FC-X Inline Network Encryptor

Overview

Fortress's FC-X network encryptors perform high-performance inline encryption delivering over gigabit throughput. The FC-X enables large-scale networks to secure communications from thousands of wireless users in an enterprise WLAN or over high-speed optical links. The FC-X processes packets at a high rate with low latency, satisfying the rigorous demands of large VoIP deployments, a rapidly growing application for wireless communications.

Built for maximum flexibility, Fortress Inline Network Encryptors provide a secure wired or wireless connection for the network and are interoperable with Wi-Fi, WiMAX, Free Space Optics, Satellite and Military RF. As an overlay solution, the encryptors can be plugged into any environment, regardless of topology, infrastructure vendor, or wireless technology used.

Features

Gigabit Performance

Fortress FC-X Inline Network Encryptors use hardware crypto FPGA and hardware TRNG to provide gigabit performance and low latency for data and VoIP applications.

Comprehensive Security

All Fortress products offer the most standard, interoperable and compliant security that is certified to FIPS 140-2. Fortress is a leader in secure wireless networking offering NSA Suite B cryptography and IPsec on all its products. Fortress products advanced security and rich PKI infrastructure are unmatched in the industry.

Made in the USA

Fortress products are designed and manufactured in the USA to maintain the highest levels of quality with oversight to provide manufacturing design assurance. All software or programmable hardware devices are built from source code that is controlled in house.

MTBF

To ensure products can be deployed for years in tough operating environments where failure is not an option, Fortress products are designed to have a very low failure rate and a Mean Time Between Failure (MTBF) greater than 100,000 hours or 11 years of continuous operation.

Tolly Tested

The FC-X has undergone vigorous independant lab testing by the Tolly group. Their published report is available for viewing and download here.

Applications

Typical applications where the FC-X would be an appropriate solution

Specifications

Mechanical

Dimensions:
• 1.75"H × 17.5"W × 12"D

Weight:
• 11 lbs., approx.

Mounting:
• 1U rack mount chassis

Environmental

Operating temperature:
• 0⁰C to +50 ⁰ C
(32⁰ F to +122 ⁰ F)

Storage Temperature:
• -20⁰C to +70 ⁰ C
(-4⁰ F to +158 ⁰ F)

Humidity:
• 8% - 95% non-condensing

Operating Altitude:
• 0 - 5000m (0 - 16,404 ft)

Power

Voltage:
• 120-240 VAC

Interfaces

Ethernet:
• 2 x SFP transceiver
receptacles
• 3 x RJ-45 10/100/1000BT

Serial:
• One RJ-45 serial port
(Console)

Security

Encryption:
• AES-CTR-128/192/256
• AES-GCM-128/256
• IPsec (Suite B and Legacy)
• NSA Suite B Upgradeable*

FIPS:
• FIPS 140-2 level 2

Common Criteria:
• EAL3

Multi-factor Authentication:
• Network, device, user, guest,
802.1x
• RADIUS, LDAP, Active
Directory, RSA SecurID,
internal database, PKI/CAC

Performance

Sustained FIPS
Crypto Throughput
>1 Gbps

Management

Access:
• SNMP or Fortress MaPS
• Logging, exportable to Syslog
• Four arrow keys for LCD
menu navigation

Indicators:
• Two-line, 20-character,
backlit LCD text display
• Power, Status, Cleartext,
Failover front panel LEDs
• Three pairs integrated port
activity/status LEDs

Control:
• Back-panel on/off power
control;
• Front-panel, recessed,
warm-power reset control

Networking

IP Compatibility:
• IPv4 and IPv6

Traffic Prioritization:
• 5 level class of service

VLAN Support:
• Full VLAN support

RF

None

Certification

Safety and Emissions:
• UL, CE markings per 60950-2

EMI:
• FCC Class B, EN55022

Environmental:
• RoHS-6

Manufacture & Warranty

Manufacturing Origin:
• USA

Warranty:
• Includes 1 year of
standard warranty

* NSA Approval Required

Technology

Hardware Crypto FPGA and TRNG

Fortress products deliver much higher performance by using a hardware crypto FPGA that enables fast, deterministic performance to protect against timing attacks. Our hardware-based true random number generator (TRNG) is especially critical for devices that do not have user interaction from which to collect entropy to reliably generate random numbers. A fast, reliable hardware implementation is critical in supporting real-time applications such as encrypted voice and video, as well as scaling to handle increasing application throughput and bandwidth needs. Fortress' cryptographic implementation has passed rigorous examination and been approved by NIST.

Suite B Capable

The NSA Suite B initiative is a common set of cryptographic algorithms to create products that meet the widest range of US Government needs. Suite B Cryptography is built on COTS information-assurance products using Advanced Encryption Standard (AES) and is under evaluation by the NSA to protect information up to the SECRET level. Fortress products are NSA Suite B capable and can be upgraded where approval is achieved.

Photos