Anti-Hacking Switching

Environment: Government agencies, research labs and utilities

A Government agency transmits and receives email and other files by connecting email servers to public data networks or Internet Service Providers. Often the servers are connected to a router or gateway device using Ethernet or WAN connections such as EIA-530, RS-232, T1, or V.35. Since the servers collect and distribute mail only at periodic intervals they don’t need to be connected continuously.

The problem:
The Government agency needs a solution that will ensure the integrity of its networks.

Even with a firewall in place, every connection made to a public network provides a portal for potential hacking attempts. Thus financial records, sensitive personnel information and software code are all exposed and at risk.

The solution:
The IPS-series A/B switches provided by Cornet Switching Systems are the ideal remedy for this potential security risk. Placed between the server or a routing device and the external network connections, the IPS switches provide the agency with an ‘air gap’ between the two networks.

With an IPS switch in place, the agency physically connects to the external network only when required, thus reducing the risk of being hacked.

How it works:
The IPS switch is controlled through the server’s COM port or through SNMP commands originating from the email or security server watching the network. When the IPS switch receives a 'make a network connection string' it closes the relays. When the email process is completed, a short string is sent to the switch to open the connection, once again providing the secure 'air gap'.

IPS switches are designed to accommodate a wide variety of network interfaces including RS-232, V.35, EIA-530, analog 2-, 4-, & 6-wire, T1/E1 and optical. These cards can be mixed and matched in a single chassis to provide economical support to any size site.

Since the IPS-series products have dual control ports, two devices can control the switch simplifying the process of providing redundancy where high availability is a requirement.

Anti-Hacking

Benefits:
• Takes up little room in a tight data centre
• Allows mixing of interface cards in a single chassis
• Each interface card is populated with its corresponding connector
• Only one device required to handle a multitude of interfaces
• Easy implementation on the host processor
• Maintains connectivity and/or ‘air gap’ if power fails
• Ensured availability in case of power supply failure
• Superior reliability

Features:
√ Compact size (7” high in a 19” rack)
√ Holds up to 16 rear mounted interface cards. Multiple interface cards available
√ Multiple signal types: RS-232/V.24; EIA 530, RS-449, X.21, DS1/E1 PRI/BRI; 10/100Base-T Ethernet; 2-, 4-, 6-wire analog; OC-1, 3, 12, 48; STM-1, 4, 16; Gigabit Ethernet (eletrical or optical); Fibre channel 1.25 2.5 Gbps; t1/E1; analog video (RGB, composite)
√ Multiple control mechanisms: VT-100 terminal computer control, TCP/IP Ethernet, SNMP
√ Reliable latching relays
√ Optional dual redundant AC power supplies
√ MTBF greater than 10 million switching actions