Curtiss-Wright and Cisco Bring Secure Layer 3 Network Switching to CMOSS and SOSA Aligned Systems

• New VPX3-623 is industry’s first CMOSS/SOSA aligned VPX module to feature Cisco Catalyst ESS9300 Embedded Series 10 GbE Layer 3 network switching and Cisco Internetworking Operating System (IOS) XE technology

AUSA 2024, Walter E. Washington Convention Center (Booth 2143), Washington D.C. – October 14, 2024 –Curtiss-Wright’s Defense Solutions Division has announced, in collaboration with Cisco, the industry’s first 3U VPX module powered by the Cisco® Catalyst™ ESS9300 Embedded Series switch. The fully rugged VPX3-623 is designed for use in Sensor Open Systems Architecture (SOSA™) and C5ISR/EW Modular Open Suite of Standards (CMOSS) aligned system architectures, commonly used in aerospace and defense applications. The VPX3-623 provides system integrators with high-speed (8x 10GbE/10x 1GbE) switching capacity combined with enterprise-grade networking and security capabilities using Cisco Internetworking Operating System (IOS) XE®.

The module includes unique advanced security features such as secure boot and attestation, hardware root of trust, zeroization, network isolation, and FIPS validated encryption. It is ideal for integrating SOSA aligned systems with external devices such as sensors and wide area networks (WAN).

The module’s support for the Cisco IOS XE operating environment enables network system designers to quickly and easily identify and rectify resiliency issues that can lead to disconnected, intermittent, and limited (DIL) conditions at the tactical edge, such as switch looping. The VPX3-623 also supports powerful network and cybersecurity features that integrate with Zero Trust networks and enterprise network architectures to direct traffic off platform, allowing sensor data and command and control functions to be shared across WANs in support of the U.S. DOD’s vision for CJADC2 and JWCC.

“The VPX3-623, developed in collaboration with Cisco, delivers the features that ground and airborne network designers need and expect for communicating both in and outside of the system chassis while significantly improving network security, flexibility, and control at the tactical edge for CMOSS and SOSA aligned systems,” said Brian Perry, Senior Vice President and General Manager, Curtiss-Wright Defense Solutions Division. “The industry’s first VPX module to combine Cisco Catalyst ESS9300 Embedded Series Switch technology and Curtiss-Wright’s industry-leading ruggedization technology, the VPX3-623 uniquely provides the high-speed and security capabilities needed to deploy real-time, high-bandwidth, mission-critical networking in harsh environments.”

“We are very proud that our Cisco Catalyst ESS9300 embedded series switch forms the technological backbone of Curtiss-Wright’s VPX3-623 3U VPX module,” said Samuel Pasquier, Vice President of Product Management, Industrial IoT, Cisco. “The ESS9300 brings the power of Cisco IOS XE to our customers providing them with advanced enterprise grade networking features. IOS XE also brings security capabilities such as Layer 2 encryption, device authentication, port security, and network segmentation that are necessary to protect their critical infrastructure and communications. Our commitment to this partnership and the defense industry underscores our dedication to delivering innovative, reliable, and secure solutions that enable proven Cisco enterprise network architectures to be deployed in rugged VPX based solutions at the tactical edge.”

To support secure supply chain initiatives, the ESS9300 Embedded Series Switches are built using Cisco Secure Development Lifecycle, a process designed to reduce vulnerabilities and enhance resilience. Additionally, Cisco Trustworthy technologies provide protection against counterfeit hardware, maintain software integrity and help enable secure, encrypted communications through features such as image signing, secure boot and Secure Unique Device Identifier (SUDI).

Because Cisco IOS XE software uses FIPS 140 validated encryption, the VPX3-623 module will be submitted for Common Criteria evaluation as well as inclusion on the Department of Defense Information Network (DoDIN) Approved Products List (APL) to simplify the procurement process for DOD organizations seeking products that have met cybersecurity and interoperation certification requirements.

The fully rugged VPX3-623 meets MIL-SDT-810H environmental requirements and brings widely used enterprise-class hardware-based switching technology to VPX and SOSA aligned embedded ecosystems.

The module is STIG-Ready with DISA authored Security Technical Implementation Guides which provide the technical security policies, requirements and implementation details for applying security concepts to Cisco IOS XE. It provides customers with a fast path to a Risk Management Framework (RMF) process while drastically reducing the effort required to attain Authority to Operate (ATO).

Software support includes Cisco IOS XE Network Advantage with powerful routing features, such as EIGRP, and support for multiple high-availability protocols (HSRP & VRRP). Cisco Smart Net (including enterprise licensing agreements) provides genuine Cisco IOS XE software and maintenance to ensure customers have access to robust software maintenance and long-term availability of patches and security fixes backed by Cisco’s industry-leading software and research teams.

VPX3-623 users will benefit from the familiar Cisco IOS Command-Line Interface (CLI) and management experience shared across the Cisco family. Additionally, Cisco IOS XE Software offers a powerful, built-in graphical management interface called WebUI. The VPX3-623 is easily scaled using Cisco Catalyst Center. For a unified network operations experience, the module also integrates with Curtiss-Wright’s popular IQ-Core® Software tool suite.