The CrossBow™ Secure Access Manager is both a productivity tool for workers requiring remote access to industrial devices and an access security management tool, focused on utility compliance with NERC CIP cyber security standards. 

Key Features of CrossBow include:

• User-friendly remote access to IEDs and other devices
• Comprehensive NERC CIP access controls
• Works with Magnum DX, DynaStar, dial-up port switches and other network devices
• Integrates with Enterprise authentication systems: RSA SecurID™ and Active Directory™
• Extensive activity logging, reporting and audit tools

CrossBow provides user-friendly access to Intelligent Electronic Devices (IEDs) and other remote devices via a PC-based client. The user interface organizes permitted devices by name, type, location, sector or other criteria and then enables one-click access to administrative interfaces. The CrossBow client launches vendor-specific software applications automatically. Device profiles are established for many SEL, GE, ABB, Areva and other vendor devices, and the architecture is open to any other device with a remote administrative interface, providing access as if local to the device console port.

The CrossBow Station Access Controller (SAC) is an auxiliary product for deployment in a large individual substation, and is used in conjunction with a centralized CrossBow Secure Access Manager (SAM) server to form an integrated, comprehensive solution with seamless configuration in an operational environment. SAC provides secure local access and control, and is coordinated with the central CrossBow SAM functions during normal operations. Read SAC datasheet.

NERC CIP cyber security standards compliance is a specific focus of CrossBow, with an emphasis on both completeness and ease-of-implementation. All connections to remote devices are authorized via CrossBow Secure Access Manager and all user sessions can be logged. Administrative tools make it easy to set up and centrally control security adn access profiles based on an individual person and their functional or organizational role, and by individual devices and device location or category. Reporting tools facilitate administration tasks and compliance auditing. CrossBow optionally integrates with other enterprise systems, including RSA SecurID and Active Directory for strong form (2-factor) user authentication.

CrossBow has an open system architecture that supports many network types and vendors, including leading dial-up switches, Serial-IP terminal servers and router/firewalls. As part of GarrettCom's Magnum Secure Networks Framework (MSNF), CrossBow integrates with Magnum DX and DynaStar routers and serial device servers to provide a comprehensive Electronic Security Perimeter at power utility substations or other harsh industrial environments. IP Firewall, stateful logging, IPsec Virtual Private Networks (VPNs), and SSL/SSH encryption are among the integrated electronic perimeter security tools. CrossBow provides integrated security management of these remote network devices, including retrieval and central storage of log files for future audits or forensics.

CrossBow NERC CIP Compliance Matrix

Substation Networking with Non-Routable Protocols

  Utility Automation NERC CIP Compliance at Cinergy

Utility Automation "NERC/CIP: Opportunity or Headache?"

Substation Products Overview