Industrial & IoT - ES

H5 Rail UTM

The ultimate NGFW for Railways

Product Highlights

  •    NGFW gateway for rolling stock
  •    NGFW gateway for rolling stock
  •   Firewall Throughput 2,8Gbps
  •   NGFW Throughput 1Gbps
  •   4 Gb Ethernet ports switch to connect to LAN
  •   Ready for train operators security services
  •   Remote and Virtual Appliance management
  • Introduction

    Safeguarding rolling stock communication networks from any kind of cyber-attacks and vulnerabilities is critical to protect the safety of passengers and workers as well as of assets. Teldat H5 Rail UTM is a special edge gateway designed to offer New Generation Firewall (NGFW) funcionalities providing comprehensive 360-degree cybersecurity protection ranging from advanced IDS/IPS, SSL decryption, threat extraction, sandboxing, antivirus, DoS prevention, application control. 

    H5 Rail UTM can operate in either cloud or virtual appliance services to offer advanced security features to protect the whole LAN on board the train.

     

    Competitive Advantages

    Comprehensive 360-degree protection

    Including also advanced IDS/IPS, SSL decryption, threat extraction, sandboxing, antivirus, DoS prevention, application control, URL filtering and ZTNA.

     

    Enterprise-class data connectivity

    Edge router with high speed, up to 1000 Mbps IMIX ratio in switching/routing scenarios, sophisticated QoS and professional VPN-multivendor capabilities

    Cybersecurity made in Europe label

    The cybersecurity solution meets the stringent requirements established by internationally recognized standards, approval processes and security benchmarks.

    Hardware design certified for Railways.

    Certified according to railway standards (EN 50155, EN 50121-3-2, EN 45545-2, EN 301 908-1, EN 301 511) can work in extreme harsh environments.

    Description

    Teldat H5 Rail UTM edge gateway is specially designed for train operators with strong IT/OT security requirements on board, it can be deployed in either a management console located in the cloud or a virtual format in a private datacentre where to access it simply requires a web browser and internet connection.

    This edge gateway while grants a secure internet access via encrypted VPNs data communications, it foremost provides NGFW functionalities to protects the whole communication network system from external intrusions. The H5 Rail UTM also allows a simple and quick deployment with Zero Touch Provisioning (ZTP) and it is compatible with Teldat cloud services offering customers a more agile and affordable user experience without sacrificing full functionality, security, or reliability.

    The H5 Rail UTM provides LAN connectivity through a 4-port Gigabit Ethernet switch, and it can be controlled locally, if required, via console port.

    Key Features

    NGFW as a service for enhanced traffic control
    The NGFW generates policies allowing 360-degree protection on board the rolling stock. With throughput of 1Gbps can handle IT/OT services without compromising the communication and maintaining the integrity of the data. 
    Hardware encryption
    The built-in switch is ideal for small offices because it eliminates the need for an external switch, thus reducing costs and points of failure. GE, duplex, self-negotiable ports.
    Advanced routing services
    The routing application software includes all the advanced functions needed for the rolling stock on board networks, ready for the professional and most demanding scenarios.
    Intrusion prevention systems (IPSs, TP)
    An effective IPS solution for maximum security at the perimeters of the onboard network for advanced threat and anomaly detection, tailored to railway and operational technology (OT) challenges.
    Onboard 4xGE switch
    Powerful CPU with hardware encryption, available as an option, offering an aggregated encrypted performance greater than 1Gbps.
    Integrated within the Teldat SD-WAN solution
    Teldat SD-WAN multitenant solution for unified network management adding user-defined parameters, SLAs, policies, server load and new applications, QoS adjustments, and remote site registration/deregistration.

    Do you want to know more?

    Download the product datasheet โ†’

    Read our latest Blog Posts