Net­work security


Färist VPN


An approved VPN crypto for secure communication via untrusted IP networks to protect your most sensitive and classified information.

  • Approved and proven
  • Strong encryption
  • Scalable
  • Available in a variety of sizes (form factors)
  • Centralized administration
  • Market leading performance
  • Cost-efficient


SCALABLE AND FLEXIBLE WITH MARKET LEADING PERFORMANCE

Färist VPN is available in a variety of sizes, from small mobile units to high-performance rack-mounted servers. VPN performance ranges from 100 Mbps to 40 Gbps. Färist VPN is also available in ruggedized versions for use in harsh environments, meaning that it conforms to even the most stringent military specifications.

APPROVED AND PROVEN

Färist VPN was developed in close cooperation with the Swedish Defence Materiel Administration and the Swedish Armed Forces. It is approved at the level of Restricted in the EU and in several EU member states. It has been certified in accordance with Common Criteria EAL 5+.

STRONG ENCRYPTION

Färist VPN is based on IPSEC and MACSEC standards and supports digital certificates for automatic key exchange. Encryption is carried out using AES with 256 bits keys. Crypto keys are loaded into the system using smart cards or USB. The system provides perfect forward secrecy.

CENTRALIZED ADMINISTRATION

The VPN solution is administered via a centralized management system, facilitating the effortless management of several local and remote Färist VPN devices.

CAdmin - Network Centric Management


  • Support for Linux and Windows systems
  • Rules-based configuration of the VPN network tunnel topology
  • Monitoring of remote Färist device status
  • Track changes of network configuration
  • Create and manage complex networks
  • Support for networks comprising thousands of units
  • Administration separated completely from user traffic
  • User authentication using smart cards

The centralized management system enables effortless management of both local and remote Färist devices. CAdmin provides efficient support in the creation of networks comprising several crypto devices. This centralized administration tool is easy to use for both configuration and management of even the most complex of networks.

RULE-BASED TUNNEL CONFIGURATION

The rules-based configuration is a very powerful function that enables CAdmin to configure complex network topologies with minimal effort on the part of the administrator. The administrator defines connection rules for endpoints using wildcards and CAdmin can then generate the entire VPN network automatically.

CRYPTO DEVICE GROUPS

CAdmin can divide crypto devices into groups that will share configuration for things like: administrators, accepted CAs, NTP-server, Log-server and similar.

MULTIPLE USERS AND ROLES

CAdmin supports multiple users with different roles – both administrators and operators. Administrators have full access to the administration user interface; operators have read permissions and a restart option. The administrator’s role is customized for those using CAdmin for administration, while the operator role is customized for other monitoring tools and for those using CAdmin solely for remote monitoring.

GRAPHICAL AND INTUITIVE USER INTERFACE FOR FLAWLESS OPERATION

The CAdmin application has an intuitive and user-friendly graphical user interface tailored to simplify the configuration, management and operation of all Färist devices in your network.

Färist Micro


A portable VPN crypto that makes secure communication via untrusted IP networks possible any time, any place.

SMALL, PORTABLE, PRACTICAL

Färist Micro is small enough to go anywhere. Since it is powered by USB, there is no need for an external power adapter and it works everywhere in the world. Once configured, it requires no further interaction with the end user and is ready to go in an instant.

STRONG ENCRYPTION

Färist Micro is based on IPSEC standards and supports digital certificates for automatic key exchange. Encryption is carried out using AES with 256 bits keys. The system provides perfect forward secrecy. Färist Micro connects to a Färist VPN or a Färist Firewall.

CERTIFIED AND APPROVED

Färist Micro was developed in close cooperation with the Swedish Defence Materiel Administration and the Swedish Armed Forces. It is approved at the level of Restricted in the EU and in several EU member states. It has been evaluated in accordance with Common Criteria EAL 4+.

COMPATIBLE

Färist Micro can connect with any portable computer or device with an Ethernet port, such as IP-phones, video conferencing systems etc. VPN performance is 10 Mbps. ESP packets can be encapsulated in UDP for support for NAT traversal.

System overview


Hardware platforms


Färist VPN C200


  • Ports: 4 x RJ45, 1 x RJ45 console, 2 x USB
  • VPN Performance: 500Mbps IPSec, 1Gbps MACSec
  • Power: 230V AC, 12V DC
  • Power Consumption: 10 W typical, 15 W max
  • MTBF: 101283h
  • Dimensions: 44x215x200mm (HxWxD)
  • Weight: 2,2 kg
  • Misc: Compact fanless model. Display, buttons, and on-board card reader. Turn-off display. Rack mount kit available (1 RU)
Färist VPN C200

Färist VPN R210


  • Ports: 6 x RJ45, 2 x USB, 2 x SFP, 1 x console RJ45
  • VPN Performance: 4Gbps MACSec, 2Gbps IPSec
  • Power: 100–240V AC or -36 ~ -72V DC
  • Power Consumption: 65W Typical, 85W Max
  • MTBF: 112 865 h
  • Dimensions: 1 RU, 44 x 430 x 392 mm
  • Weight: 6 kg
  • Misc: Carrier-grade, rear fan model, card reader, display
Färist VPN R210

Färist VPN H310


  • Ports: 8 x SFP+, 2 x USB, 1 x RJ45 Console
  • VPN Performance: 15Gbps IPSec, 40Gbps MACSec
  • Power: Dual 100–240 V AC or -36 ~ -72 V DC, redundant power
  • Power Consumption: 170W Typical, 220W Max
  • MTBF: 111837h
  • Dimensions: 2 RU, 88 x 430 x 450 mm (HxWxD)
  • Weight: 12kg
  • Misc: High performance model, carriergrade, rear fan, display
Färist VPN H310

Färist VPN M100


  • Ports: 4 x RJ45 LAN, 1 x USB-A 2.0,
    1 x “Rugged” USB (Datakey)
    4 x LED indicator, 1 x RS232 service port, 1 x Earth bonding point
  • VPN Performance: 500 Mbps IPSec, 1 Gbps MACSec
  • Power: 10 – 32 V DC
  • Power consumption: 10 W typical, 15 W max
  • Dimensions: 44 x 220 x 303 mm (H x W x D)
  • Weight: 12kg
  • Misc: Rugged fanless model, display, buttons, on-board card reader, “blanking”. Rack mount kit available (1 RU)
Färist VPN M100

Färist Micro A400


  • Ports: 2 x RJ45, 3 x USB
  • VPN Performance: 15 Mbps
  • Power: Via USB or from a separate PSU
  • Dimensions: 111 x 80 x 35 mm
  • Weight: 190g
Färist Micro A400

Färist Micro M300


  • Ports:
    3-pol:
    APU D38999/20FA98PN-LC
    13-pol:
    SOU D38999/20FB35PB-LC
    22-pol:
    APU D38999/20FC35PA-LC
  • 2 x 10/100 Ethernet
  • Serial interface
  • USB 2.0 OTG
  • VPN Performance: 15 Mbps IPSec
  • Power: 10 – 30 V DC
  • Power consumption: 10 W Max
  • Dimensions: 44 x 116 x 145 mm (H x W x D)
  • Weight: 1,2kg
  • Misc: Rugged fanless, Smart card reader
Färist Micro M300

Färist VPN H210


  • Ports: 6 x RJ45, 2 x USB, 10 x SFP, 1 x console RJ45
  • VPN Performance: 10 Gbps MACSec, 5 Gbps IPSec
  • Power: Dual 100–240 V AC or -36 ~ -72 V DC, redundant power
  • Power Consumtion: 110 W Typical, 130 W Max
  • MTBF: 112 865 h
  • Dimensions: 1 RU, 44x430x392mm (HxWxD)
  • Weight: 7 kg
  • Misc: Carrier-grade, rear fan model, card reader, display
Färist VPN H210