Genua XSi Genubox Ethernet signal isolator

Product Dimensions：

The genubox is a versatile security appliance that combines several functionalities: remote maintenance, monitoring, crypto, and filtering.

• Core Function: Provides highly secure, controllable, and auditable remote maintenance access to systems and networks in critical infrastructures and other sensitive environments.

• Operating System: Uses the flexible and highly secure OpenBSD operating system, optimized for security, routing, packet filtering, and comprehensive cryptographic functions.

• Security Principle: Compliant with the BSI (German Federal Office for Information Security) recommendation for secure remote maintenance, often employing a Rendezvous Server concept to eliminate a direct connection between the service provider and the target system.

  *

• Access Control: Access must be initiated by both the service provider and the operator (customer administrator). The operator has full control to stop the communication at any time.

• User Interface: Managed via an easy-to-use web interface (Operator GUI) and dedicated client apps for Windows or web browsers (Safari, Chrome, Edge).

⚙️ Product Parameters: genubox XSi Model

The XSi is one of the more compact, rugged models, suitable for DIN rail mounting (often used in industrial environments).

Note: The hardware revisions and specific values can vary slightly between different product sheet versions.

✨ Product Advantages

• Maximum Security: Adheres to high national and international security standards, including BSI recommendations for restricted data. Uses reliable SSH tunnels for encryption and personalized authentication.

• Full Control & Auditing: The customer/operator maintains full control over the connection (must be launched from both sides). It offers complete logging of all transactions and video recording of remote desktop sessions (audit-optimized).

• Application-Level Gateway (ALG): For Remote Desktop, it uses an ALG to prevent a continuous data connection at the application level, isolating the target system from the rest of the network.

• Flexible Authentication: Supports multi-factor authentication (MFA) via RADIUS, Smart Card, or Yubikey.

• Ease of Use: User-friendly operation via a dedicated Windows App or standard web browser app for both service providers and operators.

⚠️ Notes (Important Considerations)

• Targeted Use: The genubox is primarily designed for secure remote maintenance, rather than a general-purpose firewall or router (though it includes firewall functionality).

• System Integration: For maximum security, it often requires a two-device setup in conjunction with a Rendezvous Server (service box at the maintenance object, and a rendezvous server in a DMZ).

• Compliance: While it meets high standards, users must ensure its configuration and usage comply with their specific industry and national regulations (e.g., GDPR, NIS Directive for Critical Infrastructure).