Secure SCADA & Serial Legacy Protocol to IP, via WAN, wireless & satellite VPN routers

BROADBAND ACCESS AND NETWORK SECURITY PRODUCT - Bandit & VSR Products

BANDIT^TM

Advanced Secure IP VPN Broadband Access Router and Gateway with remote backup

The BANDIT^TM is a secure broadband access router, ideally suited for branch offices, that combines Virtual Private Network (VPN) security, remote diagnostics, dial backup, and extended network management tools in a single compact device.

BANDIT II^TM

Industrially Hardened And Commercial Grade Security Appliance

BANDIT II™, the latest addition to the Encore’s BANDIT™ (Broadband Access Network Device for Intelligent Termination™) family, is available as an industrially hardened or commercial grade cyber security appliance with integrated router, firewall, terminal server, serial-to-IP conversion, legacy-protocol img/jpg conversion, and VPN functionality. Ideally suited for lottery, banking (ATM), electric, gas, oil and water utilities, industrial plant floors; mobile transportation; and traffic control system applications, the BANDIT II™ ensures secure system data and SCADA network connections directly to the Internet, secure Wide Area Network (WAN) and/or Local Area Network (LAN), or commercial cellular data IP services. With its seamless Host Site diversification failover feature, the BANDIT II™ is ideal for Disaster Recovery and Application Load Sharing to multiple Host Sites.

Summary Points
► Available in industrially hardened and commercial grade versions
► IPSec or SLE for enhanced VPN over satellite networks
► Manageability (Remote Monitoring and Configuration)
► Multi Network connectivity over any network including Frame Relay and IP
► Cellular connectivity for primary, load sharing, back-up or out-of-management support
► Up to 2 serial ports for legacy traffic
► Host Site Diversification for Disaster Recovery

BANDIT III^TM

ENVIRONMENTAL HARDENING IMPROVES AVAILABILITY IN HARSH CONDITIONS AT REMOTE SITES

BANDIT III, the multifunction communications appliance for utility networks, easily moves SCADA systems from analog lines (point-to-point or multidrop) to the utility operator’s choice of IP, frame relay, cellular data link, satellite, cable modem, or digital leased line service--or a img/jpg combination of those services with analog modems. Hardened to operate in the wide temperature ranges and harsh conditions found in power substations and other remote locations, BANDIT III offers up to six serial interfaces to existing RTUs. In addition, the router features a 4-port Ethernet switch for IP-enabled RTUs, and Ethernet-based RTU LAN connectivity.
An integral terminal server converts serial asynchronous data (bit or byte oriented) into IP or frame relay packets for transmission to the host site on modern digital transmission services. The integral dial modem supports modem-equipped RTUs as well as providing backup. BANDIT III is ROHS compliant; no lead used in soldering.

► Proven, feature-rich ELIOS™ operating system
► Disaster Recovery through Secure dial backup (V.90, CDMA/GSM, VSAT) auto learned routes provides continuous service availability; incoming or outgoing connections; secured using PAP/CHAP; fast switchover
► Legacy support via up to 6 serial ports supporting TDI, RS-232, RS-449, V.35, and X.21
► Broadband access via Ethernet WAN
► Automatic backup failover via V.90/V.92 or CDMA/GSM up to 2 wireless ports and EDGE / GPRS wireless ports
► Internal protocol analyzer for traffic monitoring
► Full standards compliant SNMP Management

■ Standard MIB-II (system, ports, TCP/IP, etc.)
■ Standard Frame Relay MIB (protocol, DLCI table, error messages, etc.)
■ Custom MIBs for configurations and statistics
■ Standard TRAPs
■ Triggered TRAPs

• User-definable traps for any SNMP-manageable conditions
• Guaranteed TRAP delivery

► Support for IP PBX, VoIP, Softswitch, video conferencing
► Protection of corporate Intranet assets via comprehensive firewall capabilities
► Guaranteed delivery of mission-critical data via Quality of Service (QoS) features
► Inexpensive to set up and maintain — low cost hardware, no software licensing
► Highly reliable for connectivity of legacy protocols including spoofing
► Worry-free protection of data and management functions with 3DES/AES encryption
► ROHS compliant

BANDIT-IP^TM

A slimmed down version of the standard BANDIT™ product, the BANDIT-IP™ is designed specifically for Small Office/Home Office (SOHO) applications with two Ethernet LAN/WAN ports and an optional expansion slot for either 56/64 kbps DSU or a third DMZ Ethernet port. It is a purpose-built Virtual Private Network (VPN) gateway that provides personnel in remote offices and telecommuters with access to the private corporate network while on the road or working at home. It is also a VPN appliance solution that img/jpg carriers can offer to their existing broadband customers to provide value-added VPN services. Built with security and ease of management in mind, the BANDIT-IP™ is one-box solution for IPSec VPN tunneling, stateful inspection firewall, built-in router functionality, authenticated remote user access, Network Address Translation (NAT), and comprehensive diagnostic and troubleshooting tools. Positioned between the IP core network and the Local Area Network (LAN), the BANDIT-IP™ provides the perfect solution for cost-effective, secure managed IP VPN networks over different flavors of existing broadband networks like DSL, cable, satellite, and Wi-Fi.

BANDIT-Plus^TM

Designed for next generation multi-service broadband networks, the BANDIT-Plus™ broadens Encore's addressable market to include service providers and enterprises that wish to deploy more cost-effective solutions for voice, IP+Legacy VPN, security, and data over a single broadband packet-based connection. Hardware acceleration of encryption ensures high performance and minimizes latency — an important feature for secure Voice over Internet Protocol (VoIP) transport.

The 19" rack-mountable BANDIT-Plus™ includes two Ethernet ports in addition to a built-in V.90 modem and a universal serial interface. The modem may be configured as the primary WAN link, dial backup, or as a dial-in maintenance port. Serial interfaces provide support for dozens of legacy protocols, including ALC, X.25, and SNA over V.35, X.21, or RS-232 physical interfaces.

An expansion slot supports a variety of modules with physical interfaces such as 56/64 kbps DSU, T1/E1 CSU, Ethernet; or a second serial interface. Also, a two-port T1/E1 DSU/CSU expansion module with "drop and insert" capability allows any part of a T1/E1 access line to connect to a PBX. The total package integrates TDM voice, data, and VPN applications over a single network facility.

The combination of a high density 12-port serial module, the ability to terminate hundreds of remote locations over secure IPsec tunnels, and the support of a wide range of legacy protocols makes the BANDIT-Plus™ an ideal VPN host gateway solution. Legacy applications can migrate smoothly from leased circuits (analog or digital) to packet-based (frame relay), IP, and broadband VPN infrastructure. With the BANDIT-Plus™, Teleprime offers end-to-end IP VPN+Legacy solutions that can satisfy the requirements of the Small-to-Medium Enterprise (SME) market.

BANDIT-Mini^TM

DC Powered Wireless VPN Router Connects Both Serial and IP Terminals

The BANDIT-Mini™ is a compact wireless VPN router designed to keep legacy host computers and remote terminals operating normally during and after a network migration from leased lines to an IP service. With both Ethernet and cellular wireless img/jpg WAN interfaces, the BANDIT-Mini™ provides connectivity over wireline or wireless channels. The wireless capability is particularly attractive for sites where a land line is difficult or expensive to provision for temporary locations, and for applications with low data volume where the monthly charge for cellular telemetry service can be much less than the cost of a POTS line.

BANDIT^TM Wireless

CDMA/GSM Wireless Module

The CDMA and GSM modules create a BANDIT™ family of wireless products that offer secure IP connectivity to users of legacy protocols for transport over wireless networks. The combination of these capabilities offers enterprises a quick and economical solution for both permanent and temporary wireless installations.

For end-users, the economics of using cellular for telemetry or transaction based applications as an alternative to expensive landlines or satellite links are particularly strong. Many telemetry and transaction devices such as lottery terminals, ATM’s, utility RTU’s, security equipment, and point of sale devices operate on dedicated lines with speeds of 56 kbps or less. The BANDIT™ wireless products can be easily deployed to provide up to 144 kbps of cellular bandwidth to support these applications at a significantly reduced cost.

For carriers, the wireless BANDIT™ provides terrestrial carriers having “out of territory” cellular partnerships with a great last mile solution. Where a terrestrial carrier may lack a footprint in a particular region, the wireless BANDIT™ can be used with their cellular partner to quickly simplify a large customer deployment and save the carrier from having to lease data circuits from a LEC. The new cellular modules fit in the universal card slot of the BANDIT™, BANDIT-IP™, BANDIT-PLUS™, and VSR-30™. The modules can be ordered separately or be factory pre-installed.