8 hot swappable 2.5″ SSDs and 2 internal SSDs – Up to 60.8TB capacity
Intel® Xeon Processor D-1518 Socket FCBGA 1667 supported CPU TDP support 35W
4 Cores (upgradable to 8 and 16 Cores), 8 Threads /6MB Cache
Up to 128GB Unbuffered ECC/non-ECC UDIMM, DDR4- 2133MHz, in 4 DIMM slots
2133/1866/1600MHz ECC DDR4 ECC RDIMM and ECC/Non-ECC UDIMM
4GB, 8GB, 16GB, 32GB
Corrects single-bit errors Detects double-bit errors (using ECC memory)
M.2 Interface: 1 SATA/PCI-E 3.0 x4
Broadcom 2116 SW controller for 16 SATA3 (6Gpbs) ports; SAS2 and SATA3
Support for Intelligent Platform Management Interface v.2.0 IPMI 2.0 with virtual media over LAN and KVM- over-LAN support
Dual LAN with 10G SFP+ from D-1500 SoC; Dual LAN with 1GbE w/Intel® I210
Aspeed AST2400 BMC
Status/Power, USB, LAN
Power, Reset, Copy
0 – 60 ̊C (32 ̊F ~ 140 ̊F)
1 x 12cm (12V DC)
12.8 lbs (w/o drives)
Height: 9.8” (243 mm) Width: 7.0” (178 mm) Depth: 9.5” (241 mm)
ENCRYPTION KEY MANAGEMENT:
“YOUR SECURITY IS THE KEY . . . THE KEY IS YOUR SECURITY”
The Ciphertex CX-Linux Operating System provides three (3) levels of Encryption key management.
- Ciphertex-Protect Encryption Key® – FIPS 140-2 Level 3 certified encrypted storage. Encrypted data residing on a Ciphertex SecureNAS® cannot be accessed unless the Ciphertex-Protect® key is unlocked and physically inserted into the USB-C port on the front of the server.
- Key Server – CX-Linux supports centralized storage and management of the encryption key(s) on any key server supporting KMIP.
- Passphrase – A user or admin supplied passphrase can be up to 256 characters.
DATA AT REST MANAGEMENT:
Data is protected with the Ciphertex CX-Linux implementation of the US Government’s AES-256 Advanced Encryption Standard. It simply cannot be accessed by unauthorized intrusion even if the server is stolen or its disk drives are taken.
CONTROLLED ACCESS TO USB PORTS:
Your CX-Linux admin can opt to disable USB port access, including Ciphertex Quick-Link® access. As long as USB access is disabled, the SecureNAS® will ignore all USB devices and eliminate any possibility of accessing (“Thumb Sucking”) the data residing on the server.
DATA TRANSFER ENCRYPTION:
CX-Linux employs SSL certificates in order to enable services, thereby eliminating the possibility of the loss of important data. HTTPS and FIPS support RSA-2048 encrypted communication that protects sensitive data from being transmitted over a network. CX-Linux can generate a unique SSL certificate.
The integral, preconfigured CX-Linux firewall allows total lock down of the SecureNAS® by restricting network access to only authorized SecureNAS® defined services.
***FLEXIBLE ACCOUNT MANAGEMENT***
BUILT IN ADMINISTRATOR:
CX-Linux defines an administrator account, which cannot be deleted, ensuring login access to your SecureNAS® at all times. While the passphrase can be changed for the administrator account, it will always be part of the system.
USERS AND GROUPS:
Create accounts and groups for controlling individual user access to functionality and data on the SecureNAS®.
CX-Linux integrates with ADS in order to provide user and group authentication for SMB/CIFS shares.
***STORAGE AND SHARING***
CX-LINUX ZFS IMPLEMENTATION:
The CX-Linux implementation of ZFS provides a simplified way of managing filesystems with background data redundancy management and varying levels of compression.
CX-Linux ZFS eliminates the user maintenance tasks that traditional RAID implementations require. It is self-healing and highly resistant to data loss as opposed to standard RAID systems, while providing superior performance.
A highly optimized version of block based data deduplication to reduce storage space consumption while limiting the impact of drive read and write speeds.
Share filesystems over the network that can be accessed by designated FTP clients.
Network sharing of filesystems with security options on a per user basis supported by both Windows Active Directory authentication and Linux.
Quick and easy setup of NFS share filesystems.
Share data in an industry standard LTO tape format for easy sharing of data.
Reserve sections within your CX-Linux created storage on your SecureNAS® for network clients to access as a local drive that can be secured with CHAP authentication, thereby allowing the sharing of centrally managed storage.
CX-Linux allows your SecureNAS® to share the data on a USB drive over your local network.
Customize the IP Address and DNS settings using a unique algorithm that detects only the changed parts of files and MTU for each network interface.
Configure up to three (3) DNS addresses and a DNS search path.
Combine network interfaces to enhance performance by aggregating their bandwidths.
Create routes for individual network interfaces and assign their priority for optimizing routing.
Add custom host entries in order to resolve host names without using a DNS.
***BACKUP/RESTORE AND UPDATE***
Create backup schedules that can be saved to local drives, LTO tape and industry standard cloud services. These backups are available to restore your SecureNAS® in the event this becomes necessary for any reason.
CLIENT AND PEER BACKUP/RESTORE:
Centrally manage backup and restore functions of computers on the network with your SecureNAS®.
Create snapshots which can be used to restore your SecureNAS® to a specific, previous point in time.
Remotely save system configurations so they can be restored on the same SecureNAS® or on another SecureNAS® System updates are done remotely through the server’s web interface, without physical interaction.
***STATUS AND NOTIFICATIONS***
View both system logs and user logs to monitor the health and activities of your SecureNAS®.
CX-Linux provides the facility to monitor and fine tune performance of your SecureNAS® hardware.
Monitor data drive health for advance warning of a potential drive failure so that preventive action can be taken.
CX-Linux employs the LCD front panel of your SecureNAS® to display status information.
Access the sensor monitor via the SecureNAS® Dashboard to view the current status of its hardware components. Any component in an out-of-range condition will trigger a notification.
Configure CX-Linux to automatically send event notifications to email addresses that you designate.
Ciphertex CX-Linux+ is Ciphertex CX-Linux customized to meet your unique requirement(s). That’s correct! If there are any operating system features that you need/want which are not currently included in CX-Linux, Ciphertex has got you covered with its industry leading Custom Software Design Service.