Download Product Brochure
|
|
|
What is KVM Combiner?
|
|
There are many cases where one computer user needs
to work simultaneously with few computers. The
Secure KVM Combiner designed to provide users
with native windowing environment across
isolated networks. Connected computers may
operate at different isolated networks having
different security levels without exposing the
organization to the risks of information leakage
through the KVM. HSL K40x device uses advanced
video processing technology to draw a high
resolution dynamic “mosaic” of images generated
by different computer sources. Built-in video
sources isolation forces unidirectional flow of
data through the USB and DVI ports. The product
was designed and certified National Security
agencies. It is the only product
available in the market today that truly
resolves (in hardware) the challenge of users
working simultaneously in multiple networks
having different security levels.
More
information>


|
|
|
Why K40x?
|
|
KVMs becoming a target for cyber attacks as they may be the only possible link to bridge between isolated classified networks and networks
open to the internet.
Many high security organizations adopting secure KVMs as part of their cyber protection strategy, in some cases this effort is not enough.
Second-Generation Secure KVMs sold in the market today have documented vulnerabilities that may cause data leakages between
connected computers with different security levels.
HSL’s Secure KVM is the industry’s first 3rd Generation Secure KVM. This product offers the highest possible separation between
4 connected computers. The K40x Secure KVM designed to meet the requirements of organizations that are
challenged by the need to provide secret or top-secret network access together with unclassified or internet access.
The K40x series KVM uses unidirectional optical data-diodes to prevent any potential leakage between the highly-isolated
peripheral channels. This KVM can also be used to securely filter and lock USB ports preventing data export / import through mass-storage devices by hardware.
RDC (Remote Desktop
Controller) port enables simple interface with
HSL's RDC440 controller. Using the K40x with
RDC440 users can control and monitor the Secure
KVM remotely and enjoying color LCD with
programmeable network/computer names. For more
information see
RDC440
page.
HSL K40x is an essential tool for heavy users challenged by frequent switching between isolated networks. The
integration of up to 2 / 4 isolated sources into one combined display improves the usability
and situational awareness.
This product resolves in a highly secured way challenges that other resolve through virtualization at great security risks. The K40xE provides
a dedicated peripheral port to securely support bi-directional
devices such as smart-card reader or touch screen.
Product passed extensive security evaluation through all forms of known KVM attacks. Unlike other secure KVMs in the market today HSL KVMs were designed to securely
operate with the assumption that two of the connected computers are infected by a hostile code that is constantly trying to attack the KVM.
|
|
Overview |
Models |
Specs |
Photos |
Download |
Order |
|
|
|
|
-
Works simultaneously with 2 / 4 isolated networks
User can work in a single display while accessing 2 / 4 isolated networks having different security levels through windows.
The only secure solution available today for seamless operation in isolated networks.
-
Highest security
by design
Designed by an
agency to support isolation between
national security networks. Common
Criteria EAL 4+ approved (pending).
Derivative of a TEMPEST product used
in NATO nuclear submarines.
-
Hardware Based
peripheral protection/isolation
Absolutely
no dependency on firmware or software.
All firmware is in ROM (Read Only Memory).
No keyboard buffering or memory. More
than 60dB isolation between channels.
|
-
Unidirectional
optical data diodes
used to secure
USB peripherals isolation. Data can
flow from devices to host only. No reverse
data flow possible by physics. Can be
used between widest security gaps.
-
User authentication
device port
Special USB port
that supports CAC and other user authentication
devices including wide range of biometric
readers. User can decouple this port
from KVM switching to remain authenticated
on one channel if needed.
-
Real-time and real quality video
No quality loss, latency, reduced colors.
By far the fastest digital video processing technology available in any KVM today.
-
Peripherals security
full USB
devices filtering to assure support
for keyboard and mouse only.
|
-
Future-proof -
supports widest variety of peripherals
and computers
Supports latest
keyboards, mice and card readers. Support
computers with all Operating Systems.
-
Active anti-tampering
always-on
active anti-tampering with 10 years
battery. Special holographic tampering
evident labels.
-
Remote Desktop
Controller
special port to
enable remote controller accessory -
RDC440 (more
information>). Secure
KVM can be installed at distant location
and connected through a cable.
-
KVM Extenders Support HSL Secure KVM Switch supports most copper and fiber KVM extenders connected
to the console port.
|
|
|
K404E 4-Ports Secure KVM Combiner
front view
|
|
|
K404E 4-Ports Secure KVM Combiner rear view
|
|
|
K404E typical installation diagram
|
|
|
KVM Combiner Administrator mode. This mode can be accessed by system administrator through the key-lock at the device front panel.
|
|
|
KVM Combiner display in tile mode. All 4 windows are visible.
|
|
|
KVM Combiner mouse functions
|
|
|
KVM Combiner typical user display
|
|
|
KVM Combiner in cascade (left side) and in tile modes (right side)
|
|
|
4 ports KVM Combiner user display
|
|
|
2 ports KVM Combiner simplified block diagram
|
|
High Security Labs – KVM Products Selection Chart
|
Model
|
Primary Use
|
Computer Ports
|
Peripheral Support
|
DPP (CAC)
|
RDC Port
|
Audio
|
Video
|
Max Display Resolution
|
|
K202B
|
Small-Form-Factor conventional switching
KVM USB peripheral support with DVI-I video
|
2
|
USB
|
No
|
No
|
Yes
|
VGA, DVI-I single-link,
HDMI supprted
|
1920x1200 DVI single-link, 2048x1536 VGA
|
|
K202D
|
Small-Form-Factor conventional switching
KVM USB peripheral support with DVI-D video
|
2
|
USB
|
No
|
No
|
Yes
|
DVI-D single-link,
HDMI supprted
|
1920x1200 DVI single-link, 2048x1536 VGA
|
|
K202E K204/E
|
Conventional switching
KVM USB + Legacy peripheral
support with DVI video
|
2 / 4
|
USB and PS/2
|
Yes (E only)
|
Yes
|
Yes
|
VGA, DVI single and dual-link,
HDMI supprted
|
2560x1600 DVI dual- link, 1920x1200
DVI single-link, 2048x1536 VGA
|
|
K208E
|
Conventional switching
KVM USB + Legacy peripheral
support with DVI-I video
|
8
|
USB and PS/2
|
Yes
|
Yes
|
Yes
|
VGA, DVI single and dual-link,
HDMI supprted
|
2560x1600 DVI dual- link, 1920x1200
DVI single-link, 2048x1536 VGA
|
|
K224E
|
Dual display Matrix KVM
USB + Legacy peripheral support
with DVI video
|
4
|
USB and PS/2
|
Yes
|
No
|
Yes
|
2 x DVI single and dual-link
display
|
2560x1600 DVI dual-link, 1920x1200
DVI single link
|
|
K244/E
|
Dual-head conventional
switching KVM
USB + Legacy peripheral support
with DVI video
|
4
|
USB and PS/2
|
Yes (E only)
|
Yes
|
Yes
|
2 x VGA, DVI single and dua-link,
HDMI supprted
|
2560x1600 DVI dual link, 1920x1200
DVI single link, 2048x1536 VGA
|
|
K248E
|
Dual-head conventional
switching KVM
USB + Legacy peripheral support
with dual-link DVI-I video
|
8
|
USB and PS/2
|
Yes
|
Yes
|
Yes
|
2 x VGA, DVI single and dual-link,
HDMI supprted
|
2560x1600 DVI dual-link, 1920x1200
DVI single-link, 2048x1536 VGA
|
|
K2016E
|
Conventional
switching KVM
USB + Legacy peripheral support
with dual-link DVI-I video
|
16
|
USB and PS/2
|
Yes
|
Yes
|
Yes
|
VGA, DVI single and dual-link,
HDMI supprted
|
2560x1600 DVI dual link, 1920x1200
DVI single-link, 2048x1536 VGA
|
|
K30x
|
Trader / NOC Secure
KM with cursor tracking.
Supports dual and quad head
|
4
|
USB and PS/2
|
Yes
|
Yes
|
Yes
|
No video support (displays are
connected directly to the PCs)
|
N/A
|
|
K40x
|
Combiner KVM
for operations and intelligence,
simultaneous windowing
|
2 / 4
|
USB and PS/2
|
No
|
Yes
|
Yes
|
DVI single-link,
HDMI supprted
|
1024x768 (4:3), 1280 x
1024 (4:3) [Future] 1680x1050
(16:10), 1920x1080 (16:9), 1920
x 1200 (16:10), Dual-link displays
support [Future]
|
|
K40xE
|
Combiner KVM
for operations and intelligence,
simultaneous windowing
|
2 / 4
|
USB and PS/2
|
Yes
|
Yes
|
Yes
|
DVI single-link,
HDMI supprted
|
1024x768 (4:3), 1280 x
1024 (4:3) [Future], 1680x1050
(16:10), 1920x1080 (16:9), 1920
x 1200 (16:10), Dual-link displays
support [Future]
|
|
K600
|
Modular combiner
KVM for operations and intelligence,
simultaneous windows GUI.
Integrated thin-clients
|
4
|
USB and PS/2
|
Yes
|
Yes
|
Yes
|
DVI single link,
HDMI supprted
|
1024x768 (4:3), 1280 x
1024 (4:3) [Future], 1680x1050
(16:10), 1920x1080 (16:9), 1920
x 1200 (16:10), Dual-link displays
support [Future]
|
Notes:
1.
HSL KVM products supporting audio
are only supporting Audio out switching
due to security.
2.
K224/E Secure KVM Matrix is End Of Life product.
3.
Specifications are subject to
change without prior notice.
4.
All HSL Secure KVM products except
for K600 are currently undergoing Common
Criteria evaluation to EAL 4+.
|
|
K402/E K404/E Product Specification |
|
Host Computer Input Ports
|
§
2
/
4 x isolated input ports to connect computers, thin-clients, docking stations each having:
- 2 / 4 x DVI-D Female connectors for video
- 2
/
4 x USB Type-B connectors for keyboard and
mouse
- 2
/
4 x USB Type-B connectors for user authentication
device
§
DVI-D supports DVI or HDMI sources only. VGA can be supported using VGA to DVI Smart-Cable accessory (sold separately)
§
Galvanic ports isolation through optical data diodes and isolated power supplies
§
Plug and Play EDID support - four channels identified as standard displays
|
|
Console Ports |
§
One set of ports for user console devices, having:
- USB Type-A jack for keyboard
- USB Type-A jack for mouse
- USB Type-A jack for user authentication
device [K40xE only]
-
PS/2 legacy keyboard connector (DIN-5)
-
PS/2 legacy mouse connector (DIN-5)
-
DVI-D display jack for user display
-
3.5 mm stereo jack for amplified speakers or headset
§
Galvanic ports isolation through optical data diodes and isolated power supplies
§
Remote Desktop Controller (RDC) port
|
|
User Functions
|
§
Windows can be moved and resized
§
Toggling between normal mode and system modes by mouse side buttons click (five-buttons mouse)
§
Cascading button arranges all four windows one on top of the other
§
Tile button arranges all four windows in a mosaic
§
Help button presents basic usage guidance
§
Vertical and horizontal scroll bars
§
Minimize window to task-bar
§
Colored Task-bar and window border indicating channel
§
Mouse wheel cyclic toggling between active windows in system mode
§
Double click to maximize window to full screen
§
Legacy mode – toggling between windows by keyboard Control + Func. keys [Optional]
§
Three user defined preset buttons to save or load user settings
§
Disable channel function
|
|
Administrator settings |
§
Administrator mode is accessed through a key-lock in front panel
§
Four selectable system cursor pointers
§
Six selectable window border widths
§
Sixteen selectable window border colors
§
Two selectable task-bar sizes
§
Six selectable video output resolutions
§
Customer defined background bitmap [Optional]
|
|
Output video modes supported
|
§
1024 x 768 (4:3)
§
1280 x 1024 (4:3)
§
1680 x 1050 (16:10)
§
1920 x 1080 (16:9)
§
1920 x 1200 (16:10)
§
Dual-link displays support [Future]
|
|
Security Functions
|
§
USB ports supporting only keyboard and mouse through host emulation and strong filtering.
§
Optical Data Diode assures unidirectional
flow from devices to computers.
§
Firmware change can not cause leakage between
channels or data export.
§
Isolated power supplies for each device
emulator.
§
Dedicated port for smart-card reader or
biometric device. Port is strongly filtered
and monitored.
§
Firmware resides on ROM.
§
Battery powered anti-tampering system to
disable product in case of mechanical intrusion.
§
Special holographic Temper Evident Labels.
|
|
Power
|
§
DC input 12V /
2.5A maximum
§
Brick power supply included. Power input 90-240V AC
|
|
Peripheral security
|
§
USB ports supporting only keyboard and mouse
through host emulation
§
Data-diode assures USB unidirectional flow
from devices to host
§
Firmware change can not cause leakage between
channels or data export
|
|
Environmental
|
§
Temperature range: Operating - 0ºC to 40ºC
(32ºF to 104ºF); Storage - -20ºC to
60ºC (-4ºF to 140ºF)
§
Humidity: Operating - 20 to 80% non condensing;
Storage – 10 to 90% non condensing
§
Altitude: 0 to 10,000 ft
|
|
Regulatory Compliance
|
§
Safety: UL/cUL60950,EN60 950
§
EMI/EMC: FCC Class B, CE Mark, EN55022B,
VCCI
|
|
Security Accreditations
|
§
Common Criteria
EAL 4+
(currently
in evaluation)
§
Designed for Common Criteria EAL-5
§
Complies with
latest
NIAP Peripheral
Sharing Switch (PSS) For Human Interface
Devices Ver 2.1
|
|
Physical Characteristics
|
§
Dimensions: 130(D) x 320 (W) x 50 (H) mm
/ 5.3 (D) x 12.6 (W) x 2.0 (H) inch
§
Device weight: 1.2 Kg. (2.6 lbs.)
§
Shipping Weight: 1.8 Kg (4 lbs) without
cables
|
|
Warranty, Reliability
|
§
2 years limited warranty. This limited warranty
covers 100% of parts and workmanship on
any required repairs. For details see HSL
web-site:
www.highseclabs.com/Warranty.html
§
Optional extended warranty for up to 5 additional
years
§
Product design life-cycle 10 years per MIL-HDBK-217E.
|
|
How to Order
KVM Models
|
Description
|
Part Number
|
|
K402 - 2 Ports High Security KVM Combiner, USB PS/2 keyboard and mouse,
DVI-D video, Active anti-tampering, Laser mouse included
|
CPN05462 [Europe]
CPN05466 [UK]
CPN05470 [US, Canada]
|
|
K402E - 2 Ports High Security KVM Combiner, USB PS/2 keyboard and mouse, DVI-D video, Audio out, USB user authentication port,
Active anti-tampering, Remote Desktop Controller port, Laser mouse included
|
CPN05463 [Europe]
CPN05467 [UK]
CPN05471 [US, Canada]
|
|
K404 - 4 Ports High Security KVM Combiner, USB PS/2 keyboard and mouse,
DVI-D video, Active anti-tampering, Laser mouse included
|
CPN05464 [Europe]
CPN05468 [UK]
CPN05472 [US, Canada]
|
|
K404E - 4 Ports High Security KVM Combiner, USB PS/2 keyboard and mouse, DVI-D video, Audio out, USB user authentication port,
Active anti-tampering, Remote Desktop Controller port, Laser mouse included
|
CPN05465 [Europe]
CPN05469 [UK]
CPN05473 [US, Canada]
|
Cables
|
Description
|
Part Number
|
|
KVM Cable short (1.8 m), DVI-D to
DVI-D Single-Link, USB, Black
|
CPN05485
|
|
KVM Cable short (1.8 m), DVI-D to
DVI-D Dual-Link, USB, Black
|
CPN05486
|
|
KVM Cable short (1.8 m), Audio out,
CAC, Black
|
CPN05490
|
|
KVM Smart-Cable VGA PC to DVI KVM
converter cable with USB type A
to USB type B, 6ft (1.8 m), black
|
CPN06011
|
Accessories and
spare parts
|
Description
|
Part Number
|
|
RDC440 Remote Desktop Controller 2-16 ports
|
CPN06125
|
|
SCM Smart-card reader, USB, SCR-3311
|
CPN05498
|
|
Power supply, Brick, 12V, 5A, Universal
|
CPN05504
|
Services
|
Description
|
Part Number
|
|
K4xx 1 Year Standard warranty and
support extension (3rd to 7th year)
per S/N
|
CSV05977
|
|
K4xx 1 Year Premium warranty and
24/7 support per S/N
|
HSV06019
|
|
|
|
|
|