Description
Class-Leading Throughput and IOPS with Large Encrypted Tiered Storage Capacity in a Durable Package
Up to 8 hot swappable SSDs for a maximum capacity of 60.8TB. The OS is mirrored on two internal 2.5” SSDs for fail-safe operation. FIPS 140-2 (Level 3) certified Encryption Key used for locking/unlocking encrypted volumes. Hardware accelerated AES-256 bit encryption. Onboard graphics. IPMI. Two available PCIe slots which support optional 10GbE and 40GbE interfaces, PCIe SSD, graphic cards and other compatible devices. Easily connect your Ciphertex SecureNAS@ to any Windows, Mac, or Linux computer via a fast USB-3 connection with the proprietary and secure Ciphertex Quick Link cable. Complete business-ready storage solution with iSCSI cross-platform file sharing. Dual 10GbE fibre LAN included, with optional copper for highly-efficient mission-critical applications. Intel® Xeon® processor D-1518 4-Core, with optional 8 and 16-Core upgrades available. 32GB DDR4 memory expandable to 128GB. Secure, aluminum front door with lock and key to prevent theft and removal during operation and loss of data.
Rugged enclosure ensures military-grade durability and transportability.
The Ciphertex SecureNAS® is certified by the US military environmental test lab. Developed, designed and manufactured in the USA.
SecureNAS CX-80KSD-X
HARDWARE SPECS
Drive Bay
8 hot swappable 8 2.5″ SSDs and 2 internal SSDs – Up to 60.8TB capacity
PERFORMANCE CPU
Intel® Xeon Processor D-1518 Socket FCBGA 1667 supported CPU TDP support 35W
CORES/CACHE
4 Cores (upgradable to 8 and 16 Cores), 8 Threads /6MB Cache
MEMORY CAPACITY
Up to 128GB Unbuffered ECC/non-ECC UDIMM, DDR4- 2133MHz, in 4 DIMM slots
MEMORY TYPE
2133/1866/1600MHz ECC DDR4 ECC RDIMM and ECC/Non-ECC UDIMM
DIMM SIZES
8GB, 16GB, 32GB
MEMORY VOLTAGE
1.2V
ERROR DETECTION
Corrects single-bit errors Detects double-bit errors (using ECC memory)
M.2 EXPANSION
M.2 Interface: 1 SATA/PCI-E 3.0 x4
SAS2
Broadcom 2116 SW controller for 16 SATA3 (6Gpbs) ports; SAS2 and SATA3
IPMI
Support for Intelligent Platform Management Interface v.2.0 IPMI 2.0 with virtual media over LAN and KVM- over-LAN support
NETWORK CONTROLLERS
Dual LAN with 10G SFP+ from D-1500 SoC; Dual LAN with 1GbE w/Intel® I210
GRAPHICS
Aspeed AST2400 BMC
LED INDICATORS
Status/Power, USB, LAN
PUSH BUTTONS
Power, Reset, Copy
TEMPERATURE
0 – 60 ̊C (32 ̊F ~ 140 ̊F)
SMART FAN
1 x 12cm (12V DC)
WEIGHT
20.5 lbs (w/o drives)
SIZE
Height: 9.8” (248.92 mm) Width: 11.25” (285.75 mm) Depth: 9.75” (247.65 mm)
SOFTWARE FEATURES
***SECURITY***
ENCRYPTION KEY MANAGEMENT:
“YOUR SECURITY IS THE KEY . . . THE KEY IS YOUR SECURITY”
The Ciphertex CX-Linux Operating System provides three (3) levels of Encryption key management.
- Ciphertex-Protect Encryption Key® – FIPS 140-2 Level 3 certified encrypted storage. Encrypted data residing on a Ciphertex SecureNAS® cannot be accessed unless the Ciphertex-Protect® key is unlocked and physically inserted into the USB-C port on the front of the server.
- Key Server – CX-Linux supports centralized storage and management of the encryption key(s) on any key server supporting KMIP.
- Passphrase – A user or admin supplied passphrase can be up to 256 characters.
DATA AT REST MANAGEMENT:
Data is protected with the Ciphertex CX-Linux implementation of the US Government’s AES-256 Advanced Encryption Standard. It simply cannot be accessed by unauthorized intrusion even if the server is stolen or its disk drives are taken.
CONTROLLED ACCESS TO USB PORTS:
Your CX-Linux admin can opt to disable USB port access, including Ciphertex Quick-Link® access. As long as USB access is disabled, the SecureNAS® will ignore all USB devices and eliminate any possibility of accessing (“Thumb Sucking”) the data residing on the server.
DATA TRANSFER ENCRYPTION:
CX-Linux employs SSL certificates in order to enable services, thereby eliminating the possibility of the loss of important data. HTTPS and FIPS support RSA-2048 encrypted communication that protects sensitive data from being transmitted over a network. CX-Linux can generate a unique SSL certificate.
FIREWALL:
The integral, preconfigured CX-Linux firewall allows total lock down of the SecureNAS® by restricting network access to only authorized SecureNAS® defined services.
***FLEXIBLE ACCOUNT MANAGEMENT***
BUILT IN ADMINISTRATOR:
CX-Linux defines an administrator account, which cannot be deleted, ensuring login access to your SecureNAS® at all times. While the passphrase can be changed for the administrator account, it will always be part of the system.
USERS AND GROUPS:
Create accounts and groups for controlling individual user access to functionality and data on the SecureNAS®.
ADS INTEGRATION:
CX-Linux integrates with ADS in order to provide user and group authentication for SMB/CIFS shares.
***STORAGE AND SHARING***
CX-LINUX ZFS IMPLEMENTATION:
The CX-Linux implementation of ZFS provides a simplified way of managing filesystems with background data redundancy management and varying levels of compression.
RAID:
CX-Linux ZFS eliminates the user maintenance tasks that traditional RAID implementations require. It is self-healing and highly resistant to data loss as opposed to standard RAID systems, while providing superior performance.
DATA DEDUPLICATION:
A highly optimized version of block based data deduplication to reduce storage space consumption while limiting the impact of drive read and write speeds.
FTP:
Share filesystems over the network that can be accessed by designated FTP clients.
SMB/CIFS:
Network sharing of filesystems with security options on a per user basis supported by both Windows Active Directory authentication and Linux.
NFS:
Quick and easy setup of NFS share filesystems.
LFTS Phoenix:
Share data in an industry standard LTO tape format for easy sharing of data.
iSCSI TARGET
Reserve sections within your CX-Linux created storage on your SecureNAS® for network clients to access as a local drive that can be secured with CHAP authentication, thereby allowing the sharing of centrally managed storage.
PORTABLE USB:
CX-Linux allows your SecureNAS® to share the data on a USB drive over your local network.
***NETWORKING***
TCP/IP:
Customize the IP Address and DNS settings using a unique algorithm that detects only the changed parts of files and MTU for each network interface.
DNS:
Configure up to three (3) DNS addresses and a DNS search path.
BONDING:
Combine network interfaces to enhance performance by aggregating their bandwidths.
ROUTING:
Create routes for individual network interfaces and assign their priority for optimizing routing.
HOSTS:
Add custom host entries in order to resolve host names without using a DNS.
***BACKUP/RESTORE AND UPDATE***
BACKUP/RESTORE:
Create backup schedules that can be saved to local drives, LTO tape and industry standard cloud services. These backups are available to restore your SecureNAS® in the event this becomes necessary for any reason.
CLIENT AND PEER BACKUP/RESTORE:
Centrally manage backup and restore functions of computers on the network with your SecureNAS®.
SNAPSHOTS:
Create snapshots which can be used to restore your SecureNAS® to a specific, previous point in time.
UPDATE:
Remotely save system configurations so they can be restored on the same SecureNAS® or on another SecureNAS® System updates are done remotely through the server’s web interface, without physical interaction.
***STATUS AND NOTIFICATIONS***
STATUS LOGS:
View both system logs and user logs to monitor the health and activities of your SecureNAS®.
PERFORMANCE PROFILE:
CX-Linux provides the facility to monitor and fine tune performance of your SecureNAS® hardware.
SMART:
Monitor data drive health for advance warning of a potential drive failure so that preventive action can be taken.
LCD:
CX-Linux employs the LCD front panel of your SecureNAS® to display status information.
SENSORS:
Access the sensor monitor via the SecureNAS® Dashboard to view the current status of its hardware components. Any component in an out-of-range condition will trigger a notification.
NOTIFICATIONS:
Configure CX-Linux to automatically send event notifications to email addresses that you designate.
***CUSTOMIZATION***
CX-LINUX+
Ciphertex CX-Linux+ is Ciphertex CX-Linux customized to meet your unique requirement(s). That’s correct! If there are any operating system features that you need/want which are not currently included in CX-Linux, Ciphertex has got you covered with its industry leading Custom Software Design Service.
