SecFlow-1v Ds Ver 2 2 Tenders Sept 25
SecFlow-1v Ds Ver 2 2 Tenders Sept 25
SecFlow-1v
Ruggedized Multiservice Gateway
• Enhanced security capabilities: stateful firewall, VPNs, When equipped with LoRaWAN radio, SecFlow-1v aggregates
automated PKI and optional SCADA-aware Firewall multiple low-power low-bandwidth sensors/meters deployed
over a wide area. This provides an ideal solution for rural and
• Resilient HSPA+/LTE cellular network uplink for other non-dense areas saving CAPEX and OPEX.
maximum service continuity and built-in GNSS for
The gateway is designed for installation under harsh
location reporting environmental conditions. It features DIN-rail mount, IP30
• Reduced OPEX with secure Zero Touch provisioning protection level, wide operating temperature range (-40°C to
75°C) without fans, and EMI immunity (IEC 61850-3, IEEE 1613
• Hosting of third-party software for customized and EN 50121-4).
applications (Edge computing) SecFlow-1v supports several powering options that all use an
• SCADA Protocol Gateway for IEC-101, IEC-104, Modbus- embedded isolated DC power supply, to meet the harsh
RTU/TCP, and DNP3 protocols environmental requirements.
• Option for second cellular modem, Wi-Fi or LoRaWAN MARKET SEGMENTS AND APPLICATIONS
(Future*)
SecFlow-1v addresses the Industrial IoT, for example:
• Embedded isolated DC power supply • Distributed automation in secondary substations
• Enhanced EMI and immunity according to IEC 61850-3, • Smart meter concentration
IEEE 1613, EN 50121-4 (Future*) • Water Resources Management
• Smart Retail
SecFlow ®1v is an industrial IoT gateway, a member of RAD’s • Out-of-band management using cellular uplink
SecFlow suite of ruggedized Ethernet products.
SecFlow-1v is an open platform hosting third-party software,
INTEROPERABILITY
besides its communication capabilities. SecFlow-1v operates with SecurityGateway, SecFlow-1, and
SecFlow-1v features four GbE Copper ports and one GbE SFP SecFlow-2.
port, two serial RS-232 ports or one RS-232 and one RS-485/2W
port, PoE, and a cellular modem with two SIM cards for ROUTER AND VPN SERVICES
maximum link resiliency.
SecFlow-1v features static routing, OSPF, BGP, VRF and
SecFlow-1v supports third-party applications using Linux NAT/NAT-Traversal.
containers for quick introduction of new capabilities for
The device features a VPN gateway with two operation modes:
Industrial IoT solutions.
• Inter-site connectivity using IPsec tunnels
SecFlow-1v is equipped with serial interfaces for connectivity of
legacy RTUs with new IP-based IEDs. SecFlow-1v gateway • Remote user access, using SSH
converts legacy IEC-101 protocol to IP-based IEC-104, enabling Inter-site VPN based on IPsec encrypted link ensures L3
seamless communication from the IP SCADA to both the old and transparent connection of the Ethernet networks sites.
new RTUs. This provides a single box solution for multi-service For remote access, the router uses an SSH-encrypted tunnel,
applications and smooth migration to all-IP networks. with user authentication and specific access authorization.
In addition to its cellular uplink that provides wireless connection
towards the network, SecFlow-1v can be equipped with
additional wireless technologies. When equipped with Wi-Fi,
SecFlow-1v acts as an access point, aggregating several users,
like on site technicians or sensors, saving the need for wired
connection or multiple costly cellular connections from each
device.
Data Sheet
SecFlow-1v
Ruggedized Multiservice Gateway
3G/LTE
Wireless Network
Priv ate VPN
Remote Sites Operation Ce nte r
IP Services
Serial VPN
SecFlow-1v
RTU NMS
ETH FO
PSN
PoE
Camera
2
Data Sheet
SecFlow-1v
Ruggedized Multiservice Gateway
Remote Site
IP/TCP
Central Site
RTU
IP/TCP
Master
ETH ETH
RTU PSN
Serial
SCADA
SecFlow-1v
RTU PLC
Serial
RTU
3
Data Sheet
SecFlow-1v
Ruggedized Multiservice Gateway
GNSS Tools
GPS – American (default) TFTP/SFTP
Galileo – European Multiuser TACACS+
NETWORKING TIMING
L3 mGRE DMVPN Local time setting
L3 IPSec VPN SNTP
OpenVPN
SECURITY
SCADA gateway for IEC101/104, Modbus RTU/TCP and DNP3
Stateful Firewall
ROUTER
IPsec
Static routing, OSPFv2, BGP, VRF, IPv4, NAT, NAT-T
AES128 and AES256 GCM encryption
MANAGEMENT GENERAL
4
Data Sheet
SecFlow-1v
Ruggedized Multiservice Gateway
5
Data Sheet
SecFlow-1v
Ruggedized Multiservice Gateway
SF-1V/E2/48V/4U1S/POE/2RS/HSP SF-1V/E2/12V/4U1S/2RS/L1(2,3,4)/G/WF
E2 chassis, 48 VDC (44-57 VDC) power supply, 4 GBE copper E2 chassis, 12 VDC (11–30 VDC) power supply, 4 GBE copper
ports, 1 GBE SFP port, Power over Ethernet, 2 RS-232 Interfaces, ports, 1 GBE SFP port, 2 RS-232 Interfaces, LTE modem for
HSPA+ (high-speed packet access) modem, 3.5 Gb Europe/North America AT&T/Oceania and Latin America/North
SF-1V/E2/48V/4U1S/POE/2RS/L1(2,3,4) America, Verizon wireless + AT&T, integrated GPS, wireless LAN
E2 chassis, 48 VDC (44-57 VDC) power supply, 4 GBE copper SF-1V/E2/48V/4U1S/POE/2RS/HSP/G/WF
ports, 1 GBE SFP port, Power over Ethernet, 2 RS-232 Interfaces, E2 chassis, 48 VDC (44-57 VDC) power supply, 4 GBE copper
LTE modem for Europe/North America AT&T/Oceania and Latin ports, 1 GBE SFP port, Power over Ethernet, 2 RS-232 Interfaces,
America, North America, Verizon wireless + AT&T HSPA+ (high-speed packet access) modem, 3.5 Gb, integrated
GPS, wireless LAN
SF-1V/E2/48V/4U1S/2PA/2RS
E2 chassis, 48 VDC (44-57 VDC) power supply, 4 GBE copper SF-1V/E2/48V/4U1S/POE/2RS/L1(2,3,4)/L1(2,3,4)
ports, 1 GBE SFP port, two Ethernet ports with Power over E2 chassis, 48 VDC (44-57 VDC) power supply, 4 GBE copper
Ethernet for Airmux, 2 RS-232 Interfaces ports, 1 GBE SFP port, Power over Ethernet, 2 RS-232 Interfaces,
dual LTE modem for Europe/North America AT&T/Oceania and
SF-1V/E2/WDC/4U1S/2PA/2RS/HSP
E2 chassis, wide range 20–60V DC power supply, 4 GBE copper Latin America/ North America, Verizon wireless + AT&T
ports, 1 GBE SFP port, two Ethernet ports with Power over SF-1V/E2/48V/4U1S/POE/2RS/L1(2,3,4)/WF
Ethernet for Airmux, 2 RS-232 Interfaces, HSPA+ (high-speed E2 chassis, 48 VDC (44-57 VDC) power supply, 4 GBE copper
packet access) modem, 3.5 Gb ports, 1 GBE SFP port, Power over Ethernet, 2 RS-232 Interfaces,
SF-1V/E2/WDC/4U1S/2PA/2RS/L1(2,3,4) LTE modem for Europe/North America AT&T/Oceania and Latin
E2 chassis, wide range 20–60V DC power supply, 4 GBE copper America/ North America, Verizon wireless + AT&T, wireless LAN
ports, 1 GBE SFP port, two Ethernet ports with Power over SF-1V/E2/48V/4U1S/POE/2RS/L1(2,3,4)/G/LR1(LR2,LR3,LR4)
Ethernet for Airmux, 2 RS-232 Interfaces, LTE modem for E2 chassis, 48 VDC (44-57 VDC) power supply, 4 GBE copper
Europe/North America AT&T/Oceania and Latin America, North ports, 1 GBE SFP port, Power over Ethernet, 2 RS-232 Interfaces,
America, Verizon wireless + AT&T LTE modem for Europe/North America AT&T/Oceania and Latin
America/North America, Verizon wireless + AT&T, integrated
FUTURE CONFIGURATIONS GPS, LoRaWAN modem – see How to order a LoRaWAN package
Note: LR1(LR2,LR3,LR4) means that any of LR1/LR2/LR3/LR4 options can
The following ordering options are part of roadmap. RAD will be ordered:
update regarding the options availability within the official
• LR1 – LoRaWAN modem with 8 channels and frequency scheme
rollout and release announcements.
according to EU433; must be ordered with LR1 software packages
SF-1V/E2/12V/4U1S/2RS/HSP/G/WF • LR2 – LoRaWAN modem with 8 channels and frequency scheme
E2 chassis, 12 VDC (11–30 VDC) power supply, 4 GBE copper according to EU868; must be ordered with LR2 software packages
ports, 1 GBE SFP port, 2 RS-232 Interfaces, HSPA+ (high-speed • LR3 – LoRaWAN modem with 8 channels and frequency scheme
packet access) modem, 3.5 Gb, integrated GPS, wireless LAN according to AU915; must be ordered with LR3 software packages
• LR4 - LoRaWAN modem with 8 channels and frequency scheme
SF-1V/E2/12V/4U1S/2RS/HSP/G/HSP according to US915; must be ordered with LR4 software packages
E2 chassis, 12 VDC (11–30 VDC) power supply, 4 GBE copper
SF-1V/E2/WDC/4U1S/2RS/HSP/G/HSP
ports, 1 GBE SFP port, 2 RS-232 Interfaces, HSPA+ (high-speed
packet access) modem, 3.5 Gb, integrated GPS, HSPA+ (high- E2 chassis, wide range 20–60V DC power supply, 4 GBE copper
ports, 1 GBE SFP port, 2 RS-232 Interfaces, HSPA+ (high-speed
speed packet access) modem, 3.5 Gb
packet access) modem, 3.5 Gb, integrated GPS, HSPA+ (high-
SF-1V/E2/12V/4U1S/2RS/L1(2,3,4)/L1(2,3,4) speed packet access) modem, 3.5 Gb
E2 chassis, 12 VDC (11–30 VDC) power supply, 4 GBE copper
SF-1V/E2/WDC/4U1S/2RS/L1(2,3,4)/G/L1(2,3,4)
ports, 1 GBE SFP port, 2 RS-232 Interfaces, dual LTE modem for
E2 chassis, wide range 20–60V DC power supply, 4 GBE copper
Europe/North America AT&T/Oceania and Latin America, North
ports, 1 GBE SFP port, 2 RS-232 Interfaces, LTE modem for
America, Verizon wireless + AT&T
Europe/North America AT&T/Oceania and Latin America/ North
SF-1V/E2/12V/4U1S/2RS/L1(2,3,4)/G/L1(2,3,4) America, Verizon wireless + AT&T, integrated GPS, LTE modem
E2 chassis, 12 VDC (11–30 VDC) power supply, 4 GBE copper for Europe/North America AT&T/Oceania and Latin America/
ports, 1 GBE SFP port, 2 RS-232 Interfaces, LTE modem for North America, Verizon wireless + AT&T
Europe/North America AT&T /Oceania and Latin America/North
America, Verizon wireless + AT&T, integrated GPS, LTE modem SF-1V/E2/WDC/4U1S/2RS/L1(2,3,4)/RG
E2 chassis, wide range 20–60V DC power supply, 4 GBE copper
for Europe/North America AT&T /Oceania and Latin
ports, 1 GBE SFP port, 2 RS-232 Interfaces, LTE modem for
America/North America, Verizon wireless + AT&T
Europe/North America AT&T/Oceania and Latin America/ North
Note: In options with two modems, both modems are of the same type
(L1, L2, L3, or L4)
America, Verizon wireless + AT&T, extended temperature, IEC
61850-3 and IEEE-1613 compliant
6
Data Sheet
SecFlow-1v
Ruggedized Multiservice Gateway
SF-1V/E3/48V/4U1S/POE/2RS/L1(2,3,4)/PLCD PS-ZT-STAGING
E2 chassis, 48 VDC (44-57 VDC) power supply, 4 GBE copper Local Zero Touch staging service package (one per project)
ports, 1 GBE SFP port, Power over Ethernet, 2 RS-232 Interfaces, PS-ZT-ONSITE-STAGING
LTE modem for Europe/North America AT&T/Oceania and Latin Onsite Zero Touch staging service package (one per project)
America/North America, Verizon wireless + AT&T, PLC demo, 6
digital inputs, 6 digital outputs, 6 analog inputs – see How to Please contact your local RAD partner for additional
order a PLC package configuration options
7
Data Sheet
SecFlow-1v
Ruggedized Multiservice Gateway
Software
For PLC options:
SF-1V-SW/PLC
Software package for SecFlow-1v, PLC - 6 digital inputs, 6 digital
outputs, 6 analog inputs
SF-1V-SW/PLC/SCDFW/IDS
Software package for SecFlow-1v, PLC - 6 digital inputs, 6 digital
outputs, 6 analog inputs, SCADA firewall for IEC-104, DNP3-TCP,
MODUBUS-TCP, Tap mode for IDS
For regular options (non-PLC or LoRa):
SF-1V-SW/SCDFW/IDS
Software package for SecFlow-1v, SCADA firewall for IEC-104,
DNP3-TCP, MODUBUS-TCP, Tap mode for IDS
SF-1V-SW/SCDFW/IDSIPS
Software package for SecFlow-1v, SCADA firewall for IEC-104,
DNP3-TCP, MODUBUS-TCP, Inline for IDS and/or IPS
www.rad.com
715-150-09/19 (2.2) Specifications are subject to change without prior notice. © 1988–2019 RAD Data Communications Ltd. RAD products/technologies are protected by
registered patents. To review specifically which product is covered by which patent, please see ipr.rad.com. The RAD name, logo, logotype, and the product names MiNID,
Optimux, Airmux, IPmux, and MiCLK are registered trademarks of RAD Data Communications Ltd. All other trademarks are the property of their respective holders.