BLACKPIQ / POST-QUANTUM IPsec

Post-quantum IPsec.
Locked to the port.

Protect industrial Ethernet with a post-quantum IPsec tunnel using optional hybrid ML-KEM key establishment, plus physical locking at the controller.
Hybrid ML-KEM / Encrypted IPsec / Port locking
*Optional hybrid ML-KEM-768/1024 in Standard Mode. Both endpoints must support and enable the selected profile.
The supplied BlackPiQ product photo shows the device physically secured to the controller. A highlighted post-quantum IPsec tunnel connects a compatible control-center gateway to BlackPiQ, with optional hybrid ML-KEM and classical key establishment.
The supplied BlackPiQ product photo shows the device physically secured to the controller. A highlighted post-quantum IPsec tunnel connects a compatible control-center gateway to BlackPiQ, with optional hybrid ML-KEM and classical key establishment.
BLACKEDGE / SECURE REMOTE CONSOLE ACCESS

Remote access.
Physical control.

Connect authorized operators to critical RS232 consoles with SSH or HTTPS, strong authentication and physical port security.
SSH & HTTPS / MFA & AAA / Tamper alerts
Simplified BlackEdge diagram: remote operator connects by SSH or HTTPS over Ethernet to BlackEdge, physically locked to a router or switch RS232 console. Optional TACACS+ or RADIUS AAA is a separate side connection.
Simplified BlackEdge diagram: remote operator connects by SSH or HTTPS over Ethernet to BlackEdge, physically locked to a router or switch RS232 console. Optional TACACS+ or RADIUS AAA is a separate side connection.
BLACKVAULT HSMs / HARDWARE KEY PROTECTION

Protect the keys.
Keep control.

Generate, safeguard and manage cryptographic keys in protected hardware for enterprise applications and critical infrastructure.
Key generation / Tamper response / Access control
BlackVault HSM touchscreen model with inserted smart card, shown as the example for the BlackVault HSM family.
BLACKVAULT TOUCHSCREEN
HSM / HSM.TAC / HSM.RAS
BLACKSER AES / SERIAL DATA ENCRYPTION

Encrypt serial data.
Protect operations.

Add AES-256 protection to existing RS232 communications serving RTUs, PLCs, meters and protective relays.
RS232 / Modbus · DNP · IEC101 / Inline encryption
BlackSER AES inline RS232 serial data encryptor, front view.
AES-256
SERIAL DATA PROTECTION
RS232
EXISTING SERIAL ASSETS
INDUSTRIAL CONTROL SYSTEM PROTECTION

Critical control.
Post-quantum IPsec.

Protect PLCs, RTUs and IEDs with an optional hybrid post-quantum IPsec tunnel, physically locked to the industrial controller by BlackPiQ.
Hybrid ML-KEM / PLCs · RTUs · IEDs / Port locking
*Optional hybrid ML-KEM-768/1024 in Standard Mode. Both endpoints must support and enable the selected profile.
The supplied BlackPiQ and controller photo with a highlighted post-quantum IPsec tunnel terminating at BlackPiQ and physical protection at the controller Ethernet port. Hybrid ML-KEM key establishment is optional and requires a compatible configuration at both endpoints.
previous arrowprevious arrow
next arrownext arrow
PlayPause
Slider

Maryland County Saves Money with Transition from ATM to IP/MPLS Network

As with most local governments, saving money is a major priority for this large Maryland County. One of the cost saving targets was to reduce the annual telecommunications expense by one-million dollars; achievable by migrating from their current ATM network to an Ethernet / MPLS network.

To keep both capital and operational costs low, it was decided to utilize the existing PBX equipment and not acquire Voice over IP (VoIP) gear with its associated training, procedural, and performance changes. Fortunately, some of the PBX branch extenders already supported IP transport capabilities. However, enabling IP transport on the remaining extenders was cost prohibitive, so the County looked into more effective alternatives and found the Engage Communication IP•Tube to be a perfect fit.

The IP•Tube product family is used by governments, enterprises, service providers and the military to convert legacy T1/E1, T3/E3 and serial circuits to packets. It is a proven technology with key features to ensure effective and efficient transport of circuits over IP packet based networks. For the County, the following IP•Tube capabilities were critical:

  • Canceling echo introduced by the IP network to ensure voice quality was not impacted by the migration from ATM to Ethernet / MPLS;
  • Both a multi-slot, redundant power chassis for the central site and compact one rack unit appliance for the remote site;
  • Availability of different quantities of WAN ports to optimize initial cost, with the flexibility to upgrade to more ports in the future via software;
  • Dual LAN ports, with one port dedicated to payload traffic and the other for management.

 ATMIP1

The IP•Tube product family delivers high quality performance even in challenging network environments with assured packet delivery. It also support a wide variety of feature options including automatic switching to a secondary IP path should the primary fail, load balancing onto multiple LAN circuits, and compressing data for more efficient IP network utilization.

By deploying the Engage Communication IP•Tube, the County achieved a return on investment (ROI) in less than 9 months.


Engage logo 990000 rev 2.000
9565 Soquel Drive Dr,
Aptos, CA 95003
 
Telephone: +1-831-688-1021
Toll Free : +1-877-ENGAGE4
​Designed, Fabricated, and Assembled
in America icon
Supported Worldwide

© 1989-2025 Engage Communication, Inc. All Rights Reserved.