RT LOGIC GUARD (RTGuard)

OVERVIEW
The RT Logic RTGuard™ is a cost effective, low-risk, high-assurance, high-performance Cross Domain Solution (CDS) that provides cross domain isolation at the PL3 and PL4 levels for control centers who utilize the Air Force Satellite Control Network (AFSCN) and/or dedicated remote tracking stations.

The RTGuard offers a permanent, plug-in compatible Certification and Accreditation (C&A) solution for existing and new satellite programs that use RT Logic Telemetrix® systems such as the T505, T508, T501, and T500GT.

APPLICATION
To support integrated satellite operations using the AFSCN, ADCCP control and status messages must cross security boundaries over IP networks. Past approaches of segmented operations, firewalls, optical isolation, and data diodes are no longer viable; therefore, trusted guards are now required.

Traditional guard solutions tend to have high recurring and non-recurring costs, average or substandard throughput performance, manual intervention schemes, or reliance on external sources for trusted filtering, making them a marginal match for satellite ground systems. Conversely, the RT Guard employs a single proven AFSCN Core Rule Set to exchange formatted message traffic between security domains for either application. High-performance RTGuard components support multiple concurrent front-end strings, enabling trusted efficient filtering. Rule sets for other message protocols such as scheduling, switch control and file transfer may be layered on top of the AFSCN core rule set creating a full system guard solution.

FEATURES
Seamless Retrofit To Operational Programs Using T505/T508s

Complete Support For AFSCN ADCCP Messages

Same AFSCN Core Rule Set Supports Multiple Programs

Guard Component TSABI/SABI DCID 6/3 PL4 Certified By Multiple Agencies

High-Speed Filter Processing Rates To 800 Mbps

Low Latency

Fiber Optic Isolation

One Instance Supports Multiple Front-End Strings

Plug-And-Play Compatibility With T505, T508, T501, And T500GT

Robust Rule Base

RTGuard Proxy Servers Configurable As Boot Hosts For Black Side Devices

Well Defined Accreditation Boundary

Propagates Guard Alarms/Warning/Events To Network

Provides Audit Trails, Logging And Intrusion Alarms

10/100/1000 Gbps Ethernet Support



MODULAR, FLEXIBLE DESIGN
The RTGuard package seamlessly integrates with existing operational systems and new architectures that utilize T505, T501, T508 and T500GT systems. No changes to the front-end equipment or to the operational software are required. This capability represents significant savings in regression testing, documentation, operational procedures, training, and logistics.

The RTGuard includes a Red Proxy Server, a Black Proxy Server, RT Logic Proxy Server software, a third-party guard system, the RT Logic AFSCN Core Rule-Set, and a 1U Monitor/Keyboard/Mouse/8-port KVM switch for monitor and control of the Red/Black Proxy Servers and guard. The third-party guard is a dedicated Sun Microsystems™ v240 platform running the Trusted Solaris™ (TSol) multi-level secure Operating System (OS) and a previously PL4 certified rule base. The Proxy Servers are 1U Dell server systems running SUSE Linux and RT Logic Proxy Software.

Each RTGuard instance supports up to eight simultaneous equipment strings. A primary and backup RTGuard provides full hot backup for multiple front-end strings. RT Logic’s AFSCN Core Rule-Set is fully integrated into the guard. The AFSCN Core Rule Set provides full message verification of both the T508 control and status messages and associated AFSCN messages, such as the once-per-second message and ranging data.

The RTGuard is available in the following configurations:

STANDARD CONFIGURA-
TIONS

  • RTL-RTGUARD-RPKG: RTGuard Retrofit system
  • RTL-RTGUARD-NPKG: RTGuard system
SPECS
Satellite Control Network Compatibility
  • AFSCN ADCCP
  • Custom
Performance
  • 800 Mbps Throughput Rate
  • Low Latency Contribution
Inputs/Outputs
  • 10/100/1000 Gbps Ethernet
Hardware
  • Dell, SUN Servers
  • Dual 10/100/1000 Ethernet NICs
Control/Monitoring

Dimensions
  • 2U, 5U Rack-Mountable Configurations
Power (Typical)
  • 110/220 VAC, 700 Watts
  • 60 Hz
  • Compatible With U.S. Or European Power Req
Environmental
  • 10 °C To 35 °C Relative Humidity
Regulatory
  • FCC
  • CE