Partner Manufacturers - Product Information

HSL-K208E 8 Port High Security DVI-I Dual Link & USB PS2 KVM Switch. USB User Authentication port, Audio out, Active anti-tampering KVM Secure Switch, Front Panel Buttons & RDC Port. ( High Security KVM Switch )


HSL-K208

Description:
END OF LIFE - Call us for details of an alternative product



8 Port High Security DVI-I Dual Link & USB PS2 KVM Switch. USB User Authentication port, Audio out, Active anti-tampering Secure KVM Switch, Front Panel Buttons & RDC Port.

KVMs becoming a target for cyber attacks as they may be the only possible link to bridge between isolated classified networks and networks open to the internet. Many high security organizations adopting secure KVMs as part of their cyber protection strategy, in some cases this effort is not enough. Second-Generation Secure KVMs sold in the market today have documented vulnerabilities that may cause data leakages between connected computers with different security levels.

HSL’s Secure KVM is the industry’s first 3rd Generation Secure KVM. This product offers the highest possible separation between 2 / 4 connected computers. The K20x Secure KVM designed to meet the requirements of organizations that are challenged by the need to provide secret or top-secret network access together with unclassified or internet access.

The K20x series KVM uses uni-directional optical data-diodes to prevent any potential leakage between the highly-isolated peripheral channels. This KVM can also be used to securely filter and lock USB ports preventing data export / import through mass-storage devices by hardware.

RDC (Remote Desktop Controller) port enables simple interface with HSL's RDC440 controller. Using the K20x with RDC440 users can control and monitor the Secure KVM remotely and enjoying color LCD with programmeable network/computer names. For more information see RDC440 page.



The K20x supports legacy VGA computers, single-link DVI or dual-link DVI video switching. The K208x is compatible with USB or PS/2 peripherals providing equal security levels. Patented DDC emulation technology enables secure operation with display Plug and Play support. Product passed extensive security evaluation through all forms of known KVM attacks. Unlike other secure KVMs in the market today HSL KVMs were designed to securely operate with the assumption that two of the connected computers are infected by a hostile code that is constantly trying to attack the KVM.

Features:
• Highest security by design
• designed by an agency to support isolation between national security networks. Common Criteria EAL 4+ approved (pending). Derivative of a TEMPEST product used in
NATO nuclear submarines.
Future-proof - supports widest variety of peripherals and computers
• supports latest keyboards, mice smart-card and biometric readers.
Support all Operating systems.
Hardware Based peripheral protection/isolation
• absolutely no dependency on firmware or software.
All firmware is in ROM (Read Only Memory). No keyboard buffering or memory. More than 60dB isolation between channels.
Unidirectional optical data diodes
• assuring USB peripherals isolation. Data can flow from devices to host only. No reverse data flow possible by design.
User authentication device port
• special USB port that supports CAC and other user authentication devices including biometric readers.
User can decouple this port from KVM switching to remain authenticated on one channel in needed.
Display Plug & Play (EDID) protection
• leakage prevention through patented emulated technology.
Signalling attacks prevented by design. EDID fully functional.
Peripherals security
• full USB devices filtering to assure support for keyboard and mouse only.
Active anti tampering
• always-on active antitampering with 10 years battery. Special holographic tampering evident labels.

~~~~~~~~~~~~~~~~~~~~
Model- HSL-208E

Primary Use- Conventional switching KVM USB + Legacy peripheral support with DVI video

Computer Ports - 8

Peripheral Support - USB and PS/2

DPP (CAC) - Yes

RDC Port - Yes

Audio - Yes

Video- VGA, DVI single and dual-link, HDMI supprted

Max Display Resolution -
2560x1600 DVI dual- link, 1920x1200 DVI single-link, 2048x1536 VGA

HSL-K208 setup ports rear view

Specification:
Host Computer Input Ports


- Eight input ports from host computers having:

- 8 x DVI-I Female connectors for video

- 8 x USB Type-B connectors for keyboard and mouse

- 8 x USB Type-B connectors for user authentication device [K208E only]

- Display Plug & Play EDID support through emulation to prevent EDID leakage

Console Ports


- One set of output ports for display, keyboard, mouse, having:

- DVI-I Female connector (DVI-I to VGA adapters can be ordered separately)

- 2 x USB Type-A jacks for keyboard and mouse

- USB Type-A jack for user authentication device [K208E only]

- PS/2 legacy keyboard connector (DIN-5)

- PS/2 legacy mouse connector (DIN-5)

- Channels isolation – optical data-diode and two separate host emulators

- Remote Desktop Controller port (RJ-45 jack)

Management


- Channel select front panel status LED's

- Channel select push-buttons

- Keyboard hotkeys [optional – may be disabled]

- Remote Desktop Controller (RDC)

Video modes supported


- All Dual-link DVI resolutions up to 2560 x 1600

- VGA resolutions supported up to 2048x1536

- VGA output is usable only if all inputs and output are VGA.

Security Functions


- USB ports supporting only keyboard and mouse through host emulation and strong filtering.

- Optical Data Diode assures unidirectional flow from devices to computers.

- Firmware change can not cause leakage between channels or data export.

- Isolated power supplies for each device emulator.

- Dedicated port for smart-card reader or biometric device. Port is strongly filtered and monitored.

- Firmware resides on ROM.

- EDID is highly isolated and fully emulated. EDID content qualification function (firewall).

- Battery powered anti-tampering system to disable product in case of mechanical intrusion.

- Special holographic Temper Evident Labels.

Power


- DC input 12V / 1.5A maximum

- Wall-mounted power supply included. Power input 90-240V AC

Peripheral security


- USB ports supporting only keyboard and mouse through host emulation

- Data-diode assures USB unidirectional flow from devices to host

- Firmware change can not cause leakage between channels or data export

Environmental




- Temperature range: Operating - 0ºC to 40ºC (32ºF to 104ºF); Storage - -20ºC to 60ºC (-4ºF to 140ºF)

- Humidity: Operating - 20 to 80% non condensing; Storage – 10 to 90% non condensing

- Altitude: 0 to 10,000 ft

Regulatory Compliance


- Safety: UL/cUL60950,EN60 950

- EMI/EMC: FCC Class B, CE Mark, EN55022B, VCCI

Security Accreditations


- Common Criteria EAL 4+ (currently in evaluation)

- Designed for Common Criteria EAL-5

- Complies with latest NIAP Peripheral Sharing Switch (PSS) For Human Interface Devices Ver 2.1

Physical Characteristics


- Dimensions: 135(D) x 470 (W) x 50 (H) mm / 5.3 (D) x 18.5 (W) x 2.0 (H) inch

- Device weight: 2.5 Kg. (5.5 lbs.)

- Shipping Weight: 3.8 Kg (8.4 lbs) without cables

Warranty, Reliability


- 2 years limited warranty. This limited warranty covers 100% of parts and workmanship on any required repairs. For details see HSL web-site: www.highseclabs.com/Warranty

- Optional extended warranty for up to 5 additional years

- Product design life-cycle 10 years per MIL-HDBK-217E