secure For the ultimate in Cyber Defence TRL Technology

Transcription

1 //Government secure Grade Network Security For the ultimate in Cyber Defence

2 // CATAPAN Government Grade Network Security L-3 TRL has over a decade of experience in developing and supporting sophisticated IP encryption devices for Government Grade Network Security, helping to defend against the cyber threat. With award winning products, L-3 TRL s CATAPAN developments remain at the forefront of many sensitive and highly classified government networks. We have enjoyed long-standing relationships with UK Government agencies and commercial service providers through supporting their wide ranging network architectures, providing real-time effective assistance in the safety critical area of Cyber Defence. The world we live in Since the World War I era, when poor radio communication procedures resulted in severe national security compromises, the British Government set up a special organisation to study the methods of cipher communications and to advise on the security of codes and ciphers. Today this organisation, known as CESG, provides advice and services to protect the UK Government s voice and data networks. As the National Technical Authority, CESG also provides a service to help private organisations develop cryptographic products for use by government agencies, known as CAPS (CESG Assisted Products Service). All cryptographic products in line with UK Government standards must go through a certification process and each product is graded accordingly. All L-3 TRL CATAPAN Government Grade Network Security products have been CAPS approved to the highest assurance standard of up to, and including TOP SECRET. In today s world where technology is developing at an ever increasing rate, the use of public networks to communicate has become essential to modern day life. The accessibility of these networks has created an infrastructure where sensitive and highly confidential information can be sent and received from anywhere in the world, providing a vital method of communication to and from some of the most remote and isolated areas. Businesses, Critical National Infrastructures (CNIs) such as banks and electric/gas companies, and even governments rely upon these networks to function, yet the combination of attacks on the network, gateway and host means they are increasingly reliant on an untrusted, unprotected and unsecured network. The threat to communications being intercepted and network systems becoming compromised is constantly evolving and increasing.

3 Legacy Systems The importance of interoperability The tools and standards we use to communicate are constantly evolving with the advances in technology. As this happens, the areas harnessing this technology must also change to ensure the continued growth of public networks. Legacy systems with serial based communications often have poor change management, poor access control and are technically complex, requiring extensive use of internal resources. IP bearer systems offer alternatives to legacy systems enabling organisations to maintain pace with technological advances, better availability of services, faster throughput and a lower total cost of ownership. used to set up Security Associations (SA) allowing the auto generation of keys, reducing the burden on government resources. All CATAPAN products are designed to support PRIME IKE, ensuring a smooth transition from the current government standards, enabling easier deployment of products and services into organisations mobile and enterprise infrastructures. Our CATAPAN family of encryption devices are in-field reprogrammable and fully interoperable; providing flexibility, economy and security to all users. The next generation IP security (IPsec) framework allows both scalability and interoperability; this framework standard requires a shared security policy and authenticated keys for services. PRIME Internet Key Exchange (IKE) is the new protocol The threats we face The increase in use of public networks The growing need to share information coupled with the internet s standards-based web interface and the increasing number of applications has resulted in the requirement to use public networks. The threat to the confidentiality, integrity and availability of critical and sensitive information has significantly increased with cyber warfare often being the hackers and terrorists choice of attack. The ability to eliminate the risks associated with the use of public networks must be assured in today s threat environment. The requirement to communicate and share information, confident in the knowledge that the enterprise is securely protected end-to-end, is paramount. When developing a security strategy, an organisation will need to consider and protect against not only current attacks and threats but the evolving unknown. At L-3 TRL, we have developed a comprehensive range of products, services and packages to provide our customers with the complete secure network solution up to and including TOP SECRET.

4 The Secure Network Solution Enabling secure and mobile communications Award Winning Encryption Airtime Services Gateway Solutions The CESG CAPS accredited CATAPAN family of As part of our growing portfolio of CATAPAN solutions, Our Network Defence consultancy services have been Alongside our Network Defence consultancy, we also High Grade IP network encryption devices has been we can provide a variety of bundled Airtime Services designed to offer information, advice and support for offer a fully managed Gateway Solution; providing developed to satisfy requirements for affordable, with Mini-CATAPAN and modem hardware offering any customer looking for a future proof secure solution barriers against intrusion whilst protecting IP addresses reliable and highly effective, secure encryption. Value secure, mobile connectivity using Inmarsat BGAN, designed to prevent and defeat cyber attacks on their and locations both remotely and at Headquarters. for money, physical size and interoperability are fundamental attributes to the range. Featuring the most technologically advanced systems available, the CATAPAN family assures the end-to-end protection of information across public networks, protecting and securing many sensitive government agencies worldwide. Thuraya, Ka-Band, cellular and public Wi-Fi. From a single unit or a complex network infrastructure across multiple sites, we have a number of dedicated service packages which ensure our customers stay connected with the highest levels of security assured by our CATAPAN products. network. This includes assistance with design, installation and architecture of all hardware and services to provide a complete business solution. Our Managed Gateway Services are ideal for anyone needing externally managed solutions for the highest possible level of security. From our award winning pocket sized Mini-CATAPAN device to our high speed Enterprise-CATAPAN, you can be assured of the confidentiality, integrity and availability of your mobile and fixed networks. Extending Our Capability L-3 TRL work in conjuction with some of the industry s most innovative companies to offer products and solutions designed specifically to work alongside our CATAPAN range. Our extended capability allows us to offer secure and remote mobile working across the most commonly used forms of public bearers, including IP, cellular and Wi-Fi.

5 Award Winning Encryption Enabling secure communication over public networks L-3 TRL understands the need for securing information infrastructures, where fixed and mobile deployments have disparate requirements whilst still needing to be interoperable. We can provide the complete reprogrammable, interoperable range of solutions for both tactical environments and fixed deployments offering secure end-to-end global communications. Our industry leading CATAPAN family of High Grade Encryption solutions continue to surpass customer expectations and can satisfy even the most stringent requirements for up to and including TOP SECRET encryption. Enterprise-CATAPAN for high performance Designed as a high-speed encryption solution, Enterprise-CATAPAN is ideal for secure data centre connectivity, where bandwidth requirements call for a high performance solution. For changing operational requirements, Enterprise-CATAPAN can be easily re-configured in the field, enabling over-the-network software and firmware upgrades for added flexibility. High bandwidth strategic deployment 1Gbps/10Gbps on one platform Gateway/concentrator for Mini-CATAPAN All of our CATAPAN products go through CESG CAPS accreditation and feature the most technologically advanced architecture, so you can be assured of the confidentiality, integrity and availability of your mobile and fixed networks to the highest level. Mini-CATAPAN for complete flexibility Mini-CATAPAN is a pocket-sized, High Grade IP encryption device which utilises commercial components, eliminating the dependency on classified ASICs. The small, lightweight design is ideal for both tactical and strategic environments, offering the highest levels of security and functionality. Pocket sized, lightweight design for tactical and strategic deployment 100Mbps duplex throughput Certified for reverse tunnel mode Mini-CATAPAN Lite for secure voice and data Mini-CATAPAN Lite is a flexible, secure voice and data solution aimed at SoHo (Small office, Home office), embassy and remote/mobile working. The Mini-CATAPAN Lite has a dedicated RED IP phone port to enable secure voice and data over public networks. Flexible, secure voice and data for SoHo Built around embedded crypto module Multiple integrated product solutions

6 Extending the CATAPAN capability Secure remote and mobile solutions Secure Communication System L-3 TRL are able to offer the SCS family of highly secure multi-bearer communication hubs for mobile environments. These provide remote users with the ability to communicate securely at both classified and unclassified levels via any IP network from anywhere in the world. A key feature of the systems is the integrated cyber security function which is able to detect suspicious and malicious activity and unauthorised connections. SCS 100 for remote operations The 100 is the smallest product of this capability in the market place, allowing users to direct the units to select the best performing, cost-effective or load balance across multiple communication bearers based on operational requirements. The device is designed to allow a single user access to a range of secure networks simultaneously. Small form factor In-built Wi-Fi, 3G, ADSL and Ethernet Multiple public network connectivity SCS 200 for tactical and strategic operations The 200 extends the capability of the operation by allowing multiple, concurrent red and black network connections simultaneously delivering communications for either a fixed or field deployed strategic HQ. The device has a self-healing, self-forming IP meshed network providing continuous, uninterrupted coverage. Concurrent red and black connectivity Automatic mesh network In-built GPS, allowing location tracking SECRET The SCS devices have a simple and easy to use icon driven menu control system, supports multiple simultaneous connections via Wi-Fi, 3G, BGAN, Ethernet and ADSL and has a remote administration and monitoring capability. Secure Communications Hub The Secure Communications Hub has been developed as a compact, ruggedized and portable communications hub with integrated 3G connectivity; ideal for mobile or remote environments where there is no fixed line or access available. Secure mobile solution Integrated 3G modem and antennas Compact, lightweight robust design Docking station supporting multiple users Secure IP Voice Mini-CATAPAN Lite enables users to directly connect desk-top IP phones, in addition to the secure data capability. This provides secure voice alternatives to the current legacy link-based voice solutions. An additional benefit is the option to connect to a wider legacy network for complete interoperability through existing operational voice gateways. Protects voice and data Designed to operate over any IP network NPM ACCSEC when non-operational Key partnerships providing turn-key solutions L-3 TRL work in conjuction with some of the industry s most innovative companies to offer products and solutions designed specifically to work alongside our award winning CATAPAN range. From ruggedised laptop stations to secure communications systems, these products provide a seamless extension to the capability of the CATAPAN products, enabling secure communications through widely used public networks, to the most stringent of requirements.

7 Airtime Services For secure satellite, cellular data and Wi-Fi As part of our growing portfolio of CATAPAN solutions, we can provide a variety of airtime services with Mini-CATAPAN and modem hardware offering secure, mobile connectivity. From a single unit or a complex network infrastructure across multiple sites, we have a number of out of the box dedicated service packages which ensure our customers stay connected with the highest levels of security. CATAPAN Satellite Services Ka-Band for High Speed Connectivity Connect securely at super-fast speeds of up to 10Mbps Ideal for high-demand government and military operations Closed terminal groups, with graded priority Offers cost-effective network options for users with multiple transportable node needs Unlimited, secure data transfer Inmarsat BGAN for Global Coverage Utilised widely by government, defence and security services worldwide Extensive global coverage Lightweight, portable terminals Supports speeds of up to 492Kbps Thuraya for Remote Regions Secure, reliable connectivity even in the remotest regions of the world Offering regional coverage in 144 countries Lightweight, portable terminals Supports speeds of up to 444Kbps standard with up to 384Kbps for streaming data CATAPAN Wi-Fi and Cellular Data Services Public Wi-Fi Pre-paid global options Advice on best practice for secure connection to Wi-Fi Secure access through our suite of services whenever you are near a hotspot Cellular Data Flexible 3G/4G options available Can be adapted for use across a range of diverse environments Ideal for organisations with a high number of users UK and international SIMs available Cost-effective data bundles to match requirements Real-time usage reports available with private APN CATAPAN Added Value Services As part of our growing range of CATAPAN solutions, we are also able to offer the following: Bundled service solutions, offering multiple IP bearers for improved efficiency and value for money End-to-end service management, giving you support and technical guidance whenever it s needed Bespoke and specialist integration Secure billing for any customers with specific operational or security requirements Tailored consultancy to ensure you receive the optimum airtime package

8 Gateway Solutions Protecting your enterprise against the unknown threat Network Defence Secure Gateway Solutions Securing your enterprise network today requires Our network design service provides effective Many organisations are having to review and L-3 TRL are able to offer a variety of secure more than just a traditional firewall; growing cyber solutions to cater for the diverse, High Assurance fundamentally change the way they communicate managed solutions, from consultancy and threats are becoming increasingly sophisticated and requirements of both fixed and mobile networks. and manage their externally facing internet integration of existing network architecture, to complex in design and the potential for data loss Formal accreditation is often a complicated network infrastructures, security and mobility the development of a bespoke secure internet and damage through attacks increases every year. process, involving compliance with a number of needs. Lack of internal resources, complex gateway including the procurement, development, Many organisations are struggling with the logistics and constraints of managing this evolving threat which can have a detrimental effect on their ability to protect their networks. We can offer a wide range of tailored network defence consultancy solutions offering expert information, advice and support based on your enterprise architecture, helping to provide a future proof secure solution designed to prevent emerging cyber attacks on your network. L-3 TRL are also a member of the CESG Listed Adviser Scheme (CLAS), specialising in providing guidance on the interpretation of current and emerging Information Assurance policies. HMG guidelines and interaction with accreditation authorities. We assist our customers ensuring the correct procedures are adhered to, minimising the risk of approval delays. Network configuration can include the investigation of integration problems or network optimisation to maximise the potential of networks. This ensures the operational efficiency of the implemented solution is achieved. The management and generation of keys is often a complicated and difficult process. Our key management consultancy ranges from providing advice and guidance on services and processes to offering a full key management solution. Each of our CATAPAN solutions are compliant with the implementations, interoperability challenges and increased cyber attacks are driving an increasing number of organisations to outsource the hosting of their public gateways. Our hosted managed solutions are designed to help organisations ensure their enterprise, networks and assets are never compromised, whilst lowering the total cost of ownership and reducing the burden on internal resources. For both the gateway and remote devices we are able to meet the most stringent security requirements: Barriers against intrusion Obfuscation of encrypted traffic configuration, commissioning and accreditation of the gateway. There is also the option of a fully hosted and managed secure internet gateway with network security tools to deliver real-time visibility and control of the threat to the network infrastructure and endpoint devices. Assurance Level or Accreditation of secure internet gateway network architecture will also be achieved for integration within existing customer networks. latest CESG UK Key Management specifications. Protection of IP addresses and locations Centralised logging and alert reporting

9 For more information on our Government Grade Network Security Solutions, please contact us at: L-3 19 Miller Court, Severn Drive, Tewkesbury, Gloucestershire, GL20 8DN, UK. Telephone +44 (0) Fax +44 (0) CATAPAN is a registered trademark of Ltd. CATAPAN products incorporate classified technology and are subject to strict export regulations, selected technical information will only be disclosed to authorised personnel and organisations upon enquiry. L-3 TRL reserves the right to amend specifications in the light of continuing development V1 Limited