JumboSwitch Security Features:
Network security in Industrial environments such as power plants, pipelines, transportation corridors, airports, oil refineries, factory floors, etc. is extremely important. Security laps in these types of environments could potentially have devastating consequences of national proportions.
TC Communications Inc. has provided comprehensive industrial hardened network platforms, including critical security solutions, since 1992. As evidence of this commitment to security, its newly designed JumboSwitch IP platform complies with the North American Electric Reliability Council (NERC) Critical Infrastructure Protection (CIP) requirements.
The JumboSwitch supports the following security features:
- Enable/Disable Ports – The ability to disable ports to provide physical security
- MAC Based port security – Enhances Ethernet port security by limiting device access to use the port
- 802.1Q VLAN – Separates Ethernet traffic into virtual LANs to provide physical security and improve network availability by limiting broadcast storms
- Passwords – Multi-Level and strong passwords to prevent unauthorized logins and user access
- SSH – Encrypts all transmission data for secure, remote Command-Line Interface (CLI) access over IP networks, such as Telnet
- SSL – Encrypts HTTP traffic for secured access to the browser-based JumboSwitch management GUI
- 802.1x – Works with RADIUS to only allow authenticated ports
- RADIUS – Provides centralized user authentication and service authorization through a RADIUS server
- Bandwidth Rate Limiting – Enforces Ethernet port controls for traffic monitoring and prioritization to protect against unwanted traffic storm
- SNMPv3 – Maximizes security by authenticating and encrypting JumboSwitch management (e.g. TCView) via SNMP protocol
In the left section of the above diagram, an unwanted user’s attempt to access the network is blocked after it fails authentication by the RADIUS AAA server. In this case, JumboSwitch sends an alert to TCView and the failed attempted port is disabled. The right section of the diagram depicts a successful attempt by a valid user who is authenticated by the RADIUS AAA server. |
