Black Box ServSwitch Secure and Secure PLus Manual Do Utilizador

®

SECT 2

The Black Box ServSwitch Secure range of products are highly robust KVMA 
switches for critical applications. When information absolutely must not be 
leaked between systems or networks, the Secure and Secure PLUS units combine 
the necessary isolation with a desirable ease of use. 
ServSwitch Secure units are available in two port and four port versions while 
the ServSwitch Secure PLUS provides four ports with the addition of a smart card 
reader for user authentication purposes.
The ServSwitch Secure units combine a number of overlapping strategies that 
are designed and proven to defeat potential points of infiltration or protect 
against user error.  
Firstly, all channel switching is controlled only from the front panel buttons. No 
keyboard or mouse switching commands are permitted and all operations are 
continually monitored by a dedicated sub-system. Any deviation from a strictly 
ordered sequence of events will result in an error condition, where all channels 
are immediately isolated and the operator is informed via a front panel indicator.
Data Diodes, implemented within hardwired electronic circuitry, rather than 
software, are liberally employed to ensure that critical data paths can flow only 
in one direction. These data diodes ensure that a compromised peripheral, a 
keyboard for instance, cannot read information back from a connected system in 
order to transfer such details to another system. Whenever a channel is changed, 
the connected keyboard and mouse are always powered down and re-initialised 
to provide yet another level of protection against hidden peripheral malware.  
In general, the role of software within the unit has been reduced to an absolute 
minimum to avoid the possibility of subversive reprogramming. Additionally, all 
flash memory has been banished from the design, to be replaced by one time 
programmable storage which cannot be altered. 
The outer casing contains extensive shielding to considerably reduce electromagnetic 
emissions. Additionally, the casing has been designed with as few apertures as 
possible to reduce the possibility of external probing and several primary chassis 
screws are concealed by tamperproof seals to indicate any unauthorized internal 
access. Shielding extends also to the internal circuitry with all channels providing 
a minimum of 60dB crosstalk separation between computer input signals and 
any signals from the other computers at frequencies up to 100MHz.
These are just a few of the many strategies and innovations that have been 
combined to ensure separation between differing systems. Numerous other 
defences lie in wait to defeat any potential threat.