CSP VPN Gate MARCH!

The software package CSP VPN Gate with the special boot carrier "MARCH!" implements essentially new concept of the organization of protection of jobs of remote users during the communication session with services of the distributed information system. The essence of the concept consists in creation on the computer of the user of the isolated software environment which provides sufficient conditions for the protected work with services of the distributed information system for a certain period of time. Such approach allows to lift a considerable part of the limits (regarding the set software, operation modes, etc.) which are inevitably arising when using the remote computer for the protected interaction. The protection class at the same time does not decrease.

The organization of the entrusted communication session using the module "MARCH!" - the innovation submitted to the judgement of the market last fall. It should be noted that protection of the remote user is one of the bottlenecks in security systems of the organizations. The new solution provides:

• isolation of crucial applications during the work in not entrusted environment;
• strict user authentication and cryptographic permanent access control;
• isolation of network interaction from external network, integrity of transmitted data, protection of traffic against implementation of foreign data;
• lack of not declared opportunities and program tabs;
• scalability of network of remote access to hundreds of thousands of users;
• high cost efficiency of the solution in general.

In the solution the gateway of security CSP VPN Gate placed or on the certain platform, or as a part of the module NME-RVPN (MCM) is used. CSP VPN Gate is intended for protection of the open information and also the confidential information which is not containing the data which are the state secret in information systems with accomplishment of such functions transferred under the TCP/IP protocol as package traffic filtering, protection of traffic on the basis of enciphering of packets under the IPSec AH and/or IPSec ESP protocols, identification and authentication of partners at connection establishment, control of integrity of packets with use a hash function.

The special boot carrier can be used as on the module NME-RVPN (MCM) in execution option "the MARCH! - CF", and directly on client side in execution option "the MARCH! - USB". It provides loading of the entrusted computing environment that allows to reach the level of protection of KC2 without use of additional "electronic lock" devices.

The implemented versions of the module are certified FSB of Russia as the means of cryptographic information protection (MCIP) on a class of protection of KC 1. At its use in a complex with load module "the MARCH!" higher level of protection is reached.

The special boot carrier is available in two options of execution: "MARCH! - USB" (with USB port) and "the MARCH! - CF" (with the CF card). It can be used on client side performed by "the MARCH! - USB" together with the program gateway of security CSP VPN Gate. In this case creation of the entrusted communication session of the remote user is provided.

The second method of use of the solution – performed by "the MARCH! - CF". It can be set, for example, on the hardware gateway of security NME-RVPN (MCM) which is joint development of Cisco company and its technology partner of C-Terra. At this option of creation of remote access clients get such indisputable advantage as use of technologies of the world leader in the field of network security of Cisco company along with use of reliable technology of creation of a session of remote connection with the help of the Russian products using the Russian encryption algorithms of the channel. Application "MARCH! - CF" provides loading of the entrusted computing environment that allows the solution based on NME-RVPN (MCM) to reach the level of protection of KC2 without use of additional "electronic lock" devices.

2016: Sale of a product is stopped

On February 3, 2016 the S-Terra CSP company announced the termination of sales of a product.