Purpose-Built and Hardened

IronGate provides a truly unique solution. The IronGate system does not rely on standard networking methods for communication with SCADA equipment, nor does it rely on standard network security methods. IronGate is a purpose-built computing appliance with a custom Hardened Ethernet Interface (HEI) that is the system’s only connection to the Internet/network.
The IronGate HEI requires and supports only one protocol. This protocol is secure, encrypted, custom, and is used nowhere else in the world. IronGate Edge devices communicate with the IronGate Core server solely via the HEI custom protocol. Edge devices are also hardened; if tampered with, they will “brick” themselves and reveal no data.

Containing the Threat

IronGate provides two additional unique security features. Unlike typical IP-based systems, a virus cannot migrate from point to point within the IronGate system. And once the system is up and running, usernames and passwords (or other identifiers) cannot be used as an entry vector. Even a successful phishing attack to gain these identifiers will not aid a hacker.
The IronGate system is not only secure, it is also brand agnostic and scalable. Each IronGate Core can serve 100+ remote Edge devices, and each Edge device can handle hundreds of SCADA controls and sensors. This, within a broad range of legacy and new SCADA equipment.
IronGate has been red team tested by Cylance and FireEye Mandiant, and has also been successfully tested by CISA and by the Army innovation center at Aberdeen Proving Ground.

Quality, Measurement & Transport

When an unsquelch condition occurs, signaling that receiver audio should be sent to the voter, the QMT-1B measures signal quality and converts the analog audio to IP for transfer to the SVM-3. Each SVM-3 module can service three receivers, and works in conjunction with the CPM-3 to monitor the arrival timing of incoming audio. This allows the voted signals to be resynchronized for accurate voting and switching between sites during a voting sequence.
At the SNV-12 voter, the remote received audio, whether interfaced by analog means to an SVM-2 or by an IP network to an SVM-3, is buffered by the site voter modules until the CPM-3 determines that all unsquelched sites have reported in. The CPM-3 then coordinates re-alignment of the various signals.

QMT-1B Single Channel or Multicircuit Rack Mount Versions

SVM-3 IP backhaul currently implements exclusively lowest noise (FM) voting, however delay time RX unsquelch to TX is typically below 400ms (approximately 350ms + network delay). One reason for the SVM-3’s success is the highly capable QMT-1B.
The QMT-1B is largely configurable using its browser-based user interface. RX Audio Input and TX Audio Output levels are adjustable via soft pots. COR input is polarity active low or high, selectable. EIA Keytones or PTT can be used for TX audio output. The operating temperature is from -20 to +60 ℃, and it can be stored at temperatures between -40 to +85 ℃.
The QMT-R™ is a rack mount version of the QMT-1B that can contain from one to four QMT-1Bs. The rack mount configuration fits naturally into many settings where SNV-12 Voters are already installed. Due to its larger size, a larger power supply (48VDC) and a fuse have been added. Otherwise, each installed QMT-1B in the QMT-R operates exactly like a QMT-1B.

Analog and IP Backhaul in the Same Chassis

The SNV-12 Signal-and-Noise Voter accesses and analyzes backhaul audio from receiver/transceiver sites that use traditional analog backhaul such as leased lines, and also from receiver/transceiver sites that use IP backhaul methods such as a private network or IP microwave. The 64Kbps vocoder for IP backhaul ensures the delivery of clear, high-quality audio.
The SNV-12 votes the highest quality audio by analyzing the audio signals, regardless of backhaul method. In order to do this, when IP backhaul is used, the QMT-1B remote is co-located with the radio at the receiver/transceiver site. The QMT-1B provides timing information, digitizes the audio, and sends it to the SVM-3 module channel it is associated with on the SNV-12.

Greater Talk Back Range

A typical SNV-12 Signal-and-Noise Voter application is an LMR system in which mobiles and portables can hear a repeater, but the repeater can’t hear them, due to their lower transmit power and/or the antenna size or placement.
Remote receivers can be positioned in the communications dead spots, with audio from each receiver linked to the voter via IP or T1 microwave, IP fiber, landline, twisted pair, RF link, or fiber optics. The voter will select the best quality signal from all unsquelched remote receivers and forward this signal to the repeater for rebroadcast or monitor by a dispatcher, thus providing greater talk back range for the radios.

Form and Functionality

The ACU-T’s keypad, handset, speaker, and LEDs allow full local control and monitoring of the interoperability system. The ACU controller and WAIS Controller software provide multipoint control and monitoring capability over a network. The control software and DSP algorithms allow the ACU-T to be optimized for best performance with connected radios or other equipment.
All of the interface features that made the 19″ rackmount ACU-2000 the industry leader in interoperability solutions are available with the ACU-T, including: a choice of VOX, VMR, or Hardwired COR, Digital Audio Delay, and COR Sampling to ensure that a false key or noisy signal can’t tie up a net.

Proven ACU Technology in a Smaller Package

The ACU-M incorporates the features of our proven ACU technology in a smaller package ideal for mission critical deployment. With its comprehensive suite of DSP functions, the ACU-M offers significantly higher functionality than any of its competitive counterparts at a price that fits any budget. The devices interfaced to the ACU-M can be interconnected in any combination – from three independent nets, to a single net with all users connected together. The ACU-M offers maximum portability, helping to quickly establish command and control in various field applications. Small enough to be easily transported, robust enough to compliment any communications suite, the ACU-M is the new standard for mission critical interoperability.

Networked ACU-M and Transportable Case Bundle

The ACU-M Network Option provides a pair of RoIP channels that allow remote radios to be interfaced to the unit via RoIP devices like the NXU-2B or allow the ACU-M to be included in a WAIS (Wide Area Interoperability System). A WAIS can include any number of operators and communications end points (radios, phones, etc.) interfaced via ACU-Ms and other ACU devices, all networked together.
The RoIP channels can be purchased upfront or electronically upgraded later. The RoIP channels are accessed via the ACU-M Ethernet port. This port is active whether or not the Network Option’s RoIP channels have been activated, and is always available for monitor and control via the ACU Controller software provided with each ACU-M.
Another very convenient option is available that bundles the ACU-M with four radio interface cables and the RoIP network option, all installed in a rugged foam lined carrying case with a rechargeable battery. This option maximizes ACU-M functionality and ease-of-use while minimizing set up time, a crucial element when responding to disasters or other incidents that require interoperable communications.

Straightforward Integration and Control

Using the Z-Series browser-based user interface, each channel on an MCC Console is configured as a resource. Simply drag and drop any of the MCC’s resources into the dispatcher position on the ACU-Z1 or the Z-Series Controller user interface to listen to or communicate with any resource in the dispatch area. Other MCC channels can be bridged to other resources by placing them in a shared net. Audio shared between resources within the same net is isolated from the dispatch functionality; the dispatcher will not hear bridged resources and they will not hear the dispatcher.
The MCC-4 Multi-Channel Console combines functionality with flexibility. Here, the MCC-4 is interfaced into a Z-Series Controller wide-area system along with various resources from remote RSP-Z2 devices. One button on the console functions as the Dispatch Source, while another is bridged to other remote resources.

MCC Console Options

MCC-Series Consoles are currently available in single-channel and four-channel models. In addition to the desktop models, each is available in a wall mount version and a hardened version.
Customizable, the MCC Console has dedicated PTT button and volume control for each channel and also provides selectable hands-free operation. For the best experience, microphone, handset, or footswitch options are also available.
All configurable settings are accessible through the device’s browser-based user interface.

The Versatility of RoIP

The NXU-2B is designed for years of continuous operation at remote locations, supporting a wide variety of mission critical applications. These include bridging remote radio systems together as well as tying radios via IP to console interfaces or Push-to-Talk over Cellular (PoC) platforms.
The NXU-2B plays a vital role in JPS wide-area solutions, such as this ACU-Z1 interoperability system. The product interfaces single LMR or other 4-wire audio interfaces to these systems using the JPS RoIP protocol. This allows these radios or other devices to communicate with all other members of the system.

Easily Deployable

Designed to provide a low-cost, flexible method for extending radio communications over existing network infrastructure, the NXU-2B is exceptionally versatile. JPS NXUs are deployed in everything from trunking to multicast applications, to leased line replacement and wide area interoperability solutions.
The NXU-2B offers superior audio quality with a minimal use of network bandwidth. Its browser-based user interface makes advanced optimization settings easily adjustable. This includes audio level, audio delay, and voice modulation recognition (VMR) in addition to voice operated transmit (VOX) noise detection or hardware unsquelch.
The NXU-R™ is a rack mount version of the NXU-2B that can contain from one to four NXU-2Bs. Due to its larger size, a larger power supply (48VDC) and a fuse have been added. Otherwise, each installed NXU-2B in the NXU-R operates exactly like an NXU-2B.

For Any Gateway: from Simple to Complex

Multiple RSP-Z2 Gateways can connect to a single Z-Series Controller to create a wide area interoperability system. This is a relatively small system with different endpoints interfaced using RSP-Z2s. However, as many as 80 endpoints may be interfaced through a Z-Series Controller, depending on resource demands.
IP-based resources and backhauls from RSP-Z2 Gateways easily integrate into wide area interoperability communications streaming through a Z-Series Controller or ACU-Z1 modular interoperability gateway. These devices allow an operator to create interoperability nets, perform one- or two-way dispatch operations, or monitor resources easily.
Optional HC-128 and AES-256 encryption can be licensed on JPS Z-Series devices for JPS Bridge and JPS RoIP audio.

True IP-Centric Gateway

The ACU-Z1’s intuitive browser-based GUI allows an operator to expand or minimize the dispatch and monitor areas. Operators can employ these dedicated zones to create mini-dispatch stations for on-the-fly one-way or two-way communications. Since any configured resource can be designated as the dispatcher by the operator, the system provides a high level of flexibility,
Separate from dispatch, monitor nets provide another unique feature. Any resource configured on the system can be designated a monitor and can listen to audio from any number of other resources on the system.

Vendor Neutral Philosophy

The JPS ACU® Intelligent Interconnect Technology employed by the ACU-Z1 and other JPS gateways purposely eliminates the proprietary nature of some system types through radio-agnostic interfaces for hundreds of different radio makes and models, regardless of frequency, modulation technique, protocol, or encryption.