SYNC 2000 – Secure Substation Gateway

SYNC 2000 – Secure Substation Gateway

Kalkitech’s SYNC 2000 secure substation gateway is ideal for sub-transmission and medium -voltage substation automation and gateway applications. It incorporates a protocol gateway with support for over 40 industry standard and proprietary protocols, plus a multi-faceted security sentry that includes a firewall, role-based access control, security log and encrypted communications. The SYNC 2000 has a compact form factor and in a ruggedized enclosure designed to comply with  IEC 61850-3. It supports DIN, wall or rack mounting for maximum flexibility.

The SYNC 2000 family of products are field proven and support a wide range of protocols including IEC 61850, IEC 60870-5-101/103/104, DLMS/COSEM, Modbus, as well as legacy and proprietary protocols such as SPA Bus, and Courier.

It features a breadth of strong security features that meet NERC CIPv5/IEEE 1686 compliance. Security capabilities include: X.509 PKI certificate support; integrated firewall; TLS/6351 communication; role-based access control (RBAC) using  online certificate status control (OCSP) or attribute certificate based on IEC62351-8 standard, security log recording access, events and alarms and encrypted communications. Product is designed to enable secure boot (TPM) support.

With 4 serial and 2 copper Gigabit Ethernet ports, the SYNC 2000 includes a ruggedized enclosure designed for IEC61850-3 compliance including strict EMI/EMC and surge requirements on all ports and the power supply. It has the flexibility to be mounted on a DIN rail, on a wall or in a rack.

The SYNC 2000 is ideal for installing in sub-transmission and distribution substations as a secure data concentrator for connecting various legacy and digital SCADA downstream devices to a centralized control center.

General

  • License option to enable standard protocols DNP3.0, IEC 60870-5 101/103/104, DLMS- COSEM, Modbus, IEC 61850
  • Supports proprietary protocols such as SPABus, Couirer ed 2.0, SEL and many more which are commonly used in utility legacy devices
  • Many-to-many protocol conversions with multi-master connection support
  • Device software and hardware status, restart notification and many more diagnostic points
  • Remote management and monitoring using Kalki.io
  • SNMP agent/manager support to enable network asset monitoring
  • Transparent tunneling for remote management of end device
  • Multiple options to synchronize time of the gateway and downstream devices (NTP/SNTP/IEC104/DNP etc.)
  • Internal and external pluggable cellular modem
  • Wide range of AC and DC power supply

Security

  • NERC CIPv5 support*
  • IEEE1686 compliant*
  • Secure device access (Linux users)
  • Physical port control
  • Firewall protection
  • Data encryption
  • Password protection
  • Software license protection
  • Digital right management
  • Integrated with kalki.io identity and access management
  • Role based access control using Attribute certificate based on IEC 62351- 8/OSCP
  • Allows only signed firmware bundles from trusted sources
  • Encrypted tunnel for configuration access and web-monitoring
  • IEC 62351-3 transport layer security for TCP based utility protocol
  • IEC 62351-5/Secure authentication for DNP3.0
  • SSL based VPN with AES, DES or 3DES encryption over WAN/LAN
  • All logs in syslog format
  • Configurable alarms and events for security related incidents
  • Integrated trusted platform module*

Scalability

  • 4 serial ports and 2 Gigabit Ethernet ports
  • Wide range of AC and DC power supply

*Contact sales for details