ESP Electronic Security Perimeter Appliance

ESP Electronic Security Perimeter Appliance Provides NERC CIP security perimeter Industrial temperature rated -20 to +70 C 1 Asynchronous RS232 9-pin DTE port 2 Expansion serial USB ports 3 – 10/100/1000Mbps Ethernet ports Remote syslog activity logging Radius server authentication User name and password authentication SSH to serial SSH to Telnet Transparent ethernet firewall Easy to setup and maintain Web https configuration Statistics logging and diagnostic tools Compact size, Stand-alone, DIN rail clip option AC and DC power supply options	ESP
Features Description Specifications How To Order General Security Modes Transparent Firewall Capabilities Connection Modes Indicators Physical/Electrical Downloadable .pdf data sheet Application Notes and Manual	Common Applications Secure Legacy operator interfaces in critical locations Lock down modem connection lines Provide centralized RADIUS authentication for older equipment Convert Telnet interfaces to SSH Provide an audit trail for all equipment access Provide a SSH interface for serial device ports Create a transparent ethernet firewall The ESP security appliance is ideally suited for Critical Infrastructure Protection regulations propagated by NERC and some FIPS standards.

DESCRIPTION

The ESP is an industrial rated electronic security perimeter add-in device used as a front end for legacy devices requiring modern security features. The ESP is used to protect against electronic security intrusions, meet NERC-CIP requirements, and to meet new corporate security standards, etc.

The ESP is the solution when...

• Centralized user authentication is required.
• System activity must be documented
• User access must be added, changed and revoked quickly
• Legacy devices require modern security features.

The ESP has one built in 9-pin serial DTE serial port and 2 USB ports for connection of up to 3 serial devices that require modern security features.

The ESP has three 10/100/1000 MDI/MDIX Ethernet ports, one for network connection, 2 to connect to the Ethernet ports of devices requiring restricted access, Radius authentication or remote syslog.

The ESP provides several high security modes:

• Radius for serial connections
• Add password challenge when none is currently available on a legacy device
• Syslog reporting plus a limited amount of syslog data stored locally
• Ethernet to Ethernet radius and/or syslog
• Transparent firewall

The ESP logs all access attempts, access statistics, and management functions.

The ESP is configured using the serial port to set the initial IP address, and an HTTPS web interface for more detailed configuration. An administrator must be authenticated to perform any remote management.

It may be used to meet NERC Cyber Security Standards CIP-005-2 and CIP-005-1 to establish and secure the electronic security perimeter (CPS) around critical cyber assets.

SPECIFICATIONS

General

• Up to three asynchronous serial ports:
  • One DE-9P DTE (PC-9 pin) connector
  • Two USB based serial DTE or DCE ports
  • Speeds to 115.2 Kbps
• Three 10/100/1000 Ethernet ports. (Unused ports may be disabled)
  • The upstream network is typically connected to“ETH3
  • Protected devices are typically connected to “ETH1” and “ETH2”

Security Modes

• Password policy enforcement
• Syslog support
• Radius support
• Transparent Firewall
• SSH to Telnet conversion

Transparent Firewall Capabilities

• Limit access through device
• Logging of events
• ARP rules
• IPv4 Rules
• Low level ethernet rules
• Optional logging of firewall events

Connection Modes

• Serial to Serial “lump-in-the-cable”
• Ethernet to Ethernet “lump-in-the-cable”
• User authentication challenge via Radius
• Local user authentication
• HTTPS Web management
• SSH to serial
• SSH to telnet

Indicators

• Power
• Status
• Serial port activity
• LAN connection, LAN activity (per port)
  

Physical/Electrical

• Dual core Gigabit X86 processor
• Near wirespeed (gigabit) Ethernet
• Standalone or DIN mounting
• Power requirements: 12 VDC, 12 watts
• Supplied with 100-240 VAC external power supply
• 48 and 125 VDC options are available
• 168mm x 157mm x 30mm or 6.61" x 6.18" x 1.18"
• One pound

Environmental

• Operating Temperature: 0 to +50 C
• Humidity: Non-condensing
• Power Supply Options may affect temperature specifications

APPLICATIONS

How it works

For a serial protection application, the ESP is installed between the equipment to be protected and the incoming serial line. It provides authentication and serial "firewalling" to protect the RS-232 serial interface.

In both of those typical installations, the ESP uses a remote RADIUS server for centralized authentication or an optional local authentication database. In all installations, the ESP can be configured for remote syslog logging of an audit trail.

The ESP can also be configured to allow SSH access to the legacy equipment's serial interface. In many cases, this option will allow the removal of vulnerable telephone modem lines since more secure ethernet is often being installed in CIPS locations.

Download a copy of the manual.

Data Comm for Business Inc. 2949 County Road 1000 E Dewey, Il 61840	Voice: 217-897-6600 Toll Free: 800-4-DCB-NET Toll Free: 800-432-2638	Email: Contact Page Web: www.dcbnet.com Fax: 217-897-8023
All DCB web pages copyright ©1995- Data Comm for Business, All rights reserved. EtherPath®, EtherSeries®, EtherPoll®, EtherBridge® and EtherModem® are Registered Trademarks of Data Comm for Business, Inc.