KG-250XS HAIPE Encryptor

Our lowest SWaP rugged HAIPE

The Viasat KG-250XS is a low size, weight, and power (SWaP) National Security Agency (NSA)-certified Type 1 rugged HAIPE Inline Network Encryptor (INE). Weighing just over half a pound and delivering over 100 Mbps (aggregate) asymmetric throughput that can be split depending on mission needs, the KG-250XS is ideal data protection for telecommuting, flyaway kits, small Unmanned Aerial Vehicles (UAVs), and other dismounted or field applications.

Packing big networking power in a small form factor for data in transit, the Viasat KG-250XS delivers features above and beyond standard HAIPE requirements and improved performance over high-latency links with embedded multicast video on demand and Embedded Transmission Control Protocol/Internet Protocol (TCP/IP) acceleration. The KG-250XS has advanced cryptographic capabilities (ACC), is Over-The-Network Keying (OTNK) Key Management Infrastructure (KMI) Aware, is Product Delivery Enclave (PDE)-enabled, and offers pass-through Layer 2 traffic using Virtual Local Area Network (VLAN)/Ethernet tunneling over Layer 3 networks.

The KG-250XS allows you to remotely rekey a network of HAIPE devices from a physically secure location with HAIPE-to-HAIPE over-the-air/net keying and leverages a field-proven software-upgradable design, so it evolves over time to meet new requirements without hardware changes. It also comes equipped with a browser-based human-machine interface (HMI) for easy configurations and centralized INE management is provided at no extra cost. The Viasat KG-250XS provides trusted on-the-go IP encryption that won’t weigh you down.


Our lowest SWaP HAIPE

  • Weight 0.65 lb.; 3.73 x 1.05 x 3.06 in. (W x H x D)
  • 5W typical power consumption
  • Military Standard (MIL-STD)-810 rugged
  • MIL-STD-461 electromagnetic interference (EMI)-compliant
  • MIL-STD-1275 compliant 12-28 volts of direct current (VDC) power

Enhanced networking capabilities

  • VLAN/Ethernet tunneling for Layer 2 data over Layer 3 networks
  • Software-upgradable to meet evolving cybersecurity requirements
  • Embedded Open Shortest Path First (OSPF) and Protocol Independent Multicast (PIM) routing*
  • Multicast video on demand
  • Embedded TCP/IP accelerator (xPeP)
  • Browser-based HMI configurations
  • Centralized INE management; VINE ManagerTM software provided at no extra cost

Crypto-modernization centric

  • Programmable encryption
  • Classified and Unclassified Device Generated Shared Key (CDGSK/DGSK); as well as centralized key distribution sources (ex. KMI)
  • Usable by coalition allies and Department of Homeland Security (DHS)


*Future capability planned to be available via software upgrade.


Support equipment

  • 1U rack mount holds three Viasat KG-250X, KG-250X-FC or IPS-250X (INEs) 
  • Rack mount holds two Viasat KG-255X INEs with high availability applications, hot swappable fans, dual-redundant power supplies
  • 1U rack mount universal shelf holds two Viasat KG-255X, three Viasat KG-250X/KG-250X-FC/IPS-250X or four KG-250XS INEs


Management:  VINE Manager software

  • Centrally manage and access up to 1,500 INEs
  • Includes a security association (SA) wizard to auto populate remote routes and tunnel SAs
  • Assign keys to common Pre-Placed Key (PPK) sequences on multiple INEs
  • Supports HAIPE and Media Access Control Security (MACsec)/Ethernet Security Standard (ESS) Viasat encryption