
Choose Your Level of Security. The new Message Authentication Protocol (MAP) secures byte-oriented data packets, such as those found on Modbus® or DNP SCADA networks, with encryption and/or authentication algorithms. Authentication of the data packets ensures the data are from a trusted source and not modified en route. Encryption not only adds greater security, but it also provides privacy. This is especially important if the data find their way onto publicly accessible networks, such as spread spectrum radios or telephone infrastructures.
| Cipher Protocol |
Encryption |
Authentication |
| Suite 1 |
128-bit AES |
HMAC SHA-256 |
| Suite 2 |
128-bit AES |
HMAC SHA-1 |
| Suite 3 |
None |
HMAC SHA-256 |
| Suite 4 |
None |
HMAC SHA-1 |
Phase in Security With Mixed-Mode Functionality. The new option also provides mixed-mode functionality for multiple cipher suites to operate on the same serial multidrop network. It even allows for legs of the serial network to operate with no security. In this way, security system architects can phase in security by adding SEL-3021-2 devices to the unsecured legs later.
Satisfy NERC/ERO CIP Network and Security Requirements by Logging Access Attempts. Logging allows 1,024 volatile SER logs and 512 nonvolatile history logs. Log access attempts, remote operators, operation data, length of sessions, and time/date stamps enhance the security of SCADA, metering, and protection systems.
Set and Analyze Your Security System Without Removing it From Service Through Secure, Nonintrusive Setup and Monitoring. With SEL-5809 Settings and Diagnostic Software, perform SEL-3021-2 configuration and status monitoring via a simple graphical user interface. There are two order options for this interface: USB or Wi-Fi (IEEE 802.11b). This operator interface is secured by cryptographic session authentication and AES encryption. The wireless option has the addition of WEP protection.
|

Secure Ethernet Communications for Legacy Serial Devices. Combine SEL-2890 Ethernet Transceivers with SEL-3021-2 Serial Encrypting Transceivers to communicate with an SEL-351 Directional Overcurrent and Reclosing Relay over the Ethernet. The SEL-2890 devices create a serial-to-Ethernet tunnel, while the SEL-3021-2 devices provide security through data encryption and authentication.

Click for larger image
The SEL-3021-2 and SEL-2890 enhance the security of critical infrastructure systems with encryption, authentication, and logging for legacy serial devices.

Budgetary Retail, Quantity 1: $540
(Prices displayed are for planning purposes and are subject to change. Contact your SEL sales representative today for a quote on configurations and quantities to meet your needs.)
| |
SEL-3021-1 |
SEL-3021-2 |
SEL-3022 |
| Application |
Secure serial SCADA and EMS links |
Secure remote or engineering access |
Convert wired to wireless access |
| Low Latency |
Yes |
No |
No |
| CIP Logging |
No
|
Yes |
No |
| Encryption |
Yes |
Yes |
Yes |
| Authentication |
No |
Yes |
Yes |
| Mixed Mode |
No |
Yes |
No |
| FIPS 140-2 |
Yes |
No |
No |
|