VCL-9090, NAS & Data Storage Server with Cyber Security

Description

VCL-9090, Ransomware resilient NAS & Data Storage, up to 1.2 petabytes with Network Isolation Equipment, Quantum-Safe Encryption, Vaulted Data Storage through Data Diode & EMP Protected Data Storage. The VCL-9090 is a powerful, Industrial-grade Network Attached Storage (NAS) Server that is designed for businesses and organizations that require high-performance storage, select data sharing, and quick retrieval of large-scale data. VCL-9090, when installed in the Orion Data-storage (ODE) Eco-system provides not only a fault-tolerant, high dependability, high-reliability data storage solution but also offers a high resilience to internal faults as well as to external threats, such as ransomware attacks. VCL-9090 can store up to 60 (HDD) drives, each with a maximum capacity of up to 20 TB giving a raw data storage capacity of more than 1 PB.

Data Sheet (PDF)

Features & Highlights:

• NAS server with up to 60 hard drives and maximum 20 TB per drive storage.
• 4 x Dry Contact external alarm relays which may be wired to external, multiple user-configurable audio and visual alarms.
• Each audio / visual alarm can be assigned to a specific alarm.
• Storage elements (i.e. data drives) can be assigned on a per-interface basis.
• Large capacity for storage makes it an ideal solution for government, businesses and research organizations.
• Vast amounts of data can be stored, including high-quality multimedia files, large datasets, and backups.
• Allows the administrator to assign specific storage elements to specific users so that a particular set of users are granted access to only those specific hard drives.
• The VCL-9090 is a reliable and scalable solution for users that require a scalable data storage solution based on their growing needs and requirements.
• Provides an added layer of security for data access.
• Secure, visual NMS. Allows the data administrator to securely manage the VCL-9090 through an intuitive management and monitoring interface with a 24x7 live view of all operational parameters.
• Prompt notifications of any issues allows the network administrators to take appropriate and timely actions to prevent data loss and mitigate ransomware attacks.
• Allows for customization and flexibility in terms of hardware and software components.
• Can store large amounts of data without compromising on speed or performance.
• Helps businesses and organizations manage their data more efficiently.
• Enables quick access to important files and data.
• Provides a centralized location for data storage.
• In addition to primary data storage, additional VCL-9090 data storage servers can be installed on-location and off-location to provide backup data storage. The concept of storing backup data both on-location and off-location helps greatly in mitigating loss of data due to natural or man-made disasters.
• Greatly reduces the risk of data loss due to hardware failure or other disaster related events.
• Allows for easy expansion of storage capacity as needed.
• Provides cost-effective solution for users in need of large-scale and reliable storage.

Available RAID configuration

Device Specific Information

• Ransomware resilient NAS & Data Storage solution
• Quantum-safe cryptography protection layer – Optional
• Multi-factor Authentication - TOTP (Time + OTP based)
• 2 Factor Authentication based SSH access
• Audio and Visual Alerts in the event of Disk removal/failure
• AI based Behavioural Analytics
• Immutable Snapshots with WORM Technology
• Lock-down of Local Console on Primary and Secondary NAS Systems to prevent un-authorized access
• Hardware Security Modules (HSMs)
• Specialized hardware devices designed to securely store cryptographic keys and perform cryptographic operations.
• HSMs are used in environments where high levels of security are essential, such as in financial services, government, utilities and large enterprises.
• Perpetual Licence at no extra cost
• Data Encryption - AES 256
• Physical Tamper Detection
• Network Management System-Extensive monitoring (HTTP(S) based)
• Encrypted Backup and Disaster Recovery
• On-site and Off-Site data backups
• Periodic, user scheduled, incremental data back up sessions of offsite system with active, hard network isolation
• Encryption key validation before Encrypting any data
• Audio/Visual Alarms in the event when an unvalidated / unauthorized encryption key is attempted to be used
• Recurring Read-only Snapshots
• Long Retention Time on Snapshots
• Daily snapshots (2 weeks retention)
• Weekly snapshots (1 year retention)
• Monthly snapshots (5 years retention)
• Annually snapshots (10 years retention)
• User programmable option to increase the Snapshot
• Retention Duration on the Destination System
• Replicate to a Secondary NAS System
• Using a Separate Replication Network
• Set Separate Administrative Passwords
• Configurable Two-Factor Authentication (2FA) for Administrators

Additional Security Features:

• “Pull Replication” in Offsite Server: The offsite backup server autonomously initiates a network connection to facilitate a scheduled data backup and then automatically disconnect from the network after executing its periodic data backup.
• NTP Synchronization for Scheduled Backup Service: The offsite backup server synchronizes its operations with the on-site Network Time Protocol (NTP) Server, establishing connections at predetermined administrator assigned times and seamlessly going offline upon successful backup completion.
• Resilience to Ransomware Attack via Read-Only Snapshots: The immutability of read-only files and folders provides a robust defence against ransomware attacks by preventing their encryption
• IP Filtering Capabilities: Administrators have granular control over access permissions by specifying the allowed IP domains for specific shared resources
• Network Access Protection: Access to server resources and shares is restricted based on predefined IP address ranges, enhancing security and control Two-step authentication for secured access
• HTTPS Secure Connection: A secure Hypertext Transfer Protocol Secure (HTTPS) connection is established to protect the web-based graphical user interface (GUI) against potential Man-in-the-Middle (MITM) attacks.
• Importable SSL Certificate Requirement: The establishment of HTTPS connections necessitates the presence and utilization of SSL certificates for secure data transmission.
• AES 256-bit Volume-Based Data Encryption: Sensitive data may also selectively be safeguarded through implementation of advanced 256-bit AES encryption, applied at the volume level.

Software Specifications:

• Operating System
• Linux or UNIX based. Either one option is acceptable.
• Licences
• Software and license is included with the equipment at no additional cost or charge. There will be no recurring or additional bi-annual / or annual recurring licence payments that are required to be made after the purchase of the equipment. The included licence is for perpetual use during the lifetime of the NAS data storage server equipment that is being offered.
• Protocols
• CIFS/SMB, AFP, NFS, FTP, HTTP, HTTPS, SSH, iSCSI, SNMP, SMTP, LLDP, WebDAV, S.M.A.R.T
• File System
• Internal: EXT3, EXT4
• External: NFS, CIFS, EXT3, EXT4, NTFS, FAT32
• Networking
• TCP/IP IPv4 & IPv6 Dual Stack
• Dual Gigabit Ethernet with Jumbo Frame
• Multi-IP Setting, Port Trunking, Failover, 802.3ad
• DHCP Client
• UPnP & Bonjour Discovery
• OpenVPN Server, OpenVPN Client
• FTP Server
• FTP over SSL/TLS (explicit)
• Max. Concurrent connections: 256
• Passive FTP Port Range Control
• FTP Bandwidth & Connection Control
• Unicode Support
• Disk Management
  • Online RAID capacity expansion
  • Online RAID Level Migration
  • HDD S.M.A.R.T
  • SCRUB Task
  • SHORT Test
  • LONG Test
  • Offline Test
  • Conveyance Test
  • Bad block scan
  • RAID recovery
• iSCSI
• iSCSI Target
• Virtual Disk Drive
• Server Virtualization
• Supports Virtual Machines
• Jails
• Support OS level virtualization for tamper proofing and maintaining sanctity
• Power Management
• Wake on LAN
• Scheduled power on/off
• Automatic power on after power recovery
• UPS management support
• Administration
• CLI and GUI support
• HTTPS based user interface
• HTTP/HTTPS connections
• Email alerts
• SNMP Traps (v2 & v3)
• Dynamic DNS (DDNS)
• UPS Support with SNMP & USB
• Resource Monitor
• Network Recycle Bin for CIFS/SMB
• Comprehensive Logs (Events & Connections)
• Syslog Client
• Backup & Restore system settings
• Web Based Quick Configuration Wizard

Cyber Security Product Links:

VCL-2702: Network Isolation Switch

VCL-2143: Network MouseTrαp an Advanced Honeypot

VCL-2457: Smart-Rack Management Unit

VCL-5001: Network Traffic Sniffer