SYNC 2000 – Secure Substation Gateway
Kalkitech’s SYNC 2000 secure substation gateway is ideal for sub-transmission and medium -voltage substation automation and gateway applications. It incorporates a protocol gateway with support for over 40 industry standard and proprietary protocols, plus a multi-faceted security sentry that includes a firewall, role-based access control, security log and encrypted communications. The SYNC 2000 has a compact form factor and in a ruggedized enclosure designed to comply with IEC 61850-3. It supports DIN, wall or rack mounting for maximum flexibility.
The SYNC 2000 family of products are field proven and support a wide range of protocols including IEC 61850, IEC 60870-5-101/103/104, DLMS/COSEM, Modbus, as well as legacy and proprietary protocols such as SPA Bus, and Courier.
It features a breadth of strong security features that meet NERC CIPv5/IEEE 1686 compliance. Security capabilities include: X.509 PKI certificate support; integrated firewall; TLS/6351 communication; role-based access control (RBAC) using online certificate status control (OCSP) or attribute certificate based on IEC62351-8 standard, security log recording access, events and alarms and encrypted communications. Product is designed to enable secure boot (TPM) support.
With 4 serial and 2 copper Gigabit Ethernet ports, the SYNC 2000 includes a ruggedized enclosure designed for IEC61850-3 compliance including strict EMI/EMC and surge requirements on all ports and the power supply. It has the flexibility to be mounted on a DIN rail, on a wall or in a rack.
The SYNC 2000 is ideal for installing in sub-transmission and distribution substations as a secure data concentrator for connecting various legacy and digital SCADA downstream devices to a centralized control center.
General
- License option to enable standard protocols DNP3.0, IEC 60870-5 101/103/104, DLMS- COSEM, Modbus, IEC 61850
- Supports proprietary protocols such as SPABus, Couirer ed 2.0, SEL and many more which are commonly used in utility legacy devices
- Many-to-many protocol conversions with multi-master connection support
- Device software and hardware status, restart notification and many more diagnostic points
- Remote management and monitoring using Kalki.io
- SNMP agent/manager support to enable network asset monitoring
- Transparent tunneling for remote management of end device
- Multiple options to synchronize time of the gateway and downstream devices (NTP/SNTP/IEC104/DNP etc.)
- Internal and external pluggable cellular modem
- Wide range of AC and DC power supply
Security
- NERC CIPv5 support*
- IEEE1686 compliant*
- Secure device access (Linux users)
- Physical port control
- Firewall protection
- Data encryption
- Password protection
- Software license protection
- Digital right management
- Integrated with kalki.io identity and access management
- Role based access control using Attribute certificate based on IEC 62351- 8/OSCP
- Allows only signed firmware bundles from trusted sources
- Encrypted tunnel for configuration access and web-monitoring
- IEC 62351-3 transport layer security for TCP based utility protocol
- IEC 62351-5/Secure authentication for DNP3.0
- SSL based VPN with AES, DES or 3DES encryption over WAN/LAN
- All logs in syslog format
- Configurable alarms and events for security related incidents
- Integrated trusted platform module*
Scalability
- 4 serial ports and 2 Gigabit Ethernet ports
- Wide range of AC and DC power supply
*Contact sales for details
