BANDIT III™

Industrially Hardened Security Appliance

The BANDIT III™, the latest addition to the Encore’s BANDIT™ (Broadband Access Network Device for Intelligent Termination™) family, is an industrially hardened cyber security appliance with integrated router, firewall, terminal server, serial to IP converter, legacy protocol conversion, and VPN functionality. Ideally suited for electric, gas, oil and water utilities, industrial plant floors, mobile transportation, and traffic control system applications, the BANDIT III™ ensures system data and SCADA network connections directly to the Internet, secure Wide Area Network (WAN) and/or Local Area Network (LAN), or commercial cellular data IP services.

Cyber security is an urgent issue in industries where advanced automation and communications networks have mission critical applications and high reliability is of paramount importance. These industries have mandated industry specific requirements to ensure their data networkingand cyber assets are reliable and secure. The BANDIT III™ has the necessary features to comply with the most stringent security requirements.

The BANDIT III™ supports up to five serial RS232 ports, integrated four port fully managed Ethernet switch, selectable power supply and redundancy options, and an integrated V.92 modem. In addition, the BANDIT III™ supports two expansion slots supporting optional digital connectivity modules such as 56/64K CSU/DSU or T1/E1 CSU/DSUs, allowing for connectivity to public/private WAN Frame Relay services, and/or cellular connectivity modules allowing connectivity to public carrier secure cellular data services. Supported cellular interfaces include CDMA 1X/EVDO Rev A and GSM GPRS/EDGE/UMTS/HSDPA/HSPA.

Summary Points

Industrial hardened cyber security appliance
IP Sec with DES (56 bit), 3DES (168 bit) and AES (256 bit)
Manageability (Monitoring and Configuration)
Provides connectivity over any network (Frame Relay or IP network to include VSAT)
Cellular connectivity option
Up to 6 serial ports for legacy traffic support
Alarm Ports

Application Example:
BANDIT III Application Example

Technical Specifications

General Features
• Data concentration
• Protocol translation
• NERC CIP-compliant firewall security
• Dialup connection, optional
• Manageability (Monitoring and Configuration)
• Real-time clock with battery backup
• VPN

Security Appliance Features
• Integrated router/firewall/VPN
• DMZ LAN port
• NAT
• VPN (up to 30 tunnels)
   - IP Sec (RFC 2401) with DES (56 bit), 3DES (168 bit) and AES (256 bit)
   - GRE (RFC 1701)
   - Internet Key Exchange - IKE (RFC 2409)

Protocols
WAN
• Frame Relay (RFC1490)
• Asynchronous PPP
• Synchronous PPP
• X.25
IP
• IP Routing (RIP v1/v2) or static routing
• DHCP client/server/BootP/Relay
• IP QoS and traffic prioritization
• IP fragmentation/reassembly
• IP routing over VPN
• VRRP (RFC3768) ▶ Ethernet
• 802.1q VLAN tagging
• PPPoE

Serial Legacy Support
• Up to 5 DB25 ports supporting EIA/TIA RS485,RS232, RS422
• Supports any asynchronous or synchronous traffic over IP
• Protocol support for DNP3, IEC 60870-5-101/103/104
MODBUS, CDC, S/NET, CONITEL, ABB, and most electrical
industry proprietary protocols; inquire for additional protocols

Physical Ports
Serial
• 1 universal DB25 port (RS232)
• Optional four DB25 ports (RS232)
• 1 RS232 console ▶ Modem
• integrated 56Kbps V.90/92 with PPP support (PAP/CHAP)
Ethernet
• 3 switched and 1 configurable 10/100 BASE T
Expansion Slot
• 56/64k CSU/DSU
• Single T1/E1 CSU/DSU
• Dual T1/E1 CSU/DSU
• Additional Universal Serial
• CDMA 1X
• CDMA EVDO Rev.A
• GSM GPRS
• GSM EDGE
Alarm Port
• Programmable alarm indicators

Electrical
Power Supply Options
• 15 Watts maximum
• DC: 12VDC, 24VDC, 48VDC, 130 VDC
• AC: 100-240VAC, 50-60Hz (with external adapter)

Environmental
Temperature
• Operating: -40°C to +85°C
• Storage: -40°C to +85°C
• Humidity: 5 to 95%, non-condensing
• Operating (Cellular): -40°C to +85°C

Mechanical
Height: 2.375” (6.0 cm)
Width: 10.375” (26.4)
Depth: 7.5” ( 219.1 cm)
Weight: 2.25 lb. (1.02 kg)

Standards Compliance
• RoHS Compliant
• EMC
   - FCC Part 15
   - EN 55011/CISPR II
   - IEC 61850-3
   - IEEE 1613
• Product Safety
   - UL/CSA 60950-1
   - CAN/CSA-C22.2 No. 60950-1-03
   - EN 60950-1

BANDIT III™

Specifications subject to change without notice

Printable Data Sheet