Page 42
TLX640 Matrix Switch Product Manual
thinklogical
Rev. H, February 2020
Secure Application Examples
The diagram on pg. 43 shows the TLX12 Matrix Switch in a secure application.
The highly secure
components are described as the Red Network and the other, lower security components are
described as the Black Network.
The Red Network, containing the computers (sources), is shown in a
physically secure environment along with the TLX Matrix Switch, the computer server used to manage
the Switch, and the Network Hub. The Network Hub is a dedicated network used only to connect the TLX
Switch to the computer server. This dedicated network does not connect to any other components and
does not extend beyond the physically secure environment. The dedicated network connection may be
replaced by a direct serial connection (RS-232) between the TLX Switch and the computer server.
The TLX Matrix Switch can be configured to prevent accidental connection from the Red Network
to the Black Network using the Restricted Switching feature.
For example, the TLX Matrix Switch
Network Diagram should be configured with the following csv file:
Direction
Number
Priority
I
1
2
I
2
2
O
2
2
I
42
2
O
41
2
O
42
2
I
5
1
O
5
1
I
45
1
O
45
1
The following connection rules apply:
•
SOURCE 2 can be connected only to DESTINATION 2
•
SOURCE 1 can be connected to both DESTINATION 1 and DESTINATION 2
Note: The TLX Matrix Switch
and the computer server used to manage the Switch must be
protected according to the highest security classification of any component in the entire
network application. The optical connections and Destination Receiver designated as
Red
Network
must be kept physically secure.
The configuration of the TLX Matrix Switch should be reviewed regularly to ensure that it
continues to meet organizational security policies concerning:
▪
Changes in the TLX Matrix Switch configuration
▪
Changes in the organizational security policy
▪
Changes in the threats presented from non-trusted network interfaces
▪
Changes in the administration, operation staff or the physical environment of the TLX Matrix Switch
