ViPNet Coordinator HW PAC Cryptoshlush and Firewall

The main articles are:

• Cryptography
• Firewall

ViPNet Coordinator HW is a family of security gateways included in the ViPNet Network Security product line.

2024

Obtaining a certificate of the FSB of Russia for VPN ViPNet Coordinator HW 5

On September 4, 2024, InfoTeCS announced that it had received a certificate from the FSB of Russia for the next generation firewall with GOST VPN ViPNet Coordinator HW 5.

FSB Certificate Russia No. SF/124-4972 of 30.08.2024 certifies that ViPNet Coordinator HW 5 meets the requirements for means cryptographic information protection intended for protection that information does not contain information constituting a state secret, class KS3. The certificate is valid until 30.08.2027.

The presence of a certificate of the FSB of Russia allows you to organize secure communication channels using cryptographic algorithms GOST 34.12-2018 "Magma" and "Grasshopper," GOST 28147-89. The functional characteristics and stability of the ViPNet Coordinator HW 5 are confirmed by independent testing. We will tell you more about ViPNet Coordinator HW 5 and the upcoming product development plans at the upcoming webinar, which will be held on September 12, -  said Nikolai Smirnov, Product Director of InfoTeCS.

ViPNet Coordinator HW 5 combines the following security functions into one device: a session status firewall (SPI - Stateful Packet Inspection), an application layer firewall with DPI technology (Deep Packet Inspection), a VPN network (L3 VPN) and a link layer gateway (L2OverIP VPN), an intrusion detection and prevention tool (IDS/IPS), etc. ViPNet Coordinator HW 5 is implemented in the software and hardware complex on a trusted hardware platform, as well as in the form of a virtual device.

ViPNet Coordinator HW10

On August 29, 2024, InfoTeCS announced the expansion of the ViPNet Coordinator HW 4 lineup, and the ViPNet Coordinator HW10 version was included in the product.

ViPNet Coordinator HW10 is a security gateway in a compact form factor designed to protect connections to the corporate network of automated workstations, network devices (IP cameras, IP phones, printers), terminals, ATMs.

source = InfoTeCS

The ViPNet Coordinator HW10 on the HW10 F1 hardware platform is made in the form factor of a compact mini-computer measuring 94.5 x 30 x 68 mm and weighing 260 g. The device is equipped with three high-speed network interfaces (2x2.5G and 1x1G), HDMI output and two USB ports for local connection to the gateway. Power is supplied via USB-C (power supply included).

This platform provides performance in encryption mode (VPN) up to 35 Mbps, in firewall mode up to 200 Mbps.

We present a compact and low-cost solution to protect communication channels sufficient for most performance scenarios. The passive cooling system provides silent operation of the device, and the use of ARM architecture provides high energy efficiency. The security gateway can be used in many areas of activity and will undoubtedly be in demand in the information protection market, - said Nikolai Smirnov, Product Director of InfoTeCS.

ViPNet Coordinator HW10 certified by the FSTEC of Russia in terms of the requirements for ME type A, type B of the 4th class and the 4th level of trust within the framework of the current certificate of the FSTEC of Russia. The certification of the platform according to the requirements of the FSB of Russia for class KS3 CIPF is being completed.

Obtaining the certificate of FSTEC of Russia

On August 6, 2024, InfoTeCS announced that it had received a certificate from the FSTEC of Russia for the new generation security gateway ViPNet Coordinator HW 5.

FSTEC Certificate Russia No. 4831 of 25.07.2024 confirms the compliance of ViPNet Coordinator HW 5 with the requirements for information security establishing levels of trust in technical information protection and security tools according to information technology level 4 of trust, requirements firewalls for and profile of protection of firewalls of types A and B of the fourth protection class, requirements for intrusion detection systems and protection profile of intrusion detection systems of the fourth protection class network level.

ViPNet Coordinator HW 5 is a generation of cryptographic security gateways InfoTeCS, developed within the framework of the NGFW concept or multifunctional firewalls, combining many security functions, thereby significantly expanding the capabilities of this product and providing comprehensive protection against network threats.

We are continuously working to improve our products in order to more effectively counter information security threats and meet the current needs of our customers. The fifth generation ViPNet Coordinator HW combines several security modules and services, and replaces the ViPNet Coordinator HW 4, said Dmitry Gusev, Deputy General Director of InfoTeCS. - The obtained certificate is the result of the first stage of confirmation of compliance with the functional characteristics of the next generation of our flagship product with the requirements of information security regulations. In the near future, we plan to complete the certification of ViPNet Coordinator HW 5 according to the requirements of the FSB of Russia for class KS3 CIPF, as well as according to the requirements of the FSTEC of Russia for multifunctional network-level firewalls.

2022

Fifth Generation ViPNet Coordinator HW 5 Security Gateways

On December 15, 2022, InfoTeCS announced the release of the next generation of ViPNet Coordinator HW 5 security gateways.

ViPNet Coordinator HW 5 is a cryptographic security gateway that implements the NGFW Next-Generation Firewall concept firewall , which implements the following main security functions in one device that function together:

• cryptographic gateway using Russian encryption algorithms;
• SPI (Stateful firewall Packet Inspection)
• Application-level firewall (DPI);
• Intrusion Detection and Prevention Tool (IDS/IPS)
• proxy server;
• HA-cluster.

One of the key tasks, according to InfoTeCS, solved as part of the development of ViPNet Coordinator HW 5, was to combine several security services into one device, which significantly expands the possibilities of using this product and provides comprehensive protection against network threats.

"ViPNet Coordinator HW is one of the common InfoTeCS products. The requirements for this product are constantly increasing, our customers expect to receive performance and functionality that meets modern market requirements, while simplifying management processes, so we pay special attention to the development of ViPNet Coordinator HW security gateways. Improvements have appeared in the fifth generation of the product, now several security services are combined in one device, which expands the capabilities of this product and provides comprehensive protection against network threats. ViPNet Coordinator HW 5 will become a more convenient and modern tool in building integrated protection for secure corporate networks, "said Dmitry Gusev, Deputy General Director of InfoTeCS.

ViPNet Coordinator HW 5 is implemented in the form of a firmware complex on a trusted hardware platform, as well as in the form of a virtual device.

In addition to integrating the updated security features, other changes have become:

• additional cryptographic algorithms GOST 34.12-2018 "Magma" and "Grasshopper";
• Support for a standardized IPlir protocol with an open specification
• Multi-user role access with centralized authentication
• Centralized and remote configuration backup
• High availability cluster with open connection table synchronization.

ViPNet Coordinator HW 5, according to information as of December 16, 2022, is being certified by the FSB of Russia according to the requirements for CIPF class KS1/KS3 and ME class 4 and at the FSTEC of Russia according to the requirements for ME type A, type B class 4, SOV network level 4 protection class, 4 trust levels.

Compatibility with the information security complex "Sakura"

Russian developers of InfoTeCS and IT-Expertise have confirmed the correct joint operation of the ViPNet Coordinator HW hardware and software complex ViPNet Client 4 with the Sakura information security complex. This was announced on January 31, 2022 by InfoTeCS. Read more here.

Inclusion of ViPNet Coordinator HW 4 in the Unified Register of Russian Radio Electronic Products

On January 10, 2022, InfoTeCS announced that it had received the conclusion of the Ministry of Industry and Trade of the Russian Federation (Ministry of Industry and Trade of Russia) issued in accordance with the Decree of the Government of the Russian Federation of July 17, 2015 No. 719, which confirms the production of ViPNet Coordinator HW 4 hardware and software systems (PAC) in the Russian Federation.

Based on the conclusion of 06.12.2021 No. 107028/11, the hardware platforms HW1000 Q7, HW1000 Q8, HW1000 Q9 and HW5000 Q2 were entered into the Unified Register of Russian Electronic Products under the registered numbers RE-3689/21, RE-3688/21, RE-3687/21 and RE-3686/21, respectively, created in accordance with the Decree of the Government of the Russian Federation of July 10, 2019.

In addition, information the Russian ViPNet Coordinator HW 4 platforms are published in the product catalog, "State Industrial Information System" (GISP) created by order of the Ministry of Industry and Trade of the Russian Federation for the implementation of an industrial policy, the purpose of which is to form a high-tech, competitive industrial production in. Russia

The ViPNet Coordinator HW 4 security gateway is designed to build a ViPNet virtual network and securely transfer data between its protected segments, as well as filter IP traffic. ViPNet Coordinator HW 4 allows you to organize secure access to both data centers and enterprise cloud infrastructure, can be used to protect company branches, small remote offices, remote workplaces, as well as terminals and devices, including providing a secure connection to a secure corporate network.

2021: ViPNet Coordinator HW 4.3.2 Ethernet frames up to 9000 bytes

On April 27, 2021, InfoTeCS"" announced the release of the next version of the ViPNet Coordinator HW security gateways (version ON 4.3.2), which has already passed change control under the current certificates FSB of Russia and. FSTEC of Russia

The updated ViPNet Coordinator HW implements the following key features:

Support for hardware platforms (HW1000 Q7, HW1000 Q8, HW1000 Q9, and HW5000 Q2) that meet Ministry of Industry and Trade Russia to telecommunication Russian the Equipment of Origin requirements (). THORP The ViPNet Coordinator HW1000 (HW1000 Q7) is included in the unified register of Russian electronic products, work is underway to register the remaining versions. Additional platforms feature high performance, processors increased RAM and disk drives, an expanded number of network interfaces, and platforms with redundant hot-swappable power supplies.

ViPNet Coordinator HW 4.3.2 has a feature set (MultiWAN) that allows for redundancy and load sharing between communication channels (providers) through the use of user routing tables, policy based routing policies and Dead Gateway Detection technology.

Added support for working with large Ethernet frames (Jumbo frame) up to 9000 bytes. In a number of scenarios, the use of large Ethernet frames will increase the performance of the device and use the communication channel more efficiently.

The built-in DHCPserver-, as well as the DHCP-relay service, were upgraded and received the following functions:

• Operation in the hot spare cluster;
• Independent operation of the DHCP server and DHCP-Relay (on different interfaces);
• Manage DHCP server options according to RFC 2132;
• IP address reservation;
• The ability to specify a spare DHCP server (DHCP-Relay).

For the built-in proxy server, it is possible to connect any external antivirus (or sandbox solutions) using the ICAP protocol. At the same time, the built-in antivirus was stopped.

The configuration of the hot spare cluster is simplified, and IP addresses are no longer assigned to the network interfaces of the passive node. In this case, the availability of interfaces is checked by sending ARP requests.

Optimization software improves performance enciphering and. firewall

2020: Inclusion in the THORP register

On October 7, 2020, InfoTeCS announced that the Ministry of Industry and Trade of the Russian Federation (Ministry of Industry and Trade of Russia), based on Order No. 3323 of September 29, 2020, assigned the status of telecommunications equipment of Russian origin (TORP) to the ViPNet Coordinator HW 4 and ViPNet Coordinator IG 4 hardware and software complexes (PAC).

The ViPNet Coordinator HW 4 security gateway provides ViPNet virtual network construction and secure data transfer between its secure segments, as well as IP traffic filtering. It allows you to organize secure access to both data centers and corporate cloud infrastructure, can be used to protect company branches, small remote offices, remote workplaces, as well as terminals and devices, including providing a secure connection to a corporate secure network. PAC ViPNet Coordinator IG is designed to protect industrial networks and communication channels of information systems that have strict climatic requirements for the placement of equipment. It protects against network attacks and unauthorized access by creating secure channels based on ViPNet technology and firewall.

The key requirements, according to which the equipment was assigned the status of THORP, are the confirmation of the rights to the design documentation and software and the full production cycle in the Russian Federation.

By the decision of the Ministry of Industry and Trade of Russia, the following equipment models were included in the unified register of Russian radio-electronic products approved by the Decree of the Government of the Russian Federation dated July 10, 2019 No. 878:

• PAC ViPNet Coordinator HW 4 performed by ViPNet Coordinator HW1000 (hardware platform HW1000 Q7) - registry TKO-520/20 record;
• PAC ViPNet Coordinator IG 4 performed by ViPNet Coordinator IG10 4 (hardware platform IG10 I1) - registry TKO-517/20 record;
• PAC ViPNet Coordinator IG 4 performed by ViPNet Coordinator IG10 4 (hardware platform IG10 I2) - registry TKO-518/20 record;
• PAC ViPNet Coordinator IG 4 performed by ViPNet Coordinator IG100 4 (hardware platform IG100 I1) is a TKO-519/20 registry entry.

2019: Compatibility with NPT switching equipment

On September 10, 2019, InfoTeCS announced that it had conducted test tests with ECI Telecom for the compatibility of its products.

By results of tests the full compatibility of the switching equipment NPT-1200, NPT-1050 of production of the ECI Telecom company with hardware and software systems of ViPNet L2 10G, ViPNet Coordinator HW1000, ViPNet Coordinator HW2000 and ViPNet Coordinator HW5000 of production of the InfoTeCS company is confirmed. Read more here.

2018

SharxBase Compatibility

On October 15, 2018, InfoTeCS"" reported that it had SharxDC jointly and successfully tested the platform for compatibility Sharx with tools. information protection ViPNet More. here

BSS services for CIPF upgrade to version 4.x

On March 14, 2018, BSS announced its readiness to help banks using VipNet Coordinator HW version 3.x to securely connect to CMEV (GIS GMP) CIPF switch to the current version of the 4.x solution.

According to the letter "InfoTeCS" No. I-2017-0915 of 20.10.2017, on April 15, 2018, the certificate of the FSB of the Russian Federation for PAK VipNet Coordinator HW version 3.x expires (versions: HW100A, HW100B, HW100C, HW1000, HW2000). The renewal of the certificate is not planned due to the imminent end of the life cycle of the products of the HW3 line.

In the first quarter of 2018, InfoTeCS and Rostelecom planned to update CIPF to the current certified version 4.x. In this regard, PAC VipNet Coordinator HW version 3.x will no longer be able to provide connections to SMEV.

BSS-Security, the competence center in the field of information security, is a partner of InfoTeCS and provides banks with services for the timely update of CIPF VipNet Coordinator HW version 3.x to the current certified version 4.x.

InfoTeCS and Baum presented secure DSS

InfoTeCS, together with NPO Baum, introduced a secure data storage system (DSS) for the data center. The solution is based on Baum NAS controllers and the ViPNet Coordinator HW5000 hardware crypto gateway.

The DSS can include up to eight controllers, and the maximum amount of "raw" disk space can reach 10 PB. It is possible to operate both magnetic and solid state drives in DSS. To maximize I/O speed, controllers are equipped with a large amount of buffer memory with unique caching algorithms.

DSS features enable efficient disk consumption and storage array throughput:

• High-speed 10 Gb/s Ethernet and 16 Gb/s Fibre Channel ports
• Unified architecture to allocate virtual disks across file and block access protocols
• Automatic data deduplication
• Load balancing between controllers
• Ability to migrate data from and back from third-party DSS
• Direct Fibre Channel client connectivity to eliminate costly SAN infrastructure

Reliability of information storage in the DSS is ensured by duplication of all components of the software and hardware complex (calculation of reliability according to GOST), the function of instant snapshots of user data and encrypted storage.

The ViPNet Coordinator HW5000 software and hardware cryptoscluse, which is part of the presented solution, provides encryption of channels both within the data center and between geographically distributed nodes during data transfer and replication. Crypto gateways operate in hot standby mode: in the event of an active crypto gateway failure, the duplicate takes over its functions, and the failed after reboot goes into passive mode.

2017

2017

2016: ViPNet Coordinator HW compatible with Rutoken tokens

On August 26, 2016, the company InfoTeCS , together "Asset" with, announced the completion of ViPNet Coordinator HW compatibility tests with tokens and smart cards. Rutoken

Test results and compatibility certificates confirmed the possibility of sharing solutions of the Rutoken line and some products of InfoTeCS.

ViPNet Coordinator HW100 v2, (2015)

As of August 26, 2016, solutions ViPNet CSP 4.2 and Rutoken EDS 2.0 are the only pair of crypto provider and token associated with the PKCS# 11 software interface with an extension for the new GOST R 34.10-2012 and GOST R 34.11-2012. The interface was developed by the companies "Active" and InfoTeCS in compliance with the requirements of the technical committee for standardization "Cryptographic Information Protection" (TK 26).

InfoTeCS A product-compatible model Rutoken EDS 2.0 with hardware implementation of cryptographic standards (GOST R 34.10-2012, GOST R 34.11-2012 and VKO GOST R 34.10-2012) will allow the customer not to rebuild the operating infrastructure at the end of 2018 in order to meet new requirements. FSB Russia

2011: ViPNet Coordinator HW2000

According to information as of September 2011, ViPNet Coordinator HW2000 is a hardware and software complex that includes a crypto gateway and a firewall. Its main function is to provide full encryption of confidential information transmitted through communication channels, network security between the terminal equipment of branch and head office networks, as well as provide remote secure access for employees to the company's resources in 24/7/365 mode. The product provides a traffic encryption speed of 1.7 Gbps, which allows it to be used to protect data centers and cloud computing systems.

Product functionality - traffic encryption and authentication, separate filtering of encrypted and open traffic, address translation (NAT/PAT), static routing, QoS support, remote software update.

Together with other software products from the ViPNet CUSTOM ViPNet Coordinator software complex, the HW2000 provides effective implementation of many scenarios for information protection.

The ViPNet Coordinator HW software and hardware complex (in HW100/HW1000/HW2000/HW-VPNM modifications) received a certificate of conformity FSBRussia No. SF/124-1459 of 09.05.10 according to the requirements for class KS3 CIPF, valid until May 09, 2013. In addition, the ViPNet Coordinator HW (modifications of ViPNet Coordinator HW100 (types A, B, C), ViPNet Coordinator HW1000, ViPNet Coordinator HW2000, ViPNet Coordinator SF/515-1530, ViPNet Coordinator HW-VPNM) software and hardware complex has received a certificate of compliance with the Russian FSB type 04.10.10 protection 4 state power protection screens. The deadline is November 15, 2012.