Cadmium

Overview

• Uni-directional transfer
• 1Gbps interfaces
• 800Mbps throughput
• Web based console
• Role based access
• High physical /logical security
• Encrypted in place
• Files or transport level protocol
• Transport protocols (TCP,UDP)
• File movement (FTP, SFTP, etc)
• Drop box (USB, Web portal) (DS)
• EAL4+ Certified (CSE Sept/21)

Filtering

• Native (on board) filtering (in plan)
• File Size
• File Extension
• XML validation (custom schema)
• Dual pipelined architecture
• External file vetting (in plan)
• Dedicated high/low interface
• Runs Sentry (off-board) protocol
• In/out box protocol
• File in-fill support
• Filtering on high and/or low side
• Evolutionary, customizable

Administration

• Fully web-based UI (no application required)
• No klunky command line
• No commands to memorize
• Configurable security, timeout
• HTTPS (security)
• Separate high/low side controls
• Easy to use visual
• Quick learning curve
• Support for monitoring status page
• Multiple CDS per station
• Role based assignments

Security

• VxWorks embedded OS (not Linux)
• Bundled, captive application/operating system
• High and low side implement hardware enforced Secure Boot (blown one-time fuses lock secure boot and CERT to hardware)
• Independent tamper on high and low side (mechanical, temperature, key storage)
• Hardware encrypted drives (key stored in key storage)
• Boot software
• Executable software (OS bundled with application SW)
• Configuration
• Logs etc.
• SW distribution as single file
• Tamper evident package
• Transit assurance (labels, bags, box and one time password)

Logging & Audit Support

• On board rotating logs
• Controllable log levels
• Support for forensic audit
• Accessible through GUI includingdownloadable files
• Off board logging through syslog

Support

Annual maintenance provides access to:

• Portal (code updates, notifications, reporting, documents status etc)
• Telephone support
• All updates (save those specifically restricted)
• Security notifications (through encrypted email)

Road Map

Available on request.