BLACKPIQ / POST-QUANTUM IPsec

Post-quantum IPsec.
Locked to the port.

Protect industrial Ethernet with a post-quantum IPsec tunnel using optional hybrid ML-KEM key establishment, plus physical locking at the controller.
Hybrid ML-KEM / Encrypted IPsec / Port locking
*Optional hybrid ML-KEM-768/1024 in Standard Mode. Both endpoints must support and enable the selected profile.
The supplied BlackPiQ product photo shows the device physically secured to the controller. A highlighted post-quantum IPsec tunnel connects a compatible control-center gateway to BlackPiQ, with optional hybrid ML-KEM and classical key establishment.
The supplied BlackPiQ product photo shows the device physically secured to the controller. A highlighted post-quantum IPsec tunnel connects a compatible control-center gateway to BlackPiQ, with optional hybrid ML-KEM and classical key establishment.
BLACKEDGE / SECURE REMOTE CONSOLE ACCESS

Remote access.
Physical control.

Connect authorized operators to critical RS232 consoles with SSH or HTTPS, strong authentication and physical port security.
SSH & HTTPS / MFA & AAA / Tamper alerts
Simplified BlackEdge diagram: remote operator connects by SSH or HTTPS over Ethernet to BlackEdge, physically locked to a router or switch RS232 console. Optional TACACS+ or RADIUS AAA is a separate side connection.
Simplified BlackEdge diagram: remote operator connects by SSH or HTTPS over Ethernet to BlackEdge, physically locked to a router or switch RS232 console. Optional TACACS+ or RADIUS AAA is a separate side connection.
BLACKVAULT HSMs / HARDWARE KEY PROTECTION

Protect the keys.
Keep control.

Generate, safeguard and manage cryptographic keys in protected hardware for enterprise applications and critical infrastructure.
Key generation / Tamper response / Access control
BlackVault HSM touchscreen model with inserted smart card, shown as the example for the BlackVault HSM family.
BLACKVAULT TOUCHSCREEN
HSM / HSM.TAC / HSM.RAS
BLACKSER AES / SERIAL DATA ENCRYPTION

Encrypt serial data.
Protect operations.

Add AES-256 protection to existing RS232 communications serving RTUs, PLCs, meters and protective relays.
RS232 / Modbus · DNP · IEC101 / Inline encryption
BlackSER AES inline RS232 serial data encryptor, front view.
AES-256
SERIAL DATA PROTECTION
RS232
EXISTING SERIAL ASSETS
INDUSTRIAL CONTROL SYSTEM PROTECTION

Critical control.
Post-quantum IPsec.

Protect PLCs, RTUs and IEDs with an optional hybrid post-quantum IPsec tunnel, physically locked to the industrial controller by BlackPiQ.
Hybrid ML-KEM / PLCs · RTUs · IEDs / Port locking
*Optional hybrid ML-KEM-768/1024 in Standard Mode. Both endpoints must support and enable the selected profile.
The supplied BlackPiQ and controller photo with a highlighted post-quantum IPsec tunnel terminating at BlackPiQ and physical protection at the controller Ethernet port. Hybrid ML-KEM key establishment is optional and requires a compatible configuration at both endpoints.
previous arrowprevious arrow
next arrownext arrow
PlayPause
Slider

State Governments Protect Critical Circuits at a Fraction of the Cost of Traditional Automatic Protection Switching

An increasing number of States are evaluating how to cost effectively protect their Public Safety and other critical network infrastructure. Often these networks consist of terrestrial or microwave T1 circuits with no backup path, and circuit failure can lead to disruption of important and sometimes life saving services. Weather, vandals, and hackers represent just some of the risks to these networks.

Deploying a second T1 overlay network for backup is often cost prohibitive in the economic environment currently faced by State governments. However, most States have internal IP networks that connect these same locations or known IP network service providers who can deliver reliable low cost access. With the right equipment, the existing T1 circuit can continue as the primary path, and upon failure, traffic can be automatically switched to the IP network ensuring continued connectivity.

Working with State governments, Engage developed the Link Protector (LPT) feature for our IP•Tube family of circuit emulation products. It monitors the primary T1 path and if a failure condition is detected, converts the T1 to IP and directs the resulting IP packets to the backup IP path. The far end device detects the switch and also sends traffic over the IP circuit.

The IP-Tube with LPT is used to protect T1 circuits over a variety of IP network connections including Ethernet, DSL, microwave and satellite. Switchover and switchback thresholds and time intervals are user programmable to match IP network characteristics and avoid “ping ponging”.

Critcirc1

The IP•Tube LPT feature is one of many key features offered by the Engage IP•Tube product line. The IP•Tube provides numerous other advanced features to ensure high quality transport of T1 circuits over IP, including:

  • Echo Cancellation to improve voice quality when echo is encountered due to excessive delay in some IP networks;
  • Data Compression to reduce Ethernet bandwidth consumed;
  • Protection to automatically switch to an alternate IP path if the primary fails;
  • Load Balancing to distribute IP traffic over multiple low speed IP circuits;
  • Assured Packet Delivery for challenging network environments;
  • Stand alone and Chassis configurations.

The IP•Tube product line also converts T3 and serial circuits (RS232, RS530, V.35, etc.) to packets for effective and efficient transport over IP networks.


Engage logo 990000 rev 2.000
9565 Soquel Drive Dr,
Aptos, CA 95003
 
Telephone: +1-831-688-1021
Toll Free : +1-877-ENGAGE4
​Designed, Fabricated, and Assembled
in America icon
Supported Worldwide

© 1989-2025 Engage Communication, Inc. All Rights Reserved.