Encore Networks

 

     NERC/CIP Compliance - at a Glance

User Access and Passwords
CIP-004-1
CIP-005-1
CIP-007-1

 Individual user accounts and passwords
 Required strong passwords, expiring passwords, etc.
 Digital security packages
 Strong Two-factor authentication – IKE Support

Access Control Management
CIP-003-1
CIP-005-1
 Centralized administration
 Individual administration accounts and passwords
 Comprehensive reports: lists of users, assets, access points, etc.
Electronic Security Perimeter
CIP-005-1
CIP-007-1
 Secure Access Points
 Access denied by default
 Technical Control Methods (2-factor authentication, etc.)
 Electronic access monitoring and logging
 Appropriate use banners
Network / Routing Security
CIP-005-1
CIP-007-1
 Enable/Disable Ethernet Ports / Services
 Firewall / VPN
 IP Access Control
 802.1x Port Security / 802.1Q VLAN
 Intrusion Detection System/Denial of Service
 AES256 or 3DES Encryption
 Selective Layer Encryption (SLE) for VSAT
 Programmable changing of Security Keys
 SNMP guarantee traps
Dial-up Security
CIP-005-1
 Secure dial-up modem access control, monitoring and logging
 VPN Cellular access for failover
Logs, Reports and
Audit Resources
CIP-003-1
CIP-004-1
CIP-005-1
CIP-007-1
CIP-008-1
 Comprehensive reports
 Detailed access logs with user, port and connection information
 User, Administrator and Asset and Access Point lists
 NERC CIP Auto Audit report
 Cyber incident reports
Employee termination /
User rights revocation
CIP-004
 Account / security credential expiration
 Administrator initiated user rights revocation
 Suspended user accounts
Alerts and Notifications
CIP-005
CIP-007
 Configurable system alert email messages (SNMP)
 Unauthorized access attempt notification
 System lockout / system error notification
Security Patch Management
CIP-007
 Published Security Patch scrubs
 Remote upgrades and auto-update
Malicious Software Prevention
CIP-007-1
 Encrypted operating system
System Recovery
CIP -009
 Multi-master, multicast support for Serial SCADA applications
 Resilient networking w. Cellular technologies primary/backup, with VRRP support.
 Two code & configuration regions
 

BANDIT II Data Sheet                BANDIT III Data Sheet                VSR-1200 Data Sheet

   Encore Networks, Inc.   © 2015