Download Product Brochure |
|
|
Product Highlights |
|
KVMs becoming a target for cyber attacks as they may be the only possible link to bridge between isolated classified networks and networks
open to the internet.
Many high security organizations adopting secure KVMs as part of their cyber protection strategy, in some cases this effort is not enough.
Second-Generation Secure KVMs sold in the market today have documented vulnerabilities that may cause data leakages between
connected computers with different security levels.
HSL’s Secure KVM is the industry’s first 3rd Generation Secure KVM. This product offers the highest possible separation between
4 connected computers. The K224 Secure KVM designed to meet the requirements of organizations that are
challenged by the need to provide secret or top-secret network access together with unclassified or internet access.
The K200 series KVM uses uni-directional optical data-diodes to prevent any potential leakage between the highly-isolated
peripheral channels. This KVM can also be used to securely filter and lock USB ports preventing data export / import through mass-storage devices by hardware.
RDC (Remote Desktop
Controller) port enables simple interface with
HSL's RDC440 controller. Using the K224 with
RDC440 users can control and monitor the Secure
KVM remotely and enjoying color LCD with
programmeable network/computer names. For more
information see
RDC440
page.
The K224 supports four isolated host computers and two user displays. Unlike dual-head KVMs this KVM enables independent selection of host for each display.
User can select to switch keyboard and mouse between left and right displays.The K224 provides dedicated peripheral port to securely support bi-directional
devices such as smart-card reader or touch screen.
Product passed extensive security evaluation through all forms of known KVM attacks. Unlike other secure KVMs in the market today HSL KVMs were designed to securely
operate with the assumption that two of the connected computers are infected by a hostile code that is constantly trying to attack the KVM.
|
|
Overview |
Models |
Specs |
Photos |
Download |
Order |
|
|
-
Dual displays support
Support two independent user displays at any resolution. Any input can be switched to any output. Support HDMI and dual-link DVI.
-
Highest security
by design
Designed by an
agency to support isolation between
national security networks. NIAP Common
Criteria EAL 4+ approved (pending).
Derivative of a TEMPEST product used
in NATO nuclear submarines.
-
Hardware Based
peripheral protection/isolation
Absolutely
no dependency on firmware or software.
All firmware is in ROM (Read Only Memory).
No keyboard buffering or memory. More
than 60dB isolation between channels.
|
-
Unidirectional
optical data diodes
used to secure
USB peripherals isolation. Data can
flow from devices to host only. No reverse
data flow possible by physics. Can be
used between widest security gaps.
-
User authentication
device port
Special USB port
that supports CAC and other user authentication
devices including wide range of biometric
readers. User can decouple this port
from KVM switching to remain authenticated
on one channel if needed.
-
Display Plug and
Play (DDC) protection
Leakage prevention
through patented emulated technology.
Signalling attacks prevented by design.
DDC/EDID fully functional.
-
Peripherals security
full USB
devices filtering to assure support
for keyboard and mouse only.
|
-
Future-proof -
supports widest variety of peripherals
and computers
supports different
video formats single-link DVI-D to 2560x1600
dual-link DVI and HDMI. Supprots latest
keyboards, mice and card readers. Support
computers with all Operating Systems. Note: Product does not support VGA
-
Active anti-tampering
always-on
active anti-tampering with 10 years
battery. Special holographic tampering
evident labels.
-
Remote Desktop
Controller
special port to
enable remote controller accesory -
RDC440 (more
information>). Secure
KVM can be installed at distant location
and connected through a cable.
-
KVM Extenders Support HSL Secure KVM Switch supports most copper and fiber KVM extenders connected
to the console port.
|
|
|
K224E Secure KVM Matrix
front view
|
|
|
K224E Secure KVM Matrix
rear view
|
|
|
K224E typical installation
diagram
|
|
High Security Labs – KVM Products Selection Chart
|
Model
|
Primary Use
|
Computer Ports
|
Peripheral Support
|
DPP (CAC)
|
RDC Port
|
Audio
|
Video
|
Max Display Resolution
|
|
K202B
|
Small-Form-Factor conventional switching
KVM USB peripheral support with DVI-I video
|
2
|
USB
|
No
|
No
|
Yes
|
VGA, DVI-I single-link,
HDMI supprted
|
1920x1200 DVI single-link, 2048x1536 VGA
|
|
K202D
|
Small-Form-Factor conventional switching
KVM USB peripheral support with DVI-D video
|
2
|
USB
|
No
|
No
|
Yes
|
DVI-D single-link,
HDMI supprted
|
1920x1200 DVI single-link, 2048x1536 VGA
|
|
K202E K204/E
|
Conventional switching
KVM USB + Legacy peripheral
support with DVI video
|
2 / 4
|
USB and PS/2
|
Yes (E only)
|
Yes
|
Yes
|
VGA, DVI single and dual-link,
HDMI supprted
|
2560x1600 DVI dual- link, 1920x1200
DVI single-link, 2048x1536 VGA
|
|
K208E
|
Conventional switching
KVM USB + Legacy peripheral
support with DVI video
|
8
|
USB and PS/2
|
Yes
|
Yes
|
Yes
|
VGA, DVI single and dual-link,
HDMI supprted
|
2560x1600 DVI dual- link, 1920x1200
DVI single-link, 2048x1536 VGA
|
|
K224E
|
Dual display Matrix KVM
USB + Legacy peripheral support
with DVI video
|
4
|
USB and PS/2
|
Yes
|
No
|
Yes
|
2 x DVI single and dual-link
display
|
2560x1600 DVI dual-link, 1920x1200
DVI single link
|
|
K244/E
|
Dual-head conventional
switching KVM
USB + Legacy peripheral support
with DVI video
|
4
|
USB and PS/2
|
Yes (E only)
|
Yes
|
Yes
|
2 x VGA, DVI single and dua-link,
HDMI supprted
|
2560x1600 DVI dual link, 1920x1200
DVI single link, 2048x1536 VGA
|
|
K248E
|
Dual-head conventional
switching KVM
USB + Legacy peripheral support
with dual-link DVI-I video
|
8
|
USB and PS/2
|
Yes
|
Yes
|
Yes
|
2 x VGA, DVI single and dual-link,
HDMI supprted
|
2560x1600 DVI dual-link, 1920x1200
DVI single-link, 2048x1536 VGA
|
|
K2016E
|
Conventional
switching KVM
USB + Legacy peripheral support
with dual-link DVI-I video
|
16
|
USB and PS/2
|
Yes
|
Yes
|
Yes
|
VGA, DVI single and dual-link,
HDMI supprted
|
2560x1600 DVI dual link, 1920x1200
DVI single-link, 2048x1536 VGA
|
|
K30x
|
Trader / NOC Secure
KM with cursor tracking.
Supports dual and quad head
|
4
|
USB and PS/2
|
Yes
|
Yes
|
Yes
|
No video support (displays are
connected directly to the PCs)
|
N/A
|
|
K40x
|
Combiner KVM
for operations and intelligence,
simultaneous windowing
|
2 / 4
|
USB and PS/2
|
No
|
Yes
|
Yes
|
DVI single-link,
HDMI supprted
|
1024x768 (4:3), 1280 x
1024 (4:3) [Future] 1680x1050
(16:10), 1920x1080 (16:9), 1920
x 1200 (16:10), Dual-link displays
support [Future]
|
|
K40xE
|
Combiner KVM
for operations and intelligence,
simultaneous windowing
|
2 / 4
|
USB and PS/2
|
Yes
|
Yes
|
Yes
|
DVI single-link,
HDMI supprted
|
1024x768 (4:3), 1280 x
1024 (4:3) [Future], 1680x1050
(16:10), 1920x1080 (16:9), 1920
x 1200 (16:10), Dual-link displays
support [Future]
|
|
K600
|
Modular combiner
KVM for operations and intelligence,
simultaneous windows GUI.
Integrated thin-clients
|
4
|
USB and PS/2
|
Yes
|
Yes
|
Yes
|
DVI single link,
HDMI supprted
|
1024x768 (4:3), 1280 x
1024 (4:3) [Future], 1680x1050
(16:10), 1920x1080 (16:9), 1920
x 1200 (16:10), Dual-link displays
support [Future]
|
Notes:
1.
HSL KVM products supporting audio
are only supporting Audio out switching
due to security.
2.
K224/E Secure KVM Matrix is End Of Life product.
3.
Specifications are subject to
change without prior notice.
4.
All HSL Secure KVM products except
for K600 are currently undergoing Common
Criteria evaluation to EAL 4+.
|
|
|
|
K224E Product Specification |
|
Host Computer Input Ports
|
§
2
/
4 input
ports from host computers having:
- 2
/
4 x DVI-D Female connectors for video (VGA not supported)
- 2
/
4 x USB Type-B connectors for keyboard and
mouse
- 2
/
4 x USB Type-B connectors for user authentication
device
§
Monitor Plug & Play EDID support through
emulation to prevent EDID sinaling leakage
|
|
Console Ports |
§
2 x DVI-D Female connector for primary and secondary user displays
§
One set of ports for user console devices, having:
-
2 x USB Type-A jacks for keyboard and mouse
-
USB Type-A jack for user authentication
device [K224E only]
-
PS/2 legacy keyboard connector (DIN-5)
-
PS/2 legacy mouse connector (DIN-5)
§
Channels isolation – optical data-diode
and 2 separate host emulators
§
Remote Desktop Controller (RDC) port (RJ-45)
|
|
Management
|
§
Channel select and status LED's
§
Channel select push-buttons
§
Keyboard hotkeys [optional – may be disabled]
§
Optional Remote Desktop Controller (RDC) [sold separately, K224E model only]
|
|
Video modes supported
|
§
DVI Single-link supports resolution up to 1920 x 1200.
§
DVI Dual-link supports resolution up to 2560 x 1600.
§
VGA computers supported only through SmartCables (active conversion to DVI-D).
§
VGA output is usable only if all inputs and output are VGA.
|
|
Security Functions
|
§
USB ports supporting only keyboard and mouse through host emulation and strong filtering.
§
Optical Data Diode assures unidirectional
flow from devices to computers.
§
Firmware change can not cause leakage between
channels or data export.
§
Isolated power supplies for each device
emulator.
§
Dedicated port for smart-card reader or
biometric device. Port is strongly filtered
and monitored.
§
Firmware resides on ROM.
§
Display EDID is emulated and highly-isolated to prevent signalling leakages.
§
Battery powered anti-tampering system to
disable product in case of mechanical intrusion.
§
Special holographic Temper Evident Labels.
|
|
Power
|
§
DC input 12V / 1A maximum
§
Wall-mounted power supply included. Power
input 90-240V AC
|
|
Peripheral security
|
§
USB ports supporting only keyboard and mouse
through host emulation
§
Data-diode assures USB unidirectional flow
from devices to host
§
Firmware change can not cause leakage between
channels or data export
|
|
Environmental
|
§
Temperature range: Operating - 0ºC to 40ºC
(32ºF to 104ºF); Storage - -20ºC to
60ºC (-4ºF to 140ºF)
§
Humidity: Operating - 20 to 80% non condensing;
Storage – 10 to 90% non condensing
§
Altitude: 0 to 10,000 ft
|
|
Regulatory Compliance
|
§
Safety: UL/cUL60950,EN60 950
§
EMI/EMC: FCC Class B, CE Mark, EN55022B,
VCCI
|
|
Security Accreditations
|
§
Common Criteria
EAL 4+
(currently
in evaluation)
§
Designed for Common Criteria EAL-5
§
Complies with
latest
NIAP Peripheral
Sharing Switch (PSS) For Human Interface
Devices Ver 2.1
|
|
Physical Characteristics
|
§
Dimensions: 135(W) x 320 (D) x 50 (H) mm
/ 5.3 (W) x 12.6 (D) x 2.0 (H) inch
§
Device weight: 1.5 Kg. (3.3 lbs.)
§
Shipping Weight: 1.8 Kg (4 lbs) without
cables
|
|
Warranty, Reliability
|
§
2 years limited warranty. This limited warranty
covers 100% of parts and workmanship on
any required repairs. For details see HSL
web-site:
www.highseclabs.com/Warranty.html
§
Optional extended warranty for up to 5 additional
years
§
Product design life-cycle 10 years per MIL-HDBK-217E.
|
|
How to Order
KVM Models
|
Description
|
Part Number
|
|
K224E - 4 Ports Dual display High Security KVM Matrix, USB PS/2 keyboard and mouse, DVI dual -link video x 2,
Audio out, USB user authentication port, Active anti-tampering, Front panel push-buttons
|
CPN05461 [Europe]
CPN05456 [UK]
CPN05461 [US, Canada]
|
Cables
|
Description
|
Part Number
|
|
KVM Cable short (1.8 m), DVI-D to
DVI-D Single-Link, USB, Black
|
CPN05485
|
|
KVM Cable short (1.8 m), DVI-D to
DVI-D Dual-Link, USB, Black
|
CPN05486
|
|
KVM Cable short (1.8 m), Audio out,
CAC, Black
|
CPN05490
|
|
KVM Smart-Cable VGA PC to DVI KVM
converter cable with USB type A
to USB type B, 6ft (1.8 m), black
|
CPN06011
|
Accessories and
spare parts
|
Description
|
Part Number
|
|
RDC440 Remote Desktop Controller 2-16 ports
|
CPN06125
|
|
SCM Smart-card reader, USB, SCR-3311
|
CPN05498
|
|
Spare Power supply, wall-mounted,
K200, K300, 12V, 1.5A, US
|
CPN05501
|
Services
|
Description
|
Part Number
|
|
K2xx 1 Year Standard warranty and
support extension (3rd to 7th year)
per S/N
|
CSV05973
|
|
K2xx 1 Year Premium warranty and
24/7 support per S/N
|
CSV05974
|
|
|
|
|
|