secure
//
Government Grade Network Security
// CATAPAN Government Grade Network Security
L-3 TRL has over a decade of experience in developing and supporting
sophisticated IP encryption devices for Government Grade Network Security,
helping to defend against the cyber threat. With award winning products, L-3 TRL’s
CATAPAN
®developments remain at the forefront of many sensitive
and highly classified government networks.
We have enjoyed long-standing relationships with UK Government
agencies and commercial service providers through supporting
their wide ranging network architectures, providing real-time
effective assistance in the safety critical area of Cyber Defence.
The world we live in
Since the World War I era, when poor radio
communication procedures resulted in severe national security compromises, the British Government set up a special organisation to study the methods of cipher communications and to advise on the security of codes and ciphers. Today this organisation, known as CESG, provides advice and services to protect the UK Government’s voice and data networks.
As the National Technical Authority, CESG also provides a service to help private organisations
develop cryptographic products for use by government agencies, known as CAPS (CESG Assisted Products Service).
All cryptographic products in line with UK Government
standards must go through a certification process and
each product is graded accordingly.
All L-3 TRL CATAPAN Government Grade Network Security products have been CAPS approved to the highest assurance standard of up to, and including TOP SECRET.
In today’s world where technology is developing at an ever increasing rate, the use of public networks to communicate has become essential to modern day life. The accessibility of these networks has created an
infrastructure where sensitive and highly confidential
information can be sent and received from anywhere in the world, providing a vital method of communication to and from some of the most remote and isolated areas.
Businesses, Critical National Infrastructures (CNIs) such as banks and electric/gas companies, and even governments rely upon these networks to function, yet the combination of attacks on the network, gateway and host means they are increasingly reliant on an untrusted, unprotected and unsecured network. The threat to communications being intercepted and network systems becoming compromised is constantly evolving and increasing.
The growing need to share information coupled with the internet’s standards-based web interface and the increasing number of applications has resulted in the requirement to use public networks.
The threat to the confidentiality, integrity and
availability of critical and sensitive information
has significantly increased with cyber warfare
often being the hackers’ and terrorists’ choice of attack.
The ability to eliminate the risks associated with the use of public networks must be assured in
today’s threat environment. The requirement to
communicate and share information, confident
in the knowledge that the enterprise is securely protected end-to-end, is paramount.
When developing a security strategy, an organisation will need to consider and protect against not only current attacks and threats but the evolving unknown.
At L-3 TRL, we have developed a comprehensive range of products, services and packages to provide our customers with the complete secure network solution up to and including TOP SECRET.
Legacy Systems
The threats we face
The increase in use of public networks
The importance of interoperability
The tools and standards we use to communicate are constantly evolving with the advances in technology. As this happens, the areas harnessing this technology must also change to ensure the continued growth of public networks.
Legacy systems with serial based communications often have poor change management, poor access control and are technically complex, requiring extensive use of internal resources. IP bearer systems offer alternatives to legacy systems enabling organisations to maintain pace with technological advances, better availability of services, faster throughput and a lower total cost of ownership.
The next generation IP security (IPsec) framework allows both scalability and interoperability; this framework standard requires a shared security policy and authenticated keys for services. PRIME Internet Key Exchange (IKE) is the new protocol
used to set up Security Associations (SA) allowing the auto generation of keys, reducing the burden on government resources.
All CATAPAN products are designed to support PRIME IKE, ensuring a smooth transition from the current government standards, enabling easier deployment of products and services into organisations’ mobile and enterprise infrastructures.
Our CATAPAN family of encryption devices are
in-field reprogrammable and fully interoperable; providing flexibility, economy and security to all
The Secure Network Solution
Enabling secure and mobile communications
TRL Technology
Award Winning Encryption
Airtime Services
Gateway Solutions
Our Network Defence consultancy services have been designed to offer information, advice and support for any customer looking for a future proof secure solution designed to prevent and defeat cyber attacks on their network.
This includes assistance with design, installation and architecture of all hardware and services to provide a complete business solution.
The CESG CAPS accredited CATAPAN family of High Grade IP network encryption devices has been developed to satisfy requirements for affordable, reliable and highly effective, secure encryption. Value for money, physical size and interoperability are fundamental attributes to the range.
Featuring the most technologically advanced systems available, the CATAPAN family assures the
end-to-end protection of information across public networks, protecting and securing many sensitive government agencies worldwide.
From our award winning pocket sized Mini-CATAPAN device to our high speed Enterprise-CATAPAN, you
can be assured of the confidentiality, integrity and availability of your mobile and fixed networks.
As part of our growing portfolio of CATAPAN solutions, we can provide a variety of bundled Airtime Services with Mini-CATAPAN and modem hardware offering secure, mobile connectivity using Inmarsat BGAN, Thuraya, Ka-Band, cellular and public Wi-Fi.
From a single unit or a complex network infrastructure across multiple sites, we have a number of dedicated service packages which ensure our customers stay connected with the highest levels of security assured by our CATAPAN products.
Alongside our Network Defence consultancy, we also offer a fully managed Gateway Solution; providing barriers against intrusion whilst protecting IP addresses and locations both remotely and at Headquarters. Our Managed Gateway Services are ideal for anyone needing externally managed solutions for the highest possible level of security.
Extending Our Capability
L-3 TRL work in conjuction with some of the industry’s most innovative companies to offer products and
solutions designed specifically to work alongside our
CATAPAN range.
Our extended capability allows us to offer secure and remote mobile working across the most commonly used forms of public bearers, including IP, cellular and Wi-Fi.
Enabling secure communication over public networks
L-3 TRL understands the need for securing information infrastructures, where fixed and mobile
deployments have disparate requirements whilst still needing to be interoperable. We can provide
the complete reprogrammable, interoperable range of solutions for both tactical environments and
fixed deployments offering secure end-to-end global communications.
Our industry leading CATAPAN family of High Grade Encryption solutions continue to surpass
customer expectations and can satisfy even the most stringent requirements for up to and
including TOP SECRET encryption.
Designed as a high-speed encryption solution, Enterprise-CATAPAN is ideal for secure
data centre connectivity, where bandwidth requirements call for a high performance
solution. For changing operational requirements,
Enterprise-CATAPAN can be easily re-configured in the field, enabling over-the-network software and firmware upgrades for added flexibility.
Enterprise-CATAPAN for high performance
Mini-CATAPAN for complete flexibility
Mini-CATAPAN is a pocket-sized, High Grade IP encryption device which utilises commercial components, eliminating the dependency on
classified ASICs. The small, lightweight design is
ideal for both tactical and strategic environments, offering the highest levels of security and
functionality.
•
Pocket sized, lightweight design for
tactical and strategic deployment
•
100Mbps duplex throughput
• Certified for reverse tunnel mode
•
High bandwidth strategic deployment
•
1Gbps/10Gbps on one platform
•
Gateway/concentrator for Mini-CATAPAN
Award Winning Encryption
Mini-CATAPAN Lite for secure voice and data
•
Flexible, secure voice and data for SoHo
•
Built around embedded crypto module
•
Multiple integrated product solutions
All of our CATAPAN products go through CESG CAPS accreditation and feature the most technologically advanced architecture, so you can be assured of the
confidentiality, integrity and availability of your mobile and fixed networks to the
highest level.
Mini-CATAPAN Lite is a flexible, secure voice and data solution aimed at SoHo (Small office, Home office), embassy and remote/mobile working.
The Mini-CATAPAN Lite has a dedicated RED IP phone port to enable secure voice and data over public networks.
Key features
Key features
Extending the CATAPAN
capability
TRL Technology
Secure remote and mobile solutions
Secure Communication System
Secure Communications Hub
•
Secure mobile solution
•
Integrated 3G modem and antennas
•
Compact, lightweight robust design
•
Docking station supporting multiple users
Secure IP Voice
•
Protects voice and data
•
Designed to operate over any IP network
•
NPM ACCSEC when non-operational
Key partnerships providing turn-key solutions
The 100 is the smallest product of this capability in the market place, allowing users to direct the units to select the best performing, cost-effective or load balance across multiple communication bearers based on operational requirements. The device is designed to allow a single user access to a range of secure networks simultaneously.
•
Small form factor
•
In-built Wi-Fi, 3G, ADSL and
Ethernet
•
Multiple public network
connectivity
L-3 TRL work in conjuction with some of the industry’s most innovative companies to offer products and solutions
designed specifically to work alongside our award winning CATAPAN range.
From ruggedised laptop stations to secure communications systems, these products provide a seamless extension to the capability of the CATAPAN products, enabling secure communications through widely used public networks, to the most stringent of requirements.
L-3 TRL are able to offer the SCS family of highly secure multi-bearer communication hubs for
mobile environments. These provide remote users with the ability to communicate securely at
both classified and unclassified levels via any IP network from anywhere in the world. A key feature
of the systems is the integrated cyber security function which is able to detect suspicious and
malicious activity and unauthorised connections.
The Secure Communications Hub has been developed as a compact, ruggedized and portable communications hub with integrated 3G connectivity; ideal for mobile or remote
environments where there is no fixed line or access available.
Mini-CATAPAN Lite enables users to directly connect
desk-top IP phones, in addition to the secure data capability. This provides secure voice alternatives to the current legacy
link-based voice solutions. An additional benefit is the
option to connect to a wider legacy network for complete interoperability through existing operational voice gateways.
// CATAPAN Government Grade Network Security
SCS 200 for tactical and strategic operations
The 200 extends the capability of the operation by allowing multiple, concurrent red and black network connections
simultaneously delivering communications for either a fixed or field deployed strategic HQ. The device has a
self-healing, self-forming IP meshed network providing continuous, uninterrupted coverage.
•
Concurrent red and black
connectivity
•
Automatic mesh network
•
In-built GPS, allowing location
tracking
The SCS devices have a simple and easy to use icon driven menu control system, supports multiple simultaneous connections via Wi-Fi, 3G, BGAN, Ethernet and ADSL and has a remote administration and monitoring capability.
SCS 100 for remote operations
Key features
Key features
Key features
Key features
Airtime Services
CATAPAN Satellite Services
As part of our growing portfolio of CATAPAN
solutions, we can provide a variety of airtime services
with Mini-CATAPAN
and modem hardware offering secure, mobile connectivity. From a single unit
or a complex network infrastructure across multiple sites, we have a number of ‘out of the box’
dedicated service packages which ensure our customers stay connected with the highest levels of
security.
For secure satellite, cellular data and Wi-Fi
CATAPAN Wi-Fi and
Cellular Data Services
Public Wi-Fi
Cellular Data
CATAPAN Added Value Services
As part of our growing range of CATAPAN solutions, we are also able to offer the following:• Bundled service solutions, offering multiple IP bearers for improved
efficiency and value for money
• End-to-end service management, giving you support and technical guidance whenever it’s needed
• Bespoke and specialist integration
• Secure billing for any customers with specific operational or security
requirements
Ka-Band
for High Speed Connectivity
• Connect securely at super-fast speeds of up to 10Mbps
• Ideal for high-demand government and military operations
• Closed terminal groups, with graded priority
• Offers cost-effective network options for users with multiple transportable node needs
• Unlimited, secure data transfer
Inmarsat BGAN
for Global Coverage
• Utilised widely by government, defence and security services worldwide
• Extensive global coverage
• Lightweight, portable terminals
• Supports speeds of up to 492Kbps
Thuraya
for Remote Regions
• Secure, reliable connectivity even in the remotest regions of the world
• Offering regional coverage in 144 countries
• Lightweight, portable terminals
• Pre-paid global options
• Advice on best practice for secure connection to Wi-Fi
• Secure access through our suite of services whenever you are near a hotspot
• Flexible 3G/4G options available
• Can be adapted for use across a range of diverse environments
• Ideal for organisations with a high number of users
• UK and international SIMs available
• Cost-effective data bundles to match requirements
Gateway Solutions
Secure Gateway Solutions
Many organisations are having to review and fundamentally change the way they communicate and manage their externally facing ‘internet’ network infrastructures, security and mobility needs. Lack of internal resources, complex implementations, interoperability challenges and increased cyber attacks are driving an increasing number of organisations to outsource the hosting of their public gateways.
Our hosted managed solutions are designed to help organisations ensure their enterprise, networks and assets are never compromised, whilst lowering the total cost of ownership and reducing the burden on internal resources.
For both the gateway and remote devices we are able to meet the most stringent security requirements:
• Barriers against intrusion • Obfuscation of encrypted traffic
• Protection of IP addresses and locations • Centralised logging and alert reporting
L-3 TRL are able to offer a variety of secure managed solutions, from consultancy and integration of existing network architecture, to the development of a bespoke secure internet gateway including the procurement, development,
configuration, commissioning and accreditation of
the gateway.
There is also the option of a fully hosted and managed secure internet gateway with network security tools to deliver real-time visibility and control of the threat to the network infrastructure and endpoint devices. Assurance Level or
Accreditation of secure internet gateway network architecture will also be achieved for integration within existing customer networks.
Network Defence
Securing your enterprise network today requires
more than just a traditional firewall; growing cyber
threats are becoming increasingly sophisticated and complex in design and the potential for data loss and damage through attacks increases every year. Many organisations are struggling with the logistics and constraints of managing this evolving threat which can have a detrimental effect on their ability to protect their networks.
We can offer a wide range of tailored network defence consultancy solutions offering expert information, advice and support based on your enterprise architecture, helping to provide a future proof secure solution designed to prevent emerging cyber attacks on your network.
L-3 TRL are also a member of the CESG Listed Adviser Scheme (CLAS), specialising in providing guidance on the interpretation of current and emerging Information Assurance policies.
Our network design service provides effective solutions to cater for the diverse, High Assurance
requirements of both fixed and mobile networks.
Formal accreditation is often a complicated process, involving compliance with a number of HMG guidelines and interaction with accreditation authorities. We assist our customers ensuring the correct procedures are adhered to, minimising the risk of approval delays.
Network configuration can include the investigation
of integration problems or network optimisation to maximise the potential of networks. This ensures
the operational efficiency of the implemented
solution is achieved.
The management and generation of keys is often
a complicated and difficult process. Our key
management consultancy ranges from providing advice and guidance on services and processes to offering a full key management solution. Each of our CATAPAN solutions are compliant with the
latest CESG UK Key Management specifications.
Protecting your enterprise against the unknown threat
TRL Technology
Telephone +44 (0) 1684 278700
Fax +44 (0) 1684 850406
Email info.trl@L-3Com.com
