ViPNet Coordinator IG Network Security Gateway

The main articles are:

• Firewall
• APCS - typical structure

2023: Inclusion in the register of domestic software ViPNet Coordinator IG 4

The ViPNet SIES (Security for Industrial and Embedded Solutions) solution and the ViPNet Coordinator IG 4 industrial security gateway of InfoTeCS are included in a separate class of the Unified Register of Russian Programs for Electronic Computers and Databases. Infotecs announced this on June 8, 2023. Class "03.20 Means of protecting industrial automation systems (automated process control systems)" was introduced from May 1, 2023 into the classifier of programs for electronic computers and databases, approved by the Ministry of Digital Engineering of the Russian Federation.

2021: Obtaining the certificate of FSTEC of Russia

On April 19, 2021, InfoTeCS announced that it had received the FSTEC of Russia Certificate No. 4379 for the ViPNet Coordinator IG 4 Industrial Security Gateway, which confirms its compliance:

• requirements for firewalls (FSTEC of Russia, 2016);
• protection profile of firewalls of type D of the fourth class of IT.ME.D4.PZ protection (FSTEC of Russia, 2016);
• protection profile of firewalls of type A of the fourth class of IT.ME.A4.PZ protection (FSTEC of Russia, 2016);
• information security requirements, establishing levels of trust in information technical protection tools and information technology security tools (FSTEC of Russia, 2020), according to level 4 of trust.

Obtaining this certificate was the final milestone of the ViPNet Coordinator IG 4 version 4.2 certification process. So at the end of 2020, certification was completed according to the requirements of the FSB of Russia and the Ministry of Telecom and Mass Communications of Russia. The ViPNet Coordinator IG 4 software was included in the unified register of Russian programs, and the execution of the software and hardware complex was included in the register of telecommunications equipment of Russian origin (TORP) and the unified register of the Russian radio-electronic industry.

The industrial security gateway is designed to organize protected channels communications using the technology ViPNet VPN and prevent unauthorized access to facilities automated control systems and automated production and process control systems. Thanks to the support of channels ,/ Ethernet GSM UMTS/,, LTE Wi-Fi RS-232/RS485 it allows you to implement a large number of security scenarios.

Functionality and level of product certification enable ViPNet Coordinator IG 4 to protect critical information infrastructure (CII) for all categories of significance, automated control systems of production and technological processes (APCS) up to 1 class of security, state information systems (GIS) up to 1 class of security, personal data information systems (PIS) up to 1 level of security and public information systems of class II.

Obtaining the certificate of FSTEC of Russia is an important event for our company. We have completed the certification process of our industrial gateway, because earlier certificates of the FSB and the Ministry of Telecom and Mass Communications were received, and there was also an inclusion in the TORP and RPO registers, - said Andrey Chapchaev, General Director of InfoTeCS. - And the functions of the firewall, crypto gateway, industrial router and wireless router implemented by ViPNet Coordinator IG 4, coupled with certification for level 4 confidence in information security requirements, make ViPNet Coordinator IG an excellent solution for implementing various scenarios for ensuring information security in industrial systems, - he emphasized.

2020

Inclusion in the THORP register

On October 7, 2020, InfoTeCS announced that the Ministry of Industry and Trade of the Russian Federation (Ministry of Industry and Trade of Russia), based on Order No. 3323 of September 29, 2020, assigned the status of telecommunications equipment of Russian origin (TORP) to the ViPNet Coordinator HW 4 and ViPNet Coordinator IG 4 hardware and software complexes (PAC). Read more here.

ViPNet Coordinator IG and DATAPK Compatibility Confirmation

On January 15, 2020, the company InfoTeCS"" announced that, together CSSB with, it had successfully tested the compatibility of its products for information protection, automated control systems including for facilities - critical information infrastructure (CII) the programmaticallyhardware ViPNet Coordinator IG complex (manufactured by InfoTeCS) and the software and hardware complex (PAC) (DATAPK manufactured by UTSB).

PAC ViPNet Coordinator IG is an industrial security gateway designed to organize secure communication channels using ViPNet VPN technology inside industrial networks and prevent unauthorized access to objects of automated control systems (APCS) and automated production and process control systems (APCS).

PAC DATAPK is a means of operational monitoring and control of the security status of APCS and APCS, which makes it possible to identify the prerequisites for the implementation of information security threats (IS) and prevent the occurrence of information security incidents.

Our collaboration with UTSB to test products for compatibility is important for the market. Testing allows us to offer our customers a comprehensive approach to security, built on the products of two vendors, with a full guarantee of performance. Due to the complexity of the task of protecting information in the ACS, there are no solutions on the market that can immediately close all the needs of the organization and implement all the necessary measures of the regulator. Therefore, the use of solutions from several vendors is inevitable. However, this approach always raises questions of mutual influence and often falls on the shoulders of the problem to the end consumer. Confirming the compatibility of the two solutions also allows you to remove this issue and reduce the time for design and implementation. Moreover, the products complement each other well. For example, the ViPNet Coordinator IG industrial security gateway, in addition to protecting the information of the ACS itself, acts as the protection of the information transmission channel for the DATAPK solution. Substitution of state monitoring and control data is essentially the same threat as substitution of telemetry and control commands of the ACS itself. Therefore, designers of security subsystems need to organize and protect them. The same option eliminates the need to separately organize the protection of the transmission channel, - comments Marina Sorokina, head of the product department of InfoTeCS

UTSB traditionally offers an integrated approach to solving information security problems. To implement continuous protection, as a rule, it is necessary to combine various means of information protection. A joint solution based on CSS and InfoTeCS products is one example of this approach, - says Nikolai Domukhovsky, Deputy General Director of the UTSB for scientific and technical work

2017: Purpose and features of ViPNet Coordinator IG10

As of April 6, 2017, ViPNet Coordinator IG10 is an industrial network security gateway. Designed to protect channels in industrial systems and segment them into security domains.

PAC is embedded in the current IT infrastructure. With ViPNet Coordinator IG10, you can organize secure channels in any telecommunications infrastructure, including public networks.

ViPNet Coordinator IG10, (2016)

ViPNet Coordinator IG10 together with the ViPNet Network Security line can be used to protect the infrastructure APCS and: IIoT

• Protection of industrial network, industrial wireless local area network (WLAN).
• Secure remote monitoring.
• Layered protection (use of PAC for channel protection in conjunction with data protection at the application layer).
• Segmentation and perimeter protection, access delimitation.
• Control of access from the industrial network to the Internet.
• Secure remote access to the industrial network, to the desktop of the operator or engineer, as well as to equipment. In particular, it is possible to carry out mobile remote access.
• Communication gateway for communication with industrial equipment via serial interfaces.

Features

• Protection of distributed APCS by means of VPN, traffic filtering (firewall).
• Protection of wired (Ethernet) and wireless (Wi-Fi, 3G, 4G) control channels of distributed APCS facilities.
• Support for industrial devices using RS-232/422/485 interfaces, the ability to work as a Modbus TCP - Modbus RTU gateway.
• High energy efficiency.
• Operation at temperatures from -20 to + 60 ° С.
• Industrial execution.
• VLAN support.
• enciphering It is used as a key generation center. ON ViPNet Administrator 4.6