KLAS PiONEER 2200 Header Image

KLAS PiONEER 2200

The KLASPiONEER 2200 is the smallest and lightest, multi-user secure mobile communication system available today. Using the SecNet 54/KIV-54 as the primary Type 1 encryption device and the KLASRouter for RED side routing, the 2200 allows access to TS/SCI and below networks for up to eight data devices. In addition, the 2200 utilizes a Juniper SSG5 on the BLACK side for FIPS 140-2 five data devices. The KLAS PiONEER 2200 combines all of these features in a rugged and discreet case. The innovative design of the 2200 gives it the utility required by the first-in communicator, discreet operative, or executive traveler. The KLAS PIONEER 2200 can be provisioned to operate seamlessly over Inmarsat's BGAN network and other public networks such as cellular, hotel broadband and airport Wi-Fi. Flexible AC and DC power and charging features plus internal battery support makes the KLAS PiONEER 2200 suitable for either the briefcase or backpack.

Key Features

  • Lightweight design: Fitting easily into a laptop bag and weighing just 7lbs, KlasPioneer 2200 is the ideal portable secure networking solution
  • Connect to any laptop: KLASPiONEER 2200 quickly integrates into existing configurations, utilising existing architecture while providing additional features and Type 1 encryption security
  • All components are ruggedized, but the inconspicuous design of the housing allows the KLASPiONEER 2200 be used in tactical and tactical environments
2200 Front Panel

Physical

  • Dimensions: 12.1" x 9.9" x 2.2"
  • Weight: 7lbs
  • On/Off switch
  • Carrying handle with dust protector for front panel
  • Wide-ranging DC input
  • 15V DC output
  • Flush mounted red side LEDs
  • Battery level indicator
  • Access door to KIV-54
  • All components are shock mounted

Power

  • 90-264V AC-DC brick
  • 10-36V DC input
  • 15V DC output for charging of BGAN UT or laptop. Custom cables available for other DC devices
  • MP3412R ruggedized battery (US DoT approved) providing 2 hours of battery backup, easily replaceable in the field

KLASRouter

  • 8 RJ-45 Ethernet ports including 1 PoE port
  • 4 FXS ports supporting SVOIP
  • RJ-45 Ethernet WAN port
  • TCP, HTTP, AKO-S, CHAMPION, E-CollabCenter and Sharepoint acceleration

Encryption

Type 1 Encryption

  • Designed to use the Harris SecNet 54/KIV-54 HAIPE encryption device.
  • KIV-54 is easily accessible for rekey or zeroization.

Type 4 Encryption

  • Juniper SSG5 –NAT traversal allowing backhaul via hotel broadband, cellular or Wi-Fi networks in addition to Inmarsat Bgan.
  • FIPS approved AES-256 firewall/VPN.

Voice

Supports Cisco VoIP handset including PoE and DHCP option 150 SVOIP access via FXS ports

Transport Network

Supports BGAN, VSAT, hotel broadband, airport Wi-Fi and cellular networks

2200 Network Schematic

2200 - Acceleration & Compression

Space Communications Protocol Standards (SCPS)

KlasRouter provides SCPS compliant TCP acceleration based on MITRE's implementation of the SCPS-TP protocol. KlasRouter supports both vendor-independent SCPS mode and Klas optimized SCPS mode to interoperate with any SCPS-compliant Service Entry Point hardware (such as ViaSat xPEP and Comtech EF Data turboIP). In Klas optimized SCPS mode, Klas has modified and improved the MITRE implementation to mitigate Inmarsat BGAN specific conditions such as high jitter and varying bandwidth availability. This customization provides optimum performance for TCP-based applications such as web and email.

HighSpeed TCP (HS-TCP)

KlasRouter supports the HS-TCP algorithm as developed by Sally Flood and adopted by the Internet Engineering Task Force. HS-TCP is implemented in Performance Enhancing Proxy (PEP) mode on KlasRouter in a similar way to SCPS and is therefore transparent to the network.

In addition to the required WAN optimization features, KlasRouter includes the following advanced WAN optimization components as optional features which otherwise would require separate hardware. These value added features exceed the specification and are included at no additional cost to the Government.

HTTP Caching

Layer 3/4 acceleration using SCPS or HS-TCP is a critical part of WAN Acceleration. However, the performance of higher layer protocols such as web-based applications also is degraded over satellite. KlasRouter implements HTTP web caching and pre-fetch to mitigate the effects of network latency. This algorithm has been employed with excellent results on SIPRNet and JWICS web applications such as Outlook Web Access, AKO-S, CIDNE, CHAMPION and various other intelligence-specific cloud-based services.

HTTP objects are cached locally for re-use to avoid repeat download of the same web page across satellite. This feature is particularly useful in a multi-user environment where the same web pages are likely to be requested by different users. When first accessed, a HTTP object such as an image is saved on KlasRouter to be made available should another user request the same object. In such case, the KlasRouter supplies the cached object rather than traversing the satellite link to the web server to download a duplicate copy. This substantially improves performance while reducing costs. However cache coherency is maintained at all times to prevent out-of-date objects from being presented from the cache.

HTTP objects may be cached on KlasRouter in RAM or, optionally, in the SATA hard drive included in both KP1400 and KP2160. Use of a SATA hard drive improves performance significantly because more information can be persistently stored for re-use on the hard disk improving the chances of the object being cached locally. Note that this feature is not present on software-based acceleration options such as Riverbed Mobile.

Prefetch

The high latency on BGAN and other satellite networks causes the initial load of each web page to be slowed markedly. A page that takes 2-3 seconds to load over a low latency network can take 30 seconds to load over a high latency network. KlasRouter mitigates this by scanning each downloaded web page for links to other pages. Since it is likely that the user will select one of the links on the page, KlasRouter downloads the text of each linked page automatically in the background. When the user selects a link, the text of the linked page is served from local KlasRouter cache providing instantaneous page load. Note that images and other large HTTP objects are not pre-fetched as this would increase costs by downloading large amounts of data that may not be used. Instead, these objects are loaded after the text of the page is presented.