the encryption of the local area network in rented embassy buildings.
Performance Overview
| ANIS PowerCryptor |
| 1000 MBit/s Throughput in Half Duplex |
| 500 Mbit/s Throughput in Full Duplex |
Encryption Algorithms Supported
256/128-bits AES
168-bits Triple DES
112-bits Extended DES
Proprietary Algorithms
|
| 40,000 Clients/Subnets Supported |
| Optimised for Small Packets for
Real-time VoIP Traffic |
| 10/100/1000 MBit/s Ethernet |
| Redundant Power Supply |
| High Reliability - No Moving Parts |
Self Defending Mechanisms
The ANIS PowerCryptor feature a full complement of self-defending mechanisms that can detect even the most sophisticated attacks. The self-defending mechanisms are combined with various alarm actions to form a product that is able to fully protect the device and the keys stored in it. Each of the alarms can be configured in GlobalAdmin, and can be dynamically turned-on or turned-off for easy administration.
Some of the different self-defending mechanisms and alarm actions are:
| Touch Sensors |
Detects physical opening of the device and probing of the PCB |
| Motion Sensors |
Detects when the ANIS PowerCryptor is being moved |
| Secondary Power |
Self-defending mechanism can work even when power is removed |
| Hidden Alarms |
Silently sends an encrypted alarm to the GlobalAdmin station |
Modes of Operation
The ANIS PowerCryptor is available in either a bridge mode or gateway mode. The bridge-mode PowerCryptor works as a bump-in-the-wire concept and can be easily deployed into existing networks, or MPLS networks.
Gateway-mode ANIS PowerCryptor encapsulate the original IP packet with new headers, allowing the original IP headers to be concealed, as well as secure remote access from client machines using IPCrypt Client.
Enhanced IPSec
The ANIS PowerCryptor provide an alternative key management protocol called Enhanced IPSec developed by
CE-Infosys. Using Enhanced IPSec, faster connections can be made as there is no need for lengthy session key negotiations using IKE to establish a tunnel. In addition, each IP packet is implicitly authenticated with any modified or malicious packets automatically discarded. In addition, the session keys used for encryption can be changed as rapidly as every 1, 5, 10, or 20 packets to defeat any attempts at statistical analysis of the encrypted packets.
Central Management
The ANIS PowerCryptor can be easily managed using GlobalAdmin. This central management station provides an
intuitive Graphical User Interface for simple administration of the ANIS PowerCryptor. Using GlobalAdmin, keys and policies used by the ANIS PowerCryptor can be pushed down remotely. In addition, firmware upgrades can be sent remotely to the ANIS PowerCryptor.
Highest Reliability
As a high end product for the most demanding customers, reliability is a key asset. The ANIS PowerCryptor is designed for reliability. No mechanical moving parts are found in the ANIS PowerCryptor. No high voltage components are
used in the products.
Designed to withstand demanding conditions and suitable to be utilised in cars, trucks, and other vehicles,
the ANIS PowerCryptor has an outstanding MTBF rate and is resistant against dust, sand and humidity.
Miscellaneous
| Size |
140 mm X 110 mm X 30 mm
2 ANIS PowerCryptors can be placed in a 1U slot in a standard
19-inch rack |
| Interfaces |
2 x 10/100 MBit auto-sensing Copper Ethernet Interface
RS232 Diagnostic Port
USB slot for USB token |
| Power Specification |
12V/1A DC input
An external power adapter for 110/230V 50-60 Hz AC is provided with each product |
| Logging and Reporting |
Syslog and Syslog-Mail
SNMP
GlobalAdmin |
| Additional Features |
UDP Tunneling
Source and Destination NAT
Configurable Routes
Configurable Bypass Rules
IP Address Pools
High Availability and Load-sharing |
> top <
|