Download Product Brochure
|
|
|
Product Highlights
|
|
KVMs becoming a target for cyber attacks as they may be the only possible link to bridge between isolated classified networks and networks
open to the internet.
Many high security organizations adopting secure KVMs as part of their cyber protection strategy, in some cases this effort is not enough.
Second-Generation Secure KVMs sold in the market today have documented vulnerabilities that may cause data leakages between
connected computers with different security levels.
HSL’s Secure KVM is the industry’s first 3rd Generation Secure KVM. This product offers the
largest number of ports (16) with the highest possible separation between
connected computers. The K2016E Secure KVM designed to meet the requirements of organizations that are
challenged by the need to provide secret or top-secret network access together with unclassified or internet access.
The K20x series KVM uses unidirectional optical data-diodes to prevent any potential leakage between the highly-isolated
peripheral channels. This KVM can also be used to securely filter and lock USB ports preventing data export / import through mass-storage devices by hardware.
Switching between 16
sources may be confusing task for the users. The
K2016E features a Remote Desktop
Controller (RDC) port that can be interface with
HSL's RDC440 controller. Using the K2016E with
RDC440 users can control and monitor the Secure
KVM remotely and enjoying color LCD with
programmeable network/computer names. For more
information see
RDC440
page.
The K2016E supports legacy VGA computers, single-link DVI or dual-link DVI video switching.
It is compatible with USB or PS/2 peripherals providing equal security levels. Patented
EDID emulation technology enables secure operation with display
Plug and Play support.
Product passed extensive security evaluations through all forms of known KVM attacks. Unlike other secure KVMs in the market today HSL KVMs were designed to securely
operate with the assumption that two of the connected computers are infected by a hostile code that is constantly trying to attack the KVM.
|
|
Overview |
Models |
Specs |
Photos |
Download |
Order |
|
|
-
Highest security
by design
Designed by an
agency to support isolation between
national security networks. Common
Criteria EAL 4+ approved (pending).
Derivative of a TEMPEST product used
in NATO nuclear submarines.
-
Hardware Based
peripheral protection/isolation
Absolutely
no dependency on firmware or software.
All firmware is in ROM (Read Only Memory).
No keyboard buffering or memory. More
than 60dB isolation between channels.
-
Unidirectional
optical data diodes
used to secure
USB peripherals isolation. Data can
flow from devices to host only. No reverse
data flow possible by physics. Can be
used between widest security gaps.
|
-
User authentication
device port
Special USB port
that supports CAC and other user authentication
devices including wide range of biometric
readers. User can decouple this port
from KVM switching to remain authenticated
on one channel if needed.
-
Display Plug and
Play (DDC) protection
Leakage prevention
through patented emulated technology.
Signaling attacks prevented by design.
DDC/EDID is fully functional.
-
Future-proof -
supports widest variety of peripherals
and computers
supports different
video formats from VGA to 2560x1600
dual-link DVI and HDMI. Supprots latest
keyboards, mice and card readers. Support
computers with all Operating Systems.
|
-
Peripherals security
full USB
devices filtering to assure support
for keyboard and mouse only.
-
Active anti-tampering
always-on
active anti-tampering with 10 years
battery. Special holographic tampering
evident labels.
-
Remote Desktop
Controller
special port to
enable remote controller accessory -
RDC440 (more
information>). Secure
KVM can be installed at distant location
and connected through a cable.
-
KVM Extenders Support HSL Secure KVM Switch supports most copper and fiber KVM extenders connected
to the console port.
|
|
|
K2016E Secure KVM Switch
front view
|
|
|
K2016E Secure KVM Switch
rear view
|
|
|
K2016E typical installation
diagram
|
|
|
K20x Simplified block-diagram
|
|
High Security Labs – KVM Products Selection Chart
|
Model
|
Primary Use
|
Computer Ports
|
Peripheral Support
|
DPP (CAC)
|
RDC Port
|
Audio
|
Video
|
Max Display Resolution
|
|
K202B
|
Small-Form-Factor conventional switching
KVM USB peripheral support with DVI-I video
|
2
|
USB
|
No
|
No
|
Yes
|
VGA, DVI-I single-link,
HDMI supprted
|
1920x1200 DVI single-link, 2048x1536 VGA
|
|
K202D
|
Small-Form-Factor conventional switching
KVM USB peripheral support with DVI-D video
|
2
|
USB
|
No
|
No
|
Yes
|
DVI-D single-link,
HDMI supprted
|
1920x1200 DVI single-link, 2048x1536 VGA
|
|
K202E K204/E
|
Conventional switching
KVM USB + Legacy peripheral
support with DVI video
|
2 / 4
|
USB and PS/2
|
Yes (E only)
|
Yes
|
Yes
|
VGA, DVI single and dual-link,
HDMI supprted
|
2560x1600 DVI dual- link, 1920x1200
DVI single-link, 2048x1536 VGA
|
|
K208E
|
Conventional switching
KVM USB + Legacy peripheral
support with DVI video
|
8
|
USB and PS/2
|
Yes
|
Yes
|
Yes
|
VGA, DVI single and dual-link,
HDMI supprted
|
2560x1600 DVI dual- link, 1920x1200
DVI single-link, 2048x1536 VGA
|
|
K224E
|
Dual display Matrix KVM
USB + Legacy peripheral support
with DVI video
|
4
|
USB and PS/2
|
Yes
|
No
|
Yes
|
2 x DVI single and dual-link
display
|
2560x1600 DVI dual-link, 1920x1200
DVI single link
|
|
K244/E
|
Dual-head conventional
switching KVM
USB + Legacy peripheral support
with DVI video
|
4
|
USB and PS/2
|
Yes (E only)
|
Yes
|
Yes
|
2 x VGA, DVI single and dua-link,
HDMI supprted
|
2560x1600 DVI dual link, 1920x1200
DVI single link, 2048x1536 VGA
|
|
K248E
|
Dual-head conventional
switching KVM
USB + Legacy peripheral support
with dual-link DVI-I video
|
8
|
USB and PS/2
|
Yes
|
Yes
|
Yes
|
2 x VGA, DVI single and dual-link,
HDMI supprted
|
2560x1600 DVI dual-link, 1920x1200
DVI single-link, 2048x1536 VGA
|
|
K2016E
|
Conventional
switching KVM
USB + Legacy peripheral support
with dual-link DVI-I video
|
16
|
USB and PS/2
|
Yes
|
Yes
|
Yes
|
VGA, DVI single and dual-link,
HDMI supprted
|
2560x1600 DVI dual link, 1920x1200
DVI single-link, 2048x1536 VGA
|
|
K30x
|
Trader / NOC Secure
KM with cursor tracking.
Supports dual and quad head
|
4
|
USB and PS/2
|
Yes
|
Yes
|
Yes
|
No video support (displays are
connected directly to the PCs)
|
N/A
|
|
K40x
|
Combiner KVM
for operations and intelligence,
simultaneous windowing
|
2 / 4
|
USB and PS/2
|
No
|
Yes
|
Yes
|
DVI single-link,
HDMI supprted
|
1024x768 (4:3), 1280 x
1024 (4:3) [Future] 1680x1050
(16:10), 1920x1080 (16:9), 1920
x 1200 (16:10), Dual-link displays
support [Future]
|
|
K40xE
|
Combiner KVM
for operations and intelligence,
simultaneous windowing
|
2 / 4
|
USB and PS/2
|
Yes
|
Yes
|
Yes
|
DVI single-link,
HDMI supprted
|
1024x768 (4:3), 1280 x
1024 (4:3) [Future], 1680x1050
(16:10), 1920x1080 (16:9), 1920
x 1200 (16:10), Dual-link displays
support [Future]
|
|
K600
|
Modular combiner
KVM for operations and intelligence,
simultaneous windows GUI.
Integrated thin-clients
|
4
|
USB and PS/2
|
Yes
|
Yes
|
Yes
|
DVI single link,
HDMI supprted
|
1024x768 (4:3), 1280 x
1024 (4:3) [Future], 1680x1050
(16:10), 1920x1080 (16:9), 1920
x 1200 (16:10), Dual-link displays
support [Future]
|
Notes:
1.
HSL KVM products supporting audio
are only supporting Audio out switching
due to security.
2.
K224/E Secure KVM Matrix is End Of Life product.
3.
Specifications are subject to
change without prior notice.
4.
All HSL Secure KVM products except
for K600 are currently undergoing Common
Criteria evaluation to EAL 4+.
|
|
|
|
K2016E Product Specification |
|
Host Computer Input Ports
|
§
16 input
ports from host computers having:
- 16 x DVI-I Female connectors for video
- 16 x USB Type-B connectors for keyboard and
mouse
- 16 x USB Type-B connectors for user authentication
device [K208E only]
§
Display Plug & Play EDID support through
emulation to prevent EDID leakage
|
|
Console Ports
|
§
One set of output ports for display, keyboard,
mouse, having:
-
DVI-I Female connector (DVI-I to VGA adapters
can be ordered separately)
-
2 x USB Type-A jacks for keyboard and mouse
-
USB Type-A jack for user authentication
device
-
PS/2 legacy keyboard connector (DIN-5)
-
PS/2 legacy mouse connector (DIN-5)
§
Channels isolation – optical data-diode
and two separate host emulators
§
Remote Desktop Controller port (RJ-45 jack)
|
|
Management
|
§
Channel select front panel status LED's
§
Channel select push-buttons
§
Keyboard hotkeys [optional – may be disabled]
§
Remote Desktop Controller (RDC)
|
|
Video modes supported
|
§
All Dual-link DVI resolutions up to 2560
x 1600
§
VGA resolutions
supported up to
2048x1536
§
VGA output is usable only if all inputs
and output are VGA.
|
|
Security Functions
|
§
USB ports supporting only keyboard and mouse
through host emulation and strong filtering.
§
Optical Data Diode assures unidirectional
flow from devices to computers.
§
Firmware change can not cause leakage between
channels or data export.
§
Isolated power supplies for each device
emulator.
§
Dedicated port for smart-card reader or
biometric device. Port is strongly filtered
and monitored.
§
Firmware resides on ROM.
§
EDID is highly isolated and fully emulated. EDID content qualification function (firewall).
§
Battery powered anti-tampering system to
disable product in case of mechanical intrusion.
§
Special holographic Temper Evident Labels.
|
|
Power
|
§
AC input IEC-3 jack
§
Internal power supply. Power
input 90-240V AC, 25W maximum
|
|
Peripheral security
|
§
USB ports supporting only keyboard and mouse
through host emulation
§
Data-diode assures USB unidirectional flow
from devices to host
§
Firmware change can not cause leakage between
channels or data export
|
|
Environmental
|
§
Temperature range: Operating - 0ºC to 40ºC
(32ºF to 104ºF); Storage - -20ºC to
60ºC (-4ºF to 140ºF)
§
Humidity: Operating - 20 to 80% non condensing;
Storage – 10 to 90% non condensing
§
Altitude: 0 to 10,000 ft
|
|
Regulatory Compliance
|
§
Safety: UL/cUL60950,EN60 950
§
EMI/EMC: FCC Class B, CE Mark, EN55022B,
VCCI
|
|
Security Accreditations
|
§
Common Criteria
EAL 4+ ALC_FLR.3
(currently
in evaluation)
§
Designed for Common Criteria EAL-5
§
Complies with
latest
NIAP Peripheral
Sharing Switch (PSS) For Human Interface
Devices Ver 2.1
|
|
Physical Characteristics
|
§
Enclosure: Tampering-protected steel metal enclosure, 19” 2U rack mounted or desktop
§
Dimensions: 185 (D) x 438 (W) x 77 (H) mm / 7.28 (D) x 17.25 (W) x 3.0 (H) inches
§
Device weight: 7.4 Kg. (16.3 lbs.)
§
Shipping Weight: 10.8 Kg (23.7 lbs) without cables
|
|
Warranty, Reliability
|
§
2 years limited warranty. This limited warranty
covers 100% of parts and workmanship on
any required repairs. For details see HSL
web-site:
www.highseclabs.com/Warranty
§
Optional extended warranty for up to 5 additional
years
§
Product design life-cycle 10 years per MIL-HDBK-217E.
|
|
How to Order
KVM Models
|
Description
|
Part Number
|
|
K2016 - 16-Port High Security KVM,
USB PS/2 keyboard and mouse, DVI-I
and VGA video, Active anti-tampering,
Front panel push-buttons
|
CPN06217
|
Cables
|
Description
|
Part Number
|
|
KVM Cable short (1.8 m), DVI-D to
DVI-D Single-Link, USB, Black
|
CPN05485
|
|
KVM Cable short (1.8 m), DVI-D to
DVI-D Dual-Link, USB, Black
|
CPN05486
|
|
KVM Cable short (1.8 m), CAC, Black-Yellow
|
CPN05487
|
|
KVM Cable short (1.8 m), DVI-A to
VGA, USB, Black
|
CPN05489
|
|
KVM Cable short (1.8 m), Audio Out, Black-Green
|
CPN05490
|
|
KVM Smart-Cable VGA PC to DVI KVM
converter cable with USB type A
to USB type B, 6ft (1.8 m), black
|
CPN06011
|
|
KVM Cable short (1.8 m), DVI-D to DVI-D Single-Link, USB, Audio out, CAC, Black
|
CPN05488
|
|
KVM Cable short (1.8 m), DVI-D to DVI-D Dual-Link, USB, Audio out, CAC, Black
|
CPN06040
|
Accessories and
spare parts
|
Description
|
Part Number
|
|
RDC440 Remote Desktop Controller 2-16 ports
|
CPN06125
|
|
SCM Smart-card reader, USB, SCR-3311
|
CPN05498
|
Services
|
Description
|
Part Number
|
|
K2016 One year Standard warranty and
support extension (3rd to 7th year)
per S/N
|
CSV06973
|
|
K2016 One year Premium warranty and
24/7 support per S/N
|
CSV06974
|
|
|
|
|
|