Encrypted Ethernet Tunnel Software Client used with FT-6606/6632

FT Family Encrypted Ethernet Tunnel Software Client Creates encrypted tunnels using TCP/IP or UDP/IP Tunnels all Ethernet protocols, including multi-cast AES 256 bit encryption Supported on most modern versions of X86 (Not ARM) MS Windows including Windows 10 and Windows emulation on Apple computers. UTSoft is not compatible with Windows 11 orServer 2019 and 2022. Apears on the PC as an MS Windows Ethernet Adapter The PC looks like a node on the server network Ideal for voice and video transport The PC network connection can be wired or wireless Easy to setup and maintain A PC may have multiple client instances running simultaneously Protocol is NAT friendly Connects only with host end FT hardware products	FT-Soft CDROM
Features Description Specifications How To Order General Performance Installation Protocol Features Application Notes and Manual	Common Applications Tunneling multicast voice and video through public and/or private networks using efficient UDP/IP or TCP/IP VLAN – Ideal for tunneling ad-hoc VLAN workstations through an external IP network Serving remote laptop users over tunneled networks to ease network administration, provide remote file and device access Utilities – Gas and oil production, pipelines, electric generation, transmission and distribution Retail – Stores, kiosks, credit card machines --- especially those using wireless links Law Enforcement – Individual remote workstations Medical – AES encryption of the FT meets HIPAA requirement for securing data over open networks such as the Internet. Ideal for emergency and portable medical operations. Field sales personnel working out of the home, hotel rooms wired for high speed Internet access or cellular broadband. Financial industry – Additional security for key personnel remote secure access. Secure remote network monitoring via the Internet

DESCRIPTION

with a FT-6606/6632 encryption server. It allows a PC to participate in the encrypted network without additional hardware at the client location. The PC Client Software for the FT- 6606/6632 tunnels creates an Ethernet layer 2 encrypted tunnel through any IP network. The PC Client software appears on the PC as a MS Windows Ethernet Adapter on Windows versions. The PC links to a host server FT-6606/6632. The software function is similar to traditional VPN software.

The FT PC Client software creates a layer 2 tunnel, which sets it apart from other VPN software. The layer 2 tunnel feature allows all protocols to pass between the PC and the network on the server side. The protocols include multi-cast, which is often used for VOIP voice and video applications.

The FT-6606can host up to 25 client devices. The FT-6632 can host up to 50 client devices.

The FT series uses AES encryption and embedded FIPS 140-2 validated cryptographic module (Certificate #1051) per FIPS 140-2 Implementation Guidance section G.5 guidelines

The FT series operates through firewalls requiring only one UDP and.or TCP port, which can be any port. All Ethernet protocols are bridged, including multi-cast, Ipv6, IPX, IP, NetBEUI, etc. The FT series is straight-forward, easy to configure and maintain. The FT series has state-of-the-art AES encryption security without the configuration complexity of VPN.

The server typically has a fixed IP address. Clients may have fixed IP addresses or use DHCP to obtain their address. Dynamic DNS is supported in the FT-6606/6632.

If you need to attach an entire subnet at a location to the encrypted network, see our FT-6606 hardware product line.

Due to the encryption employed in these products,FT series products are export controlled items and are regulated by the Bureau of Industry and Security (BIS) of the U.S. Department of Commerce. They may not e exported without BIS approval.

SPECIFICATIONS

General

• Works only in conjuctions with FT-series hardware servers at the host end.
• Each Client software instance has a unique Ethernet MAC address and license key
• Supported on most modern versions of X86 (Not ARM) MS Windows including Windows 10 and Windows emulation on Apple computers. UTSoft is not compatible with Windows 11, Windows Server 2019 and 2022.
• Servers are the FT-6606 with up to 25 clients, or the FT-6632 with up to 50 clients
• Software is distributed on a CD ROM
• PCs can run multiple instances of the Client to connect to different servers simultaneously. Each instance has a unique Ethernet MAC identifier
• The FT-6606/6632 servers that the client connects to support dynamic DNS. Dynamic DNS is not needed at the client.
• FT-Soft uses an embedded FIPS 140-2 validated cryptographic module (Certificate #1051) per FIPS 140-2 Implementation Guidance section G.5 guidelines

Protocol Features

• The transport protocol can be either TCP/IP or UDP between FT devices. UDP is preferred for voice and video transmission.
• AES 256 bit encryption · Tunnels all Ethernet protocols, including multi-cast packets
• Protocol is NAT friendly

Performance

• Performance is limited by the host computer performance, FT server hardware, and connectiont bandwidth to server.

Installation

The FT-SOFT software is suppliled on a CDROM. Each user client instance is configured using a unique software key supplied with the CDROM. The software is installed on a PC using a Windows installer program. When installing the software, the user/administrator enters the software key as part of the installation process. A PC may have more than one instance of the PC Client software operating at the same time. There must be one license purchased for each instance of the software running on a PC.

APPLICATIONS

How it works

Download a copy of the manual.

Just The Facts, Please.

Read the encryptor FAQ for quick answers to questions others have asked. Just click here.

---

Quick-start guide to the XT family products.

This application note guides the new XT user from opening the boxes to having a working encrypted tunnel between two XT units on a test bench. Step-by-step instructions make it quick and painless to learn the configuration process. Uses the XT-hEX as an example, but also covers other XT products.

Troubleshooting guide for the above Quick-start.

If it didn't go well and doesn't immediately work, this guide offers some troubleshooting hints. Most people won't need this, but it's here if you do.

What Do Those Tunnel Log Entries Mean?

When analyzing logs from DCB Tunnels (XT, UT, ET, and FT), there are often log entries that are surprising to the new user. We discuss those here.

Configuring the LAN3 on the XT-hEX, a Quick-start guide.

Most people won't need this, but if you want to use the third LAN port on the XT-hEX, this information will help you configure it.

All DCB ethenet encryptors operate similarly, with differences being in the protocols, capabilities, and authentication methods. Since the topology is comparable for all of them, we show application notes for all these products together.

DCB's Encryption Product Export Statement

Some of our encryption products are export controlled items and are regulated by the Bureau of Industry and Security (BIS) of the U.S. Department of Commerce. Some are classified as mass market encryption devices and may not be exported or shipped for re-export to restricted countries in Country Group E:1. They are exportable to most other countries. Read our Encryption Product Export Statement here for more specifics.

Using XT Tunnels with IP Radio Dispatch Systems.

Radio installers rely on DCB tunnel products to implement secure networks for mission critical applications. DCB Encryptors (XT, UT, and ET roducts) enable IP dispatching across multiple networks. They remove the multi-cast problem faced in many IP network installations so are frequently used along with Telex, Motorola, Kenwood, Harris, Zetron, AVTEC, and other two-way radio consoles. This document describes some of those techniques with examples we've seen at PSAPs and other dispatch centers.

Tunnel Product Security In Perspective.

Our encrypted tunnel appliances provides a LAN -to- LAN encrypted tunnel between locations. It employs a layer three (UDP/IP or TCP/IP) connection between two or more tunnel devices to create a secure, AES encrypted tunnel. For export purposes, the Some models are considered a Mass Market Encryption Device by the Department of State Bureau of Industrial Security and are export limited.

This product line meets HIPPA and most government standards for non-classified data transfer. However, it is not NIST FIPS 140-2 approved. For a FIPS 140 approved product, the (more expensive) FT line of encryption appliances is required. This note discusses the security implications of using our encrypted tunnels.

Redundancy Techniques Using DCB Tunnel Devices and Software.

Users have come to rely on DCB tunnel products to implement secure networks for mission critical applications in which downtime must be kept to a minimum. Thus it is not unusual for customers to ask questions about techniques that may be applied to make the tunnel network more robust. This document describes some of those techniques with examples.

Quick-start guide to the XT-3306.

This application note guides the new XT-3306 user from opening the boxes to having a working encrypted tunnel between two XT-3306 units on a test bench. Step-by-step instructions make it quick and painless to learn the configuration process. One difference between the XT and the UT/ET families is that the XT allows the selection of TCP and UDP protocols for the tunnel path.

Troubleshooting guide for the above Quick-start.

If it didn't go well and doesn't immediately work, this guide offers some troubleshooting hints. Most people won't need this, but it's here if you do.

Quick-start guide to the UT-3302.

This application note guides the new UT-3302 user from opening the boxes to having a working encrypted tunnel between two UT-3302 units on a test bench. Step-by-step instructions make it quick and painless to learn the configuration process.

Troubleshooting guide for the above UT-3302 Quick-start.

If it didn't go well and doesn't immediately work, this guide offers some troubleshooting hints. Most people won't need this, but it's here if you do.

Encrypted Bridge Installation Option

An application note describing an appliance-like installation that allows the Tunnel to be located anywhere on the local LAN. Known around DCB as the "Single-Port Installation".

Using the UT Encrypted Bridges and UT-SOFT with IP Multicast.

Discusses applying the UT products to transport VOIP multicast via non-multicast wide area networks. Examples showing IP voice dispatch radios for public service agencies. The UT supports multi-cast IP over normal uni-cast networks and allows a private multi-cast network to span multiple IP networks. The UT-SOFT software client allows any PC to be a securely connected node on a remote network

Motorola MIP 5000 VoIP Radio Console VPN Solution Guide

This Motorola produced MIP 5000 VoIP Radio Console VPN Solution Guide features a virtual private network (VPN) solution that has been tested with MIP 5000 VoIP Radio Console. The VPN solution uses a pair of encrypted Ethernet bridges to provide a secure Ethernet tunnel between the dispatch center and a remote MIP 5000 console. The secure Ethernet tunnel supports a remote console operator receiving audio from and transmitting audio to radio channels and other MIP 5000 consoles using AES encryption.

UT Tunnel Installation Note - "Living On a Wild Feed... Safely"

This short application note summarizes the options and requirements for directly connecting the untrusted interface of UT encrypted tunnels to the Internet. Yes, the UT tunnels may be safely living on the wild side of your firewalls and if properly configured appear to be a "black hole" to your adversaries!

Using the UT for Remote Management Applications Since the UT along with UT-Soft enables a remote workstation to have a virtual presence on a remote LAN segment, it's quite useful for network monitoring and analysis, similar to a RMON without the headaches. Download an application note that discusses using UT-Soft and our UT servers for remote LAN network montoring.

ET Encrypted Bridge Quick-Start Installation Guide

A cookbook style quick start guide to installing the ET Encrypted Bridges. Illustrates common usage examples with fill-in-the-blank instructions.

ET-3302/6600 Encrypted Bridge Applications

Some ways the ET products are being used to tunnel IP traffic in the real world.

Using the ET-6601 Encrypted Bridge with EVDO & Wifi

Discusses using the ET-6601 with high speed cellular modems and 802.11 Wifi wide area connections.

ET Encrypted Bridge Installation Option

An application note describing an appliance-like installation that allows the ET to be located anywhere on the local LAN. Known around DCB as the "Single-Port Installation".

Using the ET Encrypted Bridges with 801.Q VLANs

Discusses configuring the ET products to handle 801.Q VLAN traffic. The ET supports 801.Q VLAN tagged packets, and allows a VLAN to span multiple IP networks.

Using the ET Encrypted Bridges with IP Multicast.

Discusses applying the ET products to transport VOIP multicast via non-multicast wide area networks. Examples showing IP voice dispatch radios for public service agencies. The ET supports multi-cast IP over normal uni-cast networks and allows a private multi-cast network to span multiple IP networks.

Automating Dial-Up Router and Bridge PPP Connections

An application note that details one common method of automating the use of IP-6600 routers and ET-6600 bridges to dial multiple remote locations on a scheduled or automated basis.

Data Comm for Business Inc. 2949 County Road 1000 E Dewey, Il 61840	Voice: 217-897-6600 Toll Free: 800-4-DCB-NET Toll Free: 800-432-2638	Email: Contact Page Web: www.dcbnet.com Fax: 217-897-8023
All DCB web pages copyright ©1995- Data Comm for Business, All rights reserved. EtherPath®, EtherSeries®, EtherPoll®, EtherBridge® and EtherModem® are Registered Trademarks of Data Comm for Business, Inc.