IPS-250X HAIPE Encryptor (CHVP)

The IPS-250X is an Inline Network Encryptor (INE) that complies with NSA Cryptographic High Value Product (CHVP) Policy Committee on National Security Systems Instruction (CNSSI)_4031 for Non-CCI handling of HAIPE Suite B devices.

Supporting the secure exchange of classified information up to the Secret level, the IPS-250X is appropriate for government agencies such as the Federal Bureau of Investigation (FBI), Department of Homeland Security (DHS), and first responders with users in their networks who may not have COMSEC accounts or want to minimize COMSEC logistics.

Loaded with HAIPE Interoperability Specification Compliant Suite B cryptography and packaged in a low-size, weight, and power (SWaP) rugged form factor, the IPS-250X is ideal for high-risk and unmanned environments. With an optional remote front panel, aircraft operators can interface with the IPS-250X via cable, providing control access even if the stowed crypto is not physically within reach. 

Applications

• High-risk, unmanned environments
• UAVs, unattended sites, sensors
• Enterprise

Features

• Weight 2.8 lb; 4.45 x 7.96 in. (W x D)
• Military Standard (MIL-STD)-810 rugged
• Top Secret and below without the COMSEC logistics
• Interoperable with CCI HAIPE devices operating in Suite B; Foreign interoperability
• Leave-behind capable
• Device generated shared key (DGSK); alternative to electronic key management system (EKMS)
• SHA-256/384 Hashing, AES-256 Galois/Counter (GCM) Mode
• HAIPE IS v4.1 compliant with Internet Key Exchange (IKE)v2/Elliptic Curve Diffie-Hellman (ECDH)
• HAIPE-to-HAIPE over-the-air/net keying
• Upgradeable to fully KMI aware/PDE enabled
• Software upgradable to meet evolving cybersecurity requirements
• Multicast video on demand
• Embedded Transmission Control Protocol/Internet Protocol (TCP/IP) accelerator (xPeP)
• Browser-based human machine interface (HMI) configurations
• Centralized INE management
• INE trade-in program available
• 3-year warranty (extended options available) Free training and 24/7 technical support

Support equipment

• 1U rack mount holds three Viasat KG-250X, KG-250X-FC or IPS-250X (INEs) 
• Rack mount holds two Viasat KG-255X INEs with high availability applications, hot swappable fans, dual-redundant power supplies
• 1U rack mount universal shelf holds two Viasat KG-255X, three Viasat KG-250X/KG-250X-FC/IPS-250X or four KG-250XS INEs

Management: VINE Manager software

• Centrally manage and access up to 1,500 INEs
• Includes a security association (SA) wizard to auto populate remote routes and tunnel SAs
• Assign keys to common Pre-Placed Key (PPK) sequences on multiple INEs
• Supports HAIPE and Media Access Control Security (MACsec)/Ethernet Security Standard (ESS) Viasat encryption