YES SECURE CRYPTOGUARD VPN

Transparent encryption
The encryption of data, voice and video takes place fast and automatically. The size of the IP packets is not enlarged by YES Secure CryptoGuard VPN. Each model of the YES Secure CryptoGuard VPN is compatible with each other. Furthermore, YES Secure CryptoGuard VPN is very suitable for satellite environments.

Proven technology
YES Secure CryptoGuard VPN is in use for more than 20 years and consists meanwhile of six generations. YES Secure CryptoGuard VPN has a long lifetime. In short, the years of experience make YES Secure CryptoGuard VPN not only a reliable but also a sustainable solution.

YES Secure CryptoGuard VPN family
YES Secure CryptoGuard VPN is a product family with its own specific features. 600/6000 are suited for mobile, industrial and small office environments with a maximum throughput of 95 Mbps. 5500, 5800 and 5900 are suited for office environments from 180 Mbps till 1 Gbps and CompuCrypt XL for high speed.

Throughput up to 10 Gbps
CompuCrypt XL, unique in the family, delivers unprecedented performance in the area of throughput. CompuCrypt XL can reach throughput up to 10 Gbps. CompuCrypt XL is prepared for the future of high speed connections.   Latency < 1ms .

Encryption method
The data encryption can be chosen between Payload and IPsec. The encryption can be done on OSI layer 2, 3 and 4. The algorithm is AES with a 256 bit key length. Customization can be realized in special customer projects.

Efficient central management
Through the central management (SMS), the administrator can simply and fast change keys, add security rules and perform updates for each YES Secure CryptoGuard VPN of the organization. YES Secure CryptoGuard VPN is thus very efficient and cost reducing for an organization.

For small and large networks
YES Secure CryptoGuard VPN is suitable for all kind of companies, locations and networks. The network size varies from two locations to more than thousand locations. YES Secure CryptoGuard VPN 600/6000 are designed for industrial environments and are shockproof and operational between -20° and +55° Celsius.

Reduce cost of ownership
YES Secure CryptoGuard VPN can easily be integrated in all types of networks, even in the most complex structure. This makes YES Secure CryptoGuard VPN an efficient investment and reduces the total cost of ownership.

YES Secure CryptoGuard VPN  600  /  6000

These Virtual Private Network solution is special designed for the mobile segment and / or externe circumstances.

CryptoGuard VPN 600 / 6000 Is a new hardware development within the CryptoGuard VPN family and fully compatible with the 5000 series. These Virtual Private Network solution is special designed for the mobile segment and / or extreme circumstances.

The CGVPN 600 is the mobile version and the CGPN 6000 is the 19" implementation.

Through the compact sizes and the robust hardware is the CGVPN 600 extreme suited to be installed in vehicles. This gives the option to build a secure data link from the vehicle to the home, office or data center.

The CGVPN 600 and 6000 are multi-functional "black box" existing of a data encryption mechanism, packet filtering and central management. All rules are processed centrally on the Security Management Station (SMS) and intelligent forwarded to the CGVPN In charge. Automatic priority ensures that the most explicit rules will be controlled first. Our philosophy ..Everything not explicitly allowed, is automatically forbidden" ensures the highest security.

With the CGVPN 600 is all communication on IP level protected and special meant for LAN connection via satellites and radio connection. As the Interface is based on RJ45 connectors can the CGVPN 600 also be connected within local networks (Ethernet / Fast Ethernet) and other connections as WANS (ISDN, X.25, Frame Relay, etc.) or over backbones (FDDI, ATM,etc.).

Reliable Protection
CGVPN 600 and CGVPN 6000 offers a reliable protection of the connected terminals independent the used operating system. The CGVPN is installed as an on IP based secure bridge between the terminal and the mobile network. CGVPN is fully transparent for users and the used applications.
CGVPN offers the opportunity that all sensitive data will be encrypted and whereby the reliability and integrity is guaranteed. By this a reliable solution against Interception, espionage and manipulation for the mobile market is offered.

Special features
CGVPN 600/6000 Is a flexible, effective and economic security system fully manufacture developed secure networks for use under extreme circumstances and In mobile applications as for example buses, trucks, vessels, airplanes, which have to communicate in a secure way with their home station.

Advantage's

• Simple to install, hardware based VPN solution Interoperable with the CryptoGuard VPN family
• Reliability of data (creating of Virtual Private Networks) Data cannot be read as plain text.

Acces control

• Only explicit allowed connection are possible. Unauthorized users don't have access to the protected network.
• Management of rights (communication protocols and services)
• Access only for explicit allowed protocols, services and defined time frames.
• Logbook and protocol evaluation All security related events can be stored in the CGVPN 600/6000 and by the SMS been evaluated.

Secure storage of Keys

• The for the CGVPN 600/6000 necessary key material is protected stored on a smartcard.

Certifications

• The CGVPN 600/6000 is based on the software for the approved level
• Restricted of the NL Government version CryptoGuard VPN.

Specifications Hardware

• Special industrial hardware.
• No moving parts.
• MTBF: 10 years
• Internal or external smartcard and CompactFlash reader version.
• Resistant to shock and vibration
• Working temperature  -20 0 till +55 0
• Size  CGVPN 600: 293 x 198 x 41 mm   CGVPN 6000: 19 x 441 x 410 x 43 mm

Interfaces

• 3x Ethernet (RJ45) 10/100/ioooMbps
• Service port RS 232
• optional RS323 (RJ45)

Redundant power   CGVPN 600:10 - 24 VDC extern, 30 Watt   CGVPN 6000: ioo -240 VAC 50-60 Hz, 40 Watt

Operating system

• Hardened manufacture developed and supported Operating System (COS)
• FreeBSD

Security features:

• Standards / protocols
• TCP/IP, DIX2, 802.3, 802.2 LLC

Encryption

• 256 AE5 encryption
• VPN mode: 128,192, 256 bit AES
• IPSec mode for interoperability with other IPSec products (RFC 2401 -2411, IPSec / IKE)

YES Secure CryptoGuard VPN 5500

YES Secure CryptoGuard VPN 5500 secures your high performance network connections by means of hardware based encryption which can be realized with the CG VPN mode or IPsec mode.

Among other features,  YES Secure CryptoGuard VPN 5500 uses the AES algorithm and processes rules optimized for maximizing throughput. YES Secure CryptoGuard VPN 5500 supports IPsec with certificates for authentication.

YES Secure CryptoGuard VPN is one of the most secure crypto devices made in Europe; it is employed in banks, insurance companies, public authorities and the military as encryption system for the protection of IP data in sensitive network environments based on Ethernet or Fast Ethernet. Permanent adaptations to the latest technological achievements guarantee that the encryption system will always be one step ahead of potential attackers in public networks.

Equipped with AES and 3DES encryption, the VPN software YES Secure CryptoGuard VPN 5500 provides the most secure, state-of-the art security presently realizable. The AES encryption algorithm is available with key lengths of 128, 192 and 256 bits, (3)DES with 128 and 192 bits. The limit for the possible number of keys has been raised from 192 to 32,768 keys.

YES Secure CryptoGuard developed its own IPsec toolkit. This makes us independent of export regulations from countries outside Europe. The complete YES Secure product line is without any backdoor. The source codes can be reviewed by our customers.

The YES Secure CryptoGuard VPN 5500 is also a packet filter firewall. Each packet is controlled on source and destination address, time of the day, day of the week, protocol etc.. The Security Management Station (SMS) and the CryptoGuard automatically sort out the most explicit rule for that packet and moment.

The YES Secure CryptoGuard VPN 5500 is the fourth generation of the successful YES Secure CryptoGuard family. Started in 1993 with the first CryptoGuard LAN, many thousands of systems are installed and still working around the world. The complete YES Secure CryptoGuard family is backwards compatible with the former generations.

We are proud that there hasn't been any successful hack on the YES Secure CryptoGuard devices!

Specifications:

Hardware:  Special industrial hardware

Operating system:  32-bit hardened CryptoGuard Operating System (COS)

Interfaces:  2x Ethernet/Fast Ethernet/Gigabit Ethernet (RJ45); service port (RS 232)

Standards, protocols:  TCP/IP, DIX2, 802.3, 802.2 LLC, OSI-CLNP, IPsec/IKE, ESP/AH

Encryption:  VPN mode: 40/56/128 bit (A)DES hardware-based, 192 bit 3DES, 128/192/256 bit AES
                      IPsec mode: 3DES, Blowfish, CAST128 bit, AES, software-based

Throughput:  Depends on the packet size up to 90 Mbps full duplex encryption

Physical specifications, dimensions:  1U (441 x 365 x 44.4 mm), 19"-enclosure

Weight:  approx. 8 kg

Power supply:  100-240 VAC; 50-60 Hz

YES Secure CryptoGuard VPN 5800

YES Secure CryptoGuard VPN 5800 is developed on request of our customers. They asked to build a secure crypto device with a throughput above 100 Mbps.

The gigabit version is based on the same technology of the YES Secure CryptoGuard VPN 5500 and works completely compatible with all the family members.

The YES Secure CryptoGuard VPN 5800 has a throughput up to 500 Mbps for large and Jumbo frames and 300 Mbps for smaller frames (for higher throughput see YES Secure CryptoGuard VPN 5900).

YES Secure CryptoGuard VPN 5800 is often used as the central unit in a star network to handle the data of many hundred YES Secure CryptoGuard systems. In networks above 100 Mbps or backbones they are used to encrypt the data at line speed.

YES Secure CryptoGuard VPN 5800 secures your high performance network connections by means of hardware based encryption which can be realized with the CG VPN mode or IPsec mode.

Among other features, YES Secure CryptoGuard VPN 5800 uses the AES algorithm and the processes rules are optimized for maximizing throughput. YES Secure CryptoGuard VPN 5800 supports IPsec with certificates for authentication.

YES Secure CryptoGuard VPN is one of the most secure crypto devices made in Europe; it is employed in banks, insurance companies, public authorities and the military as encryption system for the protection of IP data in sensitive network environments based on Ethernet or Fast Ethernet. Permanent adaptations to the latest technological achievements guarantee that the encryption system will always be one step ahead of potential attackers in public networks.

Equipped with AES and 3DES encryption, the VPN software CryptoGuard VPN 5800 provides the most secure, state-of-the art security presently realizable. The AES encryption algorithm is available with key lengths of 128, 192 and 256 bits, (3)DES with 128 and 192 bits. The limit for the possible number of keys has been raised from 192 to 32,768 keys.

YES Secure CryptoGuard developed its own IPsec toolkit. This makes us independent of export regulations from countries outside Europe. The complete YES Secure product line is without any backdoor. The source codes can be reviewed by our customers.

The YES Secure CryptoGuard VPN 5800 is also a packet filter firewall. Each packet is controlled on source and destination address, time of the day, day of the week, protocol etc. The Security Management Station (SMS) and the CryptoGuard automatically sort out the most explicit rule for that packet and moment.

The YES Secure CryptoGuard VPN 5800 is the fourth generation of the successful YES Secure CryptoGuard family.  Started in 1993 with the first CryptoGuard LAN, many thousands of systems are installed and still working around the world. The complete YES Secure CryptoGuard family is backwards compatible with the former generations.

We are proud that there hasn't been any successful hack on the YES Secure CryptoGuard devices!

In the IPsec mode the YES Secure CryptoGuard can communicate with systems from other vendors. The communication configuration can be handled by the Security Management Station. This quality allows easy configuration for a secured connection with for example a supplier or business partner.

A new hardware platform is developed for YES Secure CryptoGuard VPN that enables the removal of the encryption board (YES Secure CryptOn-Board) and thus the separate transport of box and board. By this, the hardware can be replaced fast and above all securely if necessary. The compact-flash card (CF) is also removable. It contains the software and in some cases the configuration data and the logbook as well. It can be exchanged if the board fails or the sensitive data is to be removed without having to transport the complete hardware.

Specifications:

Hardware: Special industrial hardware

Operating system:  32-bit hardened CryptoGuard Operating System (COS)

Interfaces:  2x Gigabit Ethernet (RJ45); service port (RS 232)

Standards, protocols:  TCP/IP, DIX2, 802.3, 802.2 LLC

Encryption:  VPN mode: 40/56/128 bit (A)DES, 128/192 bit 3DES, 128/192/256 bit AES, software-based
                      IPsec mode: 3DES, Blowfish, CAST128 bit, AES, software-based

Physical specifications, dimensions:  2U (441 x 540 x 89 mm), 19"-enclosure

Weight:  approx. 16 kg

Power supply:  100-240 VAC; 50-60 Hz  Redundant hot-swap mains power supply

YES Secure CryptoGuard VPN 5900

YES Secure CryptoGuard VPN 5900 is based on the same hardware and software of the YES Secure CryptoGuard VPN 5800 but a special designed AES accelerator board is added. The throughput of the CryptoGuard VPN 5900 is increased to 1 Gbps for large and Jumbo frames.

YES Secure CryptoGuard VPN 5900 is developed on demand of our customers. They asked us to built a secure crypto device with a throughput above 100 Mbps.

The gigabit version is based on the same technology of the YES Secure CryptoGuard VPN 5500 and works completely transparent to all the family members.

Equipped with AES and 3DES encryption, the VPN software YES Secure CryptoGuard VPN 5900 provides the most secure, state-of-the art keys presently realizable. The AES encryption algorithm is available with key lengths of 128, 192 and 256 bits, 3DES with 128 and 192 bits. The limit for the allowed number of keys on each device has been raised from 192 to 32,768 keys per device.

YES Secure Crypto Guard developed their own IPsec toolkit. This makes us independent of export regulations outside Europe. The source codes can be reviewed by our customers. The complete YES Secure product line is without any backdoor.

In the IPsec mode the YES Secure CryptoGuard can communicate with systems from other vendors. The communication configuration can be handled by the Security Management Station (SMS). This quality allows easy installation of secured connections with suppliers or business partners.

The YES Secure CryptoGuard VPN 5900 is a packet filter firewall. Each packet is controlled on source and destination address, time of the day, day of the week, protocol etc. The Security Management Station and the YES Secure CryptoGuard automatically sort out the most explicit rule for that packet and moment.

We are proud that there hasn't been any successful hack on the CryptoGuard devices.

The YES Secure CryptoGuard VPN 5900 is the fifth generation of the successful YES Secure CryptoGuard family. Started in 1993 with the first CryptoGuard LAN, many thousands of systems are installed and still working around the world. The complete YES Secure CryptoGuard family is backwards compatible with the former generations.

YES Secure CryptoGuard VPN 5900 is often used as the central unit in a star network to handle the data of many hundred YES Secure CryptoGuard systems. In networks above 100 Mbps or backbones they used to encrypt the data at line speed.

A new hardware platform was developed for CryptoGuard VPN that enables the removal of the smartcard or the encryption board (CryptOn-Board) and thus the separate transport of box and board. By this, the hardware can be replaced fast and above all securely if necessary. The compact-flash card (CF) is also removable. It contains the software and in some cases the configuration data and the logbook as well. It can be exchanged if the board fails or the sensitive data is to be removed without having to transport the complete hardware.

Specifications:

Hardware: Special industrial hardware

Operating system:  32-bit hardened CryptoGuard Operating System (COS)

Interfaces:  2x Gigabit Ethernet (RJ45); service port (RS 232)

Standards, protocols:  TCP/IP, DIX2, 802.3, 802.2 LLC

Encryption:  VPN mode: 40/56/128 bit (A)DES software-based, 128/192 bit 3DES, 128/192/256 bit AES, hardware-based
                      IPsec mode: 3DES, Blowfish, CAST128 bit, AES, software-based

Physical specifications, dimensions:  2U (540x441x89 mm), 19"-enclosure

Weight:  16 kg

Power supply:  100-240 VAC; 50-60 Hz   Redundant hot-swap mains power supply

YES Secure CryptoGuard VPN 500

YES Secure CryptoGuard VPN 500 is the name of the desktop member of the YES Secure CryptoGuard VPN family which is used as client independent VPN solution. YES Secure CryptoGuard VPN 500 is an easy to handle desk-top model and was especially developed for smaller networks up to 34 Mbps. It represents an economical solution for individual terminals, small networks and servers.

Equipped with AES and 3DES encryption, the VPN software YES Secure CryptoGuard VPN 500 provides the most secure, state-of-the art security presently realizable. The AES encryption algorithm is available with key lengths of 128, 192 and 256 bits, (3)DES with 128 and 192 bits. The limit for the possible number of keys has been raised from 192 to 32,768 keys.

YES Secure CryptoGuard VPN 500 is also a packet filter firewall. Each packet is controlled on source and destination address, time of the day, day of the week, protocol etc. Security Management Station (SMS) and YES Secure CryptoGuard automatically sort out the most explicit rule for that packet.

Client independent VPN solution:

• Handy desk model, separate mains power supply
• Economic security system
• Limited number of simultaneously working clients
• Cost-effective solution for individual computers, small networks and servers
• Interoperable with the entire CryptoGuard VPN family
• Transparent for users and applications
• Packet filter firewall with IP filter and port filter
• Hardened and minimised OS
• Central administration with the Security Management Station (SMS)

Specifications:

Hardware:  Special industrial hardware

Operating system:  32-bit hardened CryptoGuard Operating System (COS)

Interfaces:  2x Ethernet/Fast Ethernet/Gigabit Ethernet (RJ45); service port (RS 232)

Standards, protocols:  TCP/IP, DIX2, 802.3, 802.2 LLC

Encryption:  VPN mode: 40/56/128 bit (A)DES hardware-based, 192 bit 3DES, 128/192/256 bit AES

Optionally available:
YES Secure CryptOn1 module for highly secure storage of keys and crypto acceleration.
IPsec mode for interoperability with IPsec products according to RFC 2401-2412 (IPsec/IKE).

Physical specifications, dimensions:  Desk model (130x190x60mm)

Weight:  approx. 2 kg

Power supply:  100-240 VAC; 50-60 Hz