THE HSL SECURE KVM COMBINERS. Simultaneously interact with multiple computers on the same screen

Transcription

1 THE HSL SECURE KVM COMBINERS Simultaneously interact with multiple computers on the same screen

2 THE NEED 1 Demanding environments require real-time presentation of information from isolated computers on the same display Command & Control Military & Defense Mobile Command & Control

3 WHAT IS A KVM COMBINER SWITCH? 2 Move mouse to switch PCs Combiner is a Secure KVM switch which allows to simultaneously interact with and present multiple computers from different security classifications on a single display while keeping the data of each source completely separate. PC PC Single Keyboard & Mouse PC PC SECURE KVM COMBINER Multiple Sources

4 COMBINER VERSATILE VIEW MODES (PRESETS) 3 What are view modes? View modes determine how multiple sources are presented on the combiner s screen. Versatile view modes allow various presentation layouts (Tile, Scale, Custom etc.). Simple switching allow the user to change view setting on-the-fly to instantly fit with any work scenario. The user can switch between all presets at all times with a click of a mouse. Custom view modes can be saved to preset any layout desired by the user for future work.

5 COMBINER VERSATILE VIEW MODES (PRESETS) 4 Tile Mode Example: In Tile mode all sources are spread equally on the screen, the user can independently interact with each source and enlarge any given source to maximum screen size by clicking on it. Click to Enlarge Demo Video Setup Channel 1 Channel 2 Channel 3 Channel ? Scale Tile Setup Channel 1 Channel 2 Channel 3 Channel ? Scale Tile

6 COMBINER VERSATILE VIEW MODES (PRESETS) 5 Scale Mode Example: In Scale mode the user can interact with all sources while one source is enlarged and others are aligned vertically on the right screen side. Switch between the enlarged source by clicking on the aligned source. Click to Enlarge Demo Video Setup Channel 1 Channel 2 Channel 3 Channel ? Scale Tile Setup Channel 1 Channel 2 Channel 3 Channel ? Scale Tile

7 COMBINER VERSATILE VIEW MODES (PRESETS) 6 Custom Mode Example: In Custom mode the user can interact with all sources, rearrange screens layout and position according to his need and save the sources preset for future use. Rearrange and Position screens as you want Demo Video Setup Channel 1 Channel 2 Channel 3 Channel ? Scale Tile Setup Channel 1 Channel 2 Channel 3 Channel ? Scale Tile

8 CURSOR NAVIGATION VIRTUAL DISPLAY TECHNOLOGY (VDT) 7 Switch from one highly isolated computer system to another by simply moving the mouse cursor across display borders No need to push any buttons Audio and keyboard follow the mouse as its cursor crosses the display borders Drag mouse between screen boarders Screen border Mouse cursor movement path

9 PERIPHERAL PORT (fusb) FOR SHARING AUTHENTICATION DEVICES AND MORE 8 What is fusb? Dedicated USB port which is preconfigured to allow only USB authentication devices such as smartcard & biometric readers. fusb functionality can be further enhanced by allowing an administrator to explicitly enable a uniquely identified USB device. USB device approval / denial indication LED shows whether the connected device is permitted for use. fusb channel assignment LED indicates which source has current access to the USB device. Dynamic fusb port switching. fusb is automatically switched between sources together with the keyboard and mouse. Freeze fusb option allows locking the USB device to a specific channel, preventing it from switching automatically. Computers Primary Display Authentication / Explicitly Approved USB Devices Approved USB Device Secondary Display Keyboard Mouse Biometric Reader fusb? Audio Smart-Card Reader

10 COMBINER HIGHLIGHTS 9 Interact with multipule computers simultaneously Connect up to six computers and two displays to the KVM Combiner. User can interact with all computers at the same time using a single set of keyboard and mouse. Flexible screen layout options Split the screen to display multiple sources on the same display. Resize source scaling and aspect ratio to create Tile, Scale and Custom display layouts that fit user needs. Duplicate & Extend view modes Provide flexible presentation options to fit any meeting / control room use case scenario. Native touch screen support Touch screen support allows interacting with all connected computers using touch screen gestures. Virtual Display Technology (VDT) Seamlessly switch between the selected sources by moving the mouse cursor across screen boarders. Audio is switched automatically once control is switched to another source. Combiner cascading Cascade combiners to view and control up to 36 sources on a single display, using one set of keyboard, mouse and audio. Expand any source to full screen. Keep all combiner-features throughout the cascaded chain (View modes, VDT etc.).

11 COMBINER HIGHLIGHTS - SECURITY 10 Highest security by design Common Criteria EAL 4+ approved, compatible with NIAP security requirements. Work freely without compromising security Display and control classified and non-classified computers without compromising security. Computers and peripherals are fully isolated from each other. Biometric/Smart-Card reader support Connect a smartcard/biometric reader to the combiner s fusb secure port to support user authentication across multiple isolated computers.

12 COMBINER ADVANTAGES VS. MULTIPLE-DISPLAY SETUP 11 VS Multiple Displays Combiner Feature Multiple Displays Combiner Multiple Displays: Information from each source is displayed on a separate screen Combiner: Information from several isolated computers is seamlessly integrated on the same display in real-time Multiple Displays: The size of each PC screen is limited by the available free space on the user s desk Combiner: Use one big screen instead of multiple small screens to better watch content on a Big & Wide Screen Multiple Displays: Requires connecting a dedicated touch screen to each PC. Combiner: Connect a touch enabled screen and get native touch screen support with all connected computers Multiple Displays: The user is required to push KM Switch buttons (or use multiple sets of keyboards, mouse and speakers) in order to switch the mouse, keyboard and audio between computers Combiner: Switch the mouse, keyboard and audio from one computer to another by simply moving the mouse cursor across display borders on the same screen Multiple Displays: No layout options. Screen alignment is derived from the physical monitor size and layout Combiner: Support of multiple screen layout options (tile/scale/custom) to best fit any use case scenario

13 COMBINER MODELS 12 Model K424F K424H K426E K426H # of sources (inputs) # of projected displays (output) Computers (input) video Up to HD Resolutions (1920 X 1200 pixels) Console (output) video Up to HD Resolutions (1920 X 1200 pixels) Up to 4K-2K Ultra HD Resolutions (3840 X 2160 pixels) Up to HD Resolutions (1920 X 1200 pixels) Up to 4K-2K Ultra HD Resolutions (3840 X 2160 pixels) Keyboard & mouse ports USB & PS/2 USB Peripheral Port (fusb) Touch screen support Natural Windows Scaling # of customized presets 4 (including Tile) Unique Features: Designed for command & control and any other environment requiring real time monitoring of multiple displays An attractive alternative to Video wall controllers Touch screen support Flexible Windows-like GUI Cursor navigation between sources

14 SPECIAL COMBINER MODELS 13 2 Sources to 6 Displays Displays Coming Soon! Computers CAC RDC 1 1 Audio 1 2 Keyboard Mouse 4 Sources to 4 Displays Displays Computers CAC RDC 4 Audio Keyboard Mouse

15 COMBINER CASCADING 14 Cascade combiners to view and control up to 36 sources on a single display, using one set of keyboard, mouse and audio. Keep all combiner-features throughout the cascaded chain (View modes, VDT etc.) Native touchscreen support across all sources. Independently resize and rearrange the screen layouts of each source. Expand any source to full screen. Support RS232 commands for easy screen layout switching programming.

16 15 COMBINER CASCADING S E C U R E K V M CO M B I N E R S Cascade combiners to view and control up to 36 sources on a single display, using one set of keyboard, mouse and audio. Combiner 1 Combiner 2 Combiner 4 Master Combiner Combiner 4 Combiner 2 Single Keyboard & Mouse Combiner 3 Combiner 1 Combiner 3

17 16 COMBINER CASCADING S E C U R E K V M CO M B I N E R S Independently resize and rearrange the screen layouts of each source. Combiner 1 Combiner 2 Combiner 3 Scale View Scale View Quad View Single Keyboard & Mouse Master Combiner Combiner 4 Custom View

18 17 COMBINER CASCADING S E C U R E K V M CO M B I N E R S Combiner 1 e# f 1o c c h ild o m bi n e r # 1 to f u ll s c r e e n Combiner 2 Exp an ds ou rc Expand any source to full screen. Combiner 3 Combiner 1 Expand source of child combiner to full screen. Combiner 2 Combiner 3 Combiner 4 Single Keyboard & Mouse Master Combiner Combiner 4

19 18 COMBINER CASCADING S E C U R E K V M CO M B I N E R S Combiner 1 ou e# 1o ild f ch co m bi n er # 1 to f u l l s c r e e n # 1 o f m a s te r r ce u so ul l s c r e e n to f r e Exp an d com bin ds an Exp Expand source of child combiner to full screen. rc Expand any source to full screen. Combiner 2 Combiner 3 Expand source of master combiner to full screen Single Keyboard & Mouse Master Combiner Combiner 4

20 FAQs What is the difference between KVM and Combiner? KVM s are designed to switch displays, allowing the user to only see and manage one target device at a time. Combiner allows the user to securely interact with multiple sources simultaneously. The Combiner uses advanced video processing technology to draw a high resolution dynamic mosaic of images generated by different sources. Is the Combiner as secure as Secure KVM switches? Yes. The Combiner is a derivative of HSL Secure KVM product line, and is equipped with the same high security features: Active Always-On Anti-Tampering, Heavy-Duty Tamper-Resistant Enclosure, Tamper Evident Label, Unidirectional Data Paths, Dedicated Processors for Emulation, USB Port Protection, Non- Reprogrammable Firmware, Tamper-Proof Hardware, and more. Can the Combiner scale video input? 19 Yes, The HSL Combiner has an advanced scaling function allowing the user to scale the video source to ensure proper viewing and superb work experience. A user can now fit four full HD sources on a single or dual HD or UHD screen by scaling each source, all in real time with no data loss. In addition, natural Windows scaling and touch screen are supported, so the user can scale freely various sources and also them as one of the predefined Presets. Is it possible to use a mouse other than the mouse supplied with the HSL Combiner? It is recommended to use the mouse supplied with the HSL Combiner but if another type of mouse is used, it must be a five-button mouse, with a recommended mouse DPI of 5400 for best performance.

21 KEYBOARD AND MOUSE THREATS 20 # Attack Type Vulnerability Risk Signal/Virus Programmable components may include malicious code and are vulnerable to manipulation. May include memory chips that can store data Bi-directional keys (Num Lock, Scroll Lock, Cap Lock, Pause Break) can be used to send and decode data between systems Data leakage from one system to another Solution Components Unidirectional Optical Data Diodes Hardware-based Peripheral Isolation per Port Hardcoded HID Filter Solution Highlights üü Allowing data to flow only in one direction, from the device- to-host computer. üü Preventing host-to-peripheral data flow eliminates data leakage through the shared peripheral. üüpreventing host-to-host connectivity isolates all hosts from each other. üü Each port is fully isolated from other ports. üü Accepts only USB HID Devices (Keyboard & Mice) rules out others. üühardcoded ASCII keyboard / mice characters. üüincapable of processing any other code than HID-ASCII.

22 AUDIO THREATS 21 # Attack Type Vulnerability Risk Signal/Virus/Hot Microphone Solution Components Programmable components may include malicious code and are vulnerable to manipulation. Manipulated sound card can reprogram a speaker into a microphone to act as an audio reception tool (e.g. microphone). Solution Highlights Data leakage and eavesdropping Unidirectional Diodes üü Allow sound to travel only in one direction from the PC to the speaker. üü Prevent re-tasking of the audio line-in (headset/speaker) into a microphone line and thus block eavesdropping attempts by reprograming a speaker to act as an audio reception tool (e.g. microphone).

23 USB THREATS 22 # Attack Type Vulnerability Risk Virus Solution Components Block un-authorized USB Highly popular standard commonly used by computer and mobile users. Provides on-the-fly high speed, bidirectional flow of data to and from the computer. Multifunctional port: numerous device types can connect through the same physical port Programmable components may include malicious code and are vulnerable to manipulation. Can be used to store/inject data. Solution Highlights üücompletely block and disable unauthorized USB devices and traffic Data leakage from one system to another Secure & Dedicated Keyboard / Mouse Ports Biometric/Smart-Card reader support ü ü Accepts only USB HID Devices (Keyboard & Mice) rules out others üürefer to Keyboard & Mouse threats table for additional information ü ü Special secured port (fusb) for smart-card/biometric reader with patented Freeze function to support user authentication across multiple isolated networks.

24 HARDWARE & FIRMWARE TAMPERING THREATS 23 # Attack Type Vulnerability Risk Firmware Reprogramming / Implant malicious hardware Solution Components Open product and implant malicious hardware. Attempt to reprogram firmware components to include malicious code. Attempt to store/inject data. Solution Highlights Data leakage and eavesdropping Tamper-proof electrical design No Memory buffers Always-ON tamper evident system üü Firmware is stored on ROM (Read Only Memory) üüone-time-programmable (OTP) Microprocessors preventing firmware tampering/ rewrite üüperipheral signals are passed-through, with no data stored inside products üü Internal: Tampering with product chassis triggers a switch that renders product inoperable. This is indicated to user via a specific LED behavior. üü External: Serialized holographic labels provide visual indication of any tampering attempt and warning labels are place on product chassis

25 THANK YOU For more information, please visit