# Presentation: 266166

## Neah Bay Presentation

## Introduction

- Western DataCom has been in business for 20+ years providing data communications security solutions to the US Government, Commercial and Financial Institutions
- IP Security
- Wireless Security
- Router Based Security
- Remote Access Security

**Notes:**
For those of you not familiar with Western DataCom we are providing the security hardware for today’s demonstrations.

## Security Issues

- 802.11b WEP Is Not Effective
- Flawed Encryption Scheme
- Weak Authentication
- Vulnerable to hacking
- Eavesdropping, Anti-Replay attacks, DDOS and Man-in-the-middle attacks
- Un-authorized network access
- Identity theft, SSID and MAC

**Notes:**
As everyone is aware, wireless security is a major concern in any network application.  WEP is ineffective. . .

## IPE-2M

- IPSEC/HAIPIS encryptor
- Tunnels
- Encryption
- Strong Authentication
- 168-bit 3DES, SHA1
- Miniature, Low Power PC/104 Design
- FIPS PUB 140-1 pending

**Notes:**
IPE-2M is a PC/104, IPSEC/HAIPIS encryptor that uses 168-bit Triple DES to protect the payload of IP Packets; SHA-1 for authentication and Tunnels to conceal the IP addresses of the actual networks that are being protected.  Western DataCom is currently in the process of applying for approval for the IPE from the NSA and FIPS certification labs.

## HAIPE

- NSA Specification for IPSEC
- Type 1 ESP Tunnel Mode
- Data Integrity via SHA-1
- Authentication with Firefly
- Access Control
- Dynamic Discovery
- PPK and IKE

**Notes:**
HAIPE (High Assurance Internet Protocol Encryptor) is an INFOSEC Device the provides IP security for tactical and strategic network environments.

## IPE-2M

- Tactical and Strategic Operation
- Compact Size, Light Weight, Low Power
- HAIPIS
- NSA Approved version of IPSEC
- Type I Encryption
- Type I Key Exchange
- Compatible with Cisco 3200 Series

**Notes:**
There are several advantages that the IPE has over other “VPN” hardware encryptors.

## IPE-2M Operation

- Secures communications with IPSEC/HAIPIS, 3DES
- Application Independent – Data, Voice and Video
- Provides for many-to-many secure tunnels
- Will operate in mobile or stationary environments

**Notes:**
Depending on the environment the networks behind the IPE can be routers, wireless bridges, entire networks or a single PC.
Policies are setup in the IPE to control access to the secure WAN

## Behind Router – Strategic 

**IPE-2M**

**Foreign Agent**** **

**IPE-2M**

**Roaming**
**Interface**

**Behind Router – Strategic**** **

**Home**
**Agent**

**HA-MR Tunnel**

**Mobile Network**

**HA-FA Tunnel**

**IPE-IPE Secure Tunnel**

**Home Network**

**Notes:**
The Neah Bay is using the IPE in a strategic deployment which refers to the placement of the encryptors, in this case behind the routers.

## In-Front of Router – Tactical 

**IPE-2M**

**Foreign Agent**** **

**IPE-2M**

**Mobile Router**

**Roaming**
**Interface**

**In-Front of Router – Tactical**** **

**Home**
**Agent**

**HA-MR Tunnel**

**Mobile Network**

**HA-FA Tunnel**

**IPE-IPE Secure Tunnel**

**Home Network**

**Notes:**
The Army demonstration uses a tactical deployment which places the IPE in front of the routers.

## Secure Multicast

**IPE-2M**

**Foreign Agent**** **

**IPE-2M**

**Mobile Router**

**Roaming**
**Interface**

**HA-MR Tunnel**

**Multicast Source/Receiver**

**HA-FA Tunnel**

**IPE-IPE Secure Tunnel**

**Home Network**

**Multicast Source/Receiver**

**Notes:**
This slide demonstrates the ability to pass broadcast or multicast traffic via secure tunnels.

## Multiple Devices

**Multiple Devices**

**IPE-2M**

**Foreign Agent**** **

**IPE-2M**

**Mobile Router**
**1**

**Roaming**
**Interface**

**HA-MR Tunnel**

**HA-FA Tunnel**

**IPE-IPE Secure Tunnel**

**Home Network**

**Mobile Router**
**2**

**Roaming**
**Interface**

**Home Agent**

- Secure
- WAN

**IPE-IPE Secure Tunnel**

**Notes:**
This slide demonstrates a many-to-many network using the IPE.

## Environment Pro’s & Con’s

- Behind Pro’s
- Takes advantage of mobile IP’s capabilities
- Scalable
- Behind Con’s
- Routers visible on secure network

- In-Front Pro’s
- Routers are on protected network
- In-Front Con’s
- Scalability can be an issue in large scale deployment
- Security Policies can become extensive

## IPE System Solutions

- Wide range of turnkey system solutions to meet numerous requirements
- Complete end-systems
- Commercial or COMSEC

**Notes:**
Western DataCom as well as the larger integrators are providing complete system solutions to meet numerous requirements.

## IPE Future

- 5 Mbps, Type II version
- 1 Gbps, Type I version
- TBD Encryption Algorithm
- Firefly

**Notes:**
There is a migration path to higher speeds and Type I products.  The migration path is approximately 18-months.

## Data Communications Security

**Notes:**
Thank you