Device Profile: SSV IGW/100 industrial security gateway

By Linux Devices
2004-09-02

Article Rating:

/ 0

Rate This Article:

Add This Article To:

The SSV IGW/100 is a small, rugged industrial security gateway designed to protect automation networks from viruses, worms, and unauthorized access. It runs a free, open-source Linux distribution that supports real-time extensions and was designed especially for industrial security applications.

The IGW/100 is available as part of several Security Gateway Starter Kits from SSV

The IGW/100 is built around an SSV's DIL/NetPC ADNP/1520 single board computer (see diagram below) which is powered by a 32-bit AMD Elan SC520 586 processor clocked at 133MHz. The unit includes 64MB of SDRAM, and 16MB of Flash, expandable through an internal CompactFlash slot. It includes one auto-negotiating 10/100 Ethernet port, and two 10Base-T ports. Backpanel I/O includes a 115.2kbps RS232 port, reset button, and LEDs for power and CF activity.

The IGW/100 is based on one of SSV's tiny DIL/NetPC SBCs

The fanless device requires a 5VDC power supply, and can operate between 0 and 65 degrees Celsius. It is housed in a rugged case measuring 6.5 x 4.5 x 1 inches (168 x 116 x 26mm), and is available with wall-mount and DIN rails.

Software side -- AMSEL Linux

The IGW/100 is intended to run "Advanced Modular Secure Embedded Linux" (AMSEL), a free, open source, security-oriented distribution based on a 2.4-series kernel. AMSEL was co-developed by SSV and .vantronix, according to SSV, and employs a "secure-by-design" architecture suitable for industrial environments. It uses the ucLibc system library for small systems.

AMSEL supports real-time extensions, including the patent-free ADEOS nanokernel. Since the IGW/100 is an x86 system, AMSEL also supports RTAI/Adeos on the device, as well as RTAI/Xenomai. It also supports emulation layers for several commercial RTOSes, including VRTX32/VRTXsa, pSOS+, VxWorks, and ulTRON.

AMSEL includes the amCLI (man page) command-line interpreter, which serves as the central user interface. AMSEL also includes the amwall (manpage), said to provide an integrated, easily understood firewall configuration interface based on the Backus Naur Form.

The IGW/100 provides NAT/firewall features, using iptables for IP level packet filtering and ebtables and arptables for Ethernet MAC level packet filtering. It uses the BNF (Backus Naur form) configuration language.

The amCLI and amWall tools can be access remotely via telnet or SSH. AMSEL also includes amWebd (manpage), a secure web server that supports privilege-separated CGI for secure management applications.

Another interesting AMSEL utility is amselect (manpage), a secure package manager.

AMSEL includes a KAME-compatible IPSec stack supporting IPv6 and IPv4. It uses the Scatterlist CryptoAPI for fast encryption, and supports AES, (3)DES, and blowfish. Supported ciphers include Twofish, Serpent, Cast5/6, Blowfish, and (3)DES. Additional VPN features include:

SHA1/256/512, MD5 and MD4 has-algorithms with HMAC support
Deflate compressions support
IPSec transport- or tunnel-mode
Encapsulated Secure Payload (ESP)-mode
Authentication Header (AH)-mode
ISAKMP support
KAME "racoon" daemon
Authentication with X509 support
DNSSec extensions
Secure Phase 1 authentication / key exchange
Network to network, host to host, net to net

Additional networking features provided by AMSEL include DHCP server and client, HTTP and secure HTTP server, OpenSSH, bridging software, VLAN (IEEE 802.1q), and QoS (IEE 802.1p and 802.1q).

The IGW/100 is available now as part of several Security Gateway Starter Kits from SSV.

Related Stories:

	Discuss Device Profile: SSV IGW/100 industrial security gateway

	>>> Be the FIRST to comment on this article!



	>>> More Linux For Devices Articles Articles >>> More By Linux Devices

Email Article To Friend ♦ Print Version Of Article ♦ PDF Version Of Article

FUEL Database on MontaVista Linux
Whether building a mobile handset, a car navigation system, a package tracking device, or a home entertainment console, developers need capable software systems, including an operating system, development tools, and supporting libraries, to gain maximum benefit from their hardware platform and to meet aggressive time-to-market goals.

Breaking New Ground: The Evolution of Linux Clustering
With a platform comprising a complete Linux distribution, enhanced for clustering, and tailored for HPC, Penguin Computing¿s Scyld Software provides the building blocks for organizations from enterprises to workgroups to deploy, manage, and maintain Linux clusters, regardless of their size.

Data Monitoring with NightStar LX
Unlike ordinary debuggers, NightStar LX doesn¿t leave you stranded in the dark. It¿s more than just a debugger, it¿s a whole suite of integrated diagnostic tools designed for time-critical Linux applications to reduce test time, increase productivity and lower costs. You can debug, monitor, analyze and tune with minimal intrusion, so you see real execution behavior. And that¿s positively illuminating.

Virtualizing Service Provider Networks with Vyatta
This paper highlights Vyatta's unique ability to virtualize networking functions using Vyatta's secure routing software in service provider environments.

High Availability Messaging Solution Using AXIGEN, Heartbeat and DRBD
This white paper discusses a high-availability messaging solution relying on the AXIGEN Mail Server, Heartbeat and DRBD. Solution architecture and implementation, as well as benefits of using AXIGEN for this setup are all presented in detail.

Understanding the Financial Benefits of Open Source
Will open source pay off? Open source is becoming standard within enterprises, often because of cost savings. Find out how much of a financial impact it can have on your organization. Get this methodology and calculator now, compliments of JBoss.

Embedded Hardware and OS Technology Empower PC-Based Platforms
The modern embedded computer is the jack of all trades appearing in many forms.

Data Management for Real-Time Distributed Systems
This paper provides an overview of the network-centric computing model, data distribution services, and distributed data management. It then describes how the SkyBoard integration and synchronization service, coupled with an implementation of the OMG¿s Data Distribution Service (DDS) standard, can be used to create an efficient data distribution, storage, and retrieval system.

7 Advantages of D2D Backup
For decades, tape has been the backup medium of choice. But, now, disk-to-disk (D2D) backup is gaining in favor. Learn why you should make the move in this whitepaper.