KG-250XS HAIPE Encryptor

Packing big networking power in a small form factor for data in transit, the Viasat KG-250XS delivers features above and beyond standard HAIPE requirements and improved performance over high-latency links with embedded multicast video on demand and Embedded Transmission Control Protocol/Internet Protocol (TCP/IP) acceleration. The KG-250XS has advanced cryptographic capabilities (ACC), is Over-The-Network Keying (OTNK) Key Management Infrastructure (KMI) Aware, is Product Delivery Enclave (PDE)-enabled, and offers pass-through Layer 2 traffic using Virtual Local Area Network (VLAN)/Ethernet tunneling over Layer 3 networks.

The KG-250XS allows you to remotely rekey a network of HAIPE devices from a physically secure location with HAIPE-to-HAIPE over-the-air/net keying and leverages a field-proven software-upgradable design, so it evolves over time to meet new requirements without hardware changes. It also comes equipped with a browser-based human-machine interface (HMI) for easy configurations and centralized INE management is provided at no extra cost. The Viasat KG-250XS provides trusted on-the-go IP encryption that won’t weigh you down.

Our lowest SWaP HAIPE

• Weight 0.65 lb.; 3.73 x 1.05 x 3.06 in. (W x H x D)
• 5W typical power consumption
• Military Standard (MIL-STD)-810 rugged
• MIL-STD-461 electromagnetic interference (EMI)-compliant
• MIL-STD-1275 compliant 12-28 volts of direct current (VDC) power

Enhanced networking capabilities

• VLAN/Ethernet tunneling for Layer 2 data over Layer 3 networks
• Software-upgradable to meet evolving cybersecurity requirements
• Embedded Open Shortest Path First (OSPF) and Protocol Independent Multicast (PIM) routing*
• Multicast video on demand
• Embedded TCP/IP accelerator (xPeP)
• Browser-based HMI configurations
• Centralized INE management; VINE Manager^TM software provided at no extra cost

Crypto-modernization centric

• Programmable encryption
• Classified and Unclassified Device Generated Shared Key (CDGSK/DGSK); as well as centralized key distribution sources (ex. KMI)
• Usable by coalition allies and Department of Homeland Security (DHS)

*Future capability planned to be available via software upgrade.

Support equipment

• 1U rack mount holds three Viasat KG-250X, KG-250X-FC or IPS-250X (INEs) 
• Rack mount holds two Viasat KG-255X INEs with high availability applications, hot swappable fans, dual-redundant power supplies
• 1U rack mount universal shelf holds two Viasat KG-255X, three Viasat KG-250X/KG-250X-FC/IPS-250X or four KG-250XS INEs
  
  

Management:  VINE Manager software

• Centrally manage and access up to 1,500 INEs
• Includes a security association (SA) wizard to auto populate remote routes and tunnel SAs
• Assign keys to common Pre-Placed Key (PPK) sequences on multiple INEs
• Supports HAIPE and Media Access Control Security (MACsec)/Ethernet Security Standard (ESS) Viasat encryption