KG-250X/KG-250X-FC HAIPE Encryptor

Cyber adversaries are getting smarter, finding new ways around traditional perimeter protection and exploiting vulnerabilities in network security. The KG-250X/KG-250X-FC combines Type 1 high-speed network encryption that goes beyond HAIPE requirements, with cyber defense technologies and visualization software including Trusted Cyber Sensor (TCS) so you can more securely communicate over Internet Protocol (IP) and gain actionable intelligence on your security posture.

The KG-250X/KG-250X-FC allows IP traffic to route more efficiently and decreases network overhead with embedded OSPF and PIM. Users can remotely rekey a network of HAIPE devices from a physically secure location with HAIPE-to-HAIPE over-the-air/net keying, and experience improved performance over high-latency links with embedded Transmission Control Protocol/Internet Protocol (TCP/IP) acceleration.

This device is field proven at high altitudes and the thermal design and packaging provides effective power management, high reliability, lower touch temperatures, and can accommodate high density 1U stacking of encryptors.

Applications

• Tactical
• Mobile
• Enterprise

Features

• Weight 2.9 lbs; 4.46 x 1.54 x 8.49 in (W x H x D)
• Military Standard (MIL-STD)-810G rugged, MIL-STD-461 electromagnetic capability (EMC)-compliant, MIL-STD-1275, MIL-STD-704F 12-28 virtual data center (VDC)-compliant power
• Supports any combination of fiber/copper connections
• VLAN/Ethernet tunneling for Layer 2 data over Layer 3 networks
• Software upgradable to meet evolving cybersecurity requirements
• Embedded OSPF and PIM routing
• Multicast video on demand
• Embedded TCP/IP accelerator (xPeP)
• Browser-based HMI configurations
• Centralized INE management
• High performance in VoIP applications
• Suite Agile and HAIPE Interoperability Specification (IS)-compliant; v4.2.5
• HAIPE-to-HAIPE over the air/net keying
• Foreign interoperability
• Crypto-modernization centric
• Key and algorithm agile per packet
• Classified and Unclassified Device Generated Shared Key (CDGSK/DGSK) as well as centralized key distribution sources
• 3-year warranty (extended options available), free training, and 24/7 technical support
• Inline network encryptor (INE) trade-in program available

Support equipment

• 1U rack mount holds three Viasat KG-250X, KG-250X-FC or IPS-250X (INEs) 
• Rack mount holds two Viasat KG-255X INEs with high availability applications, hot swappable fans, dual-redundant power supplies
• 1U rack mount universal shelf holds two Viasat KG-255X, three Viasat KG-250X/KG-250X-FC/IPS-250X or four KG-250XS INEs

Management: VINE Manager software

• Centrally manage and access up to 1,500 INEs
• Includes a security association (SA) wizard to auto populate remote routes and tunnel SAs
• Assign keys to common Pre-Placed Key (PPK) sequences on multiple INEs
• Supports HAIPE and Media Access Control Security (MACsec)/Ethernet Security Standard (ESS) Viasat encryption