Secure NAS R5

The Secure NAS is a family of storage appliance from Addonics that combines the benefits of RAID storage, Network Attached Storage (NAS), Direct Attached Storage (DAS) and hardware AES 256-bit encryption all in a box. It is an ideal solution for storing a large volume of sensitive data, for securely transporting a large volume of data between different locations or for any application that requires protection against data theft.

The Secure NAS can be directly attached to any system via high-speed eSATA connection, this allows transferring a large volume of data quickly. The same data in the Secure NAS can be shared over a 1 Gigabit network. The entire RAID volume, including the boot sector and partition table, is encrypted. Data written onto or retrieved from the RAID is encrypted and decrypted on the fly by a high-performance FIPS certified AES 256-bit crypto engine.

The Secure NAS has also added new powerful features beginning 6/16/2014 via a new firmware release. There are now full disk sharing and existing folder sharing from drives created by other systems. Shares can be applied to both FTP and SMB for different users and with different READ/WRITE privileges. These new features allow quick set up of sharing information on existing drives through LAN and WAN, making it an ideal tool for setting up a private Cloud storage. It is also a great tool for sharing information on existing drive on a private network such as at home or a temporary LAN without any elaborate administrative setup.

The encryption is simple to operate. There is no software to run or password to enter. Simply insert a correct cipher key into the unit during the system startup, just like starting a car. Once the unit is powered up, the Cipher key can be removed. If the Secure NAS storage unit is stolen, the RAID volume will not be visible on the network or to any system. If the drives are taken out from the Secure NAS storage and directly attached to any system, the drives will appear as blank. There will be no trace of any recoverable data even examined by recovery software or surface scanning of the drive platter.

 

About this model

The Secure NAS R5, model SN535E1G-S, accommodates up to five 3.5" SATA hard drives. All five drives are configured in a single RAID volume for high performance and reliability. By using RAID 5 configuration, a storage volume up to 40TB can be created by using five 10TB hard drives. The entire RAID volume, encrypted by a FIPS certified AES 256-bit crypto engine, can be directly attached to any system via eSATA or used as a Network Attached Storage appliance on any 10/100/1000 network.

Additional USB drives, up to a maximum of fifteen (15) drive volume when combines with USB hubs, can be shared over the network by attaching to the USB port on the back of the unit.

 

Illustration of connecting the Secure NAS to LAN or system

 

 

Secure NAS R5 detail front and back view

 

Summary

  • Install up to five 3.5" SATA hard drives
  • Five drives can be configured as RAID0 (Striping), RAID 5 (Parity), RAID 5+S, Large Drive or Clone Mode (N-Way Mirror)
  • The RAID volume can be attached to
    • Fast Ethernet 10/100/1000 Mbps network to use as a Network Attached Storage
    • Any system via eSATA port to use as a Direct Attached Storage or USB 3.1 port using the included USB 3.1 - eSATA adapter
  • FIPS 140-2 certified AES 256-bit encryption for the entire RAID volume
  • Drive can be added and removed like VHS cassette with no special tool
  • USB port to support attaching additional USB drives to the network with maximum 15 drive volumes when combined with USB hub (Please note the USB drives will not be encrypted)

Network Attached Storage

  • Built-In SMB / Samba server for file sharing over LAN
  • Built-in FTP server for file access over the internet
  • Great for setting up a private Cloud storage or quick drive sharing
    • Support full disk sharing of drive with existing data in SMB and FTP
    • Support selecting existing folders1 that are already on the drive for sharing in SMB and FTP
    • Full Disk or Folder sharing can be assigned to authorized users with different READ/WRITE privileges
  • Built-in file formatting utility for XFS and EXT3
  • Support 10/100/1000 Mbps network
  • Maximum data transfer over Gigabit LAN:

      RAID storage USB storage
    read write read write
    XFS up to 85 MB/sec up to 45 MB/sec up to 30 MB/sec up to 30 MB/sec
    EXT3 or EXT4 up to 50 MB/sec up to 35 MB/sec up to 30 MB/sec Up to 30 MB/sec
    NTFS up to 16 MB/sec up to 5 MB/sec up to 16 MB/sec up to 5 MB/sec
    FAT32 up to 18 MB/sec up to 8 MB/sec up to 18 MB/sec up to 8 MB/sec


  • Support XFS, EXT2, EXT3, EXT4, NTFS or FAT32 file system
  • Maximum partition size or drive volume capacity:
    • XFS - 16 TB
    • EXT3 - 16 TB
    • EXT4 - 16 TB
    • NTFS - 9 TB
    • FAT32 - 2TB
  • USB port to support attaching additional USB drives to the network with maximum 15 drive volumes when combined with a USB hub
  • Support Up to 15 partitions per RAID volume or drive - giving a maximum 240 drive volumes on the network
  • Drives with existing data can be attached via USB port (the folder name must be in a large CAP to be sharable). See Q&A section on the folder and file security setting
  • Maximum user accounts:
    • Samba server - 64,0000*
  • Maximum # of concurrent connections:
    • Samba and FTP server combined - 32,000*
  • Built-in MLDonkey client for direct download to the attached storage device
  • Web GUI administration
  • User management to allow read-only or read/write access to folders
  • USB port can be used to power most 2.5" USB hard drives or any low power USB storage device

* These are the theoretical limits in the kernel. As # of concurrent connections increase, performance starts to decline depending on the drive access activity from the concurrent connections.

Note1. Only folder name containing no space can be shared

 


Encryption

  • AES 256-bit encryption - the highest level of encryption standard
  • FIPS 140-2 certified Crypto Module (MX+ crypto engine from Enova Technology)
  • Full disk encryption. No traceable data when the encrypted drive is connected to any system
  • No training required. Encryption/decryption via a hardware key, just like using a regular key to open a door
  • Choice of standard Cipher key or HMAC key (Key-Hash Message Authentication Code)

  • A pair of Cipher keys is included with each Secure NAS
  • High performance - up to 550 MB/sec when  used as a direct attached storage via eSATA connection
  • Optional RNG software suite for programming or duplicating the Cipher key
  • OS independent - can be used on any system

 

Cipher Key programming software
For an organization with large deployment, you may consider managing your own keys by ordering the optional RNG software suite

HMAC key: The cipher code in the HMAC key is encrypted and stored in a protected secret area. The code cannot be copied or READ by any mean should the key is lost or stolen.  To program another HMAC key with the same cipher code, the original key file used in creating the cipher code is required.

 


Direct Attached Storage

  • Connect to system via eSATA port (connecting cable included) or USB 3.1/3.0/2.0 port using the included eSATAp - USB 3.1 adapter.
  • To configure the RAID of the drives attached to the Port Multiplier (PM) - To set the RAID configuration of each Port Multiplier inside the unit using the PM management software. Please note that when attached to an eSATA port that is not PM compatible or a USB port, only the drive attached to the Port 0 of the PM will be detected by the Disk Management. But under the PM management utility, all the drives attached to the PM are visible and can be configured to different RAID settings
  • Drives are connected to a Port Multiplier that can be configured as RAID0 (Striping), RAID1 (Mirroring), RAID 5 (Parity), RAID 5+S, Large Drive (Concatenation), Clone Mode (N-Way Mirror) or individual drive*
  • RAID setting  via PM management software or dip switches inside the chassis
  • OS independent can be used on any system
  • RAID diagnostic via LED light
*Individual drive setting is supported when the secure NAS is directly attached to a system with a PM compatible eSATA port. When attached to the network, only the drive connecting to be port 0 on the Port Multiplier is available to share over the LAN.

  • On the back of the unit
    • One RJ45 connector for 10/100/1000Mbps Ethernet connection
    • One eSATA port - for directly attached storage application or RAID configuration using the PM management software
    • USB 2.0 / 1.1 type B female connector (can supply power up to 1.5A at 5V) - for attaching additional USB hard drive to the Secure NAS. Supports up to 15 USB drives via a USB hub.
    • AC power socket
    • LED for LAN activity and status
  • On the front of the unit
    • Five Snap-In drive bays
    • Cipher key socket 
    • LED for power, drive activity, drive error, host connection, RAID rebuilt, LAN activity, encryption activity, Cipher status
    • Power On/Off switch
  • One low noise, high CFM 80 x 80 cooling fan
  • 110/240 AC 320 Watts power supply
  • Dimensions (L x W x H): ~ 7.5 x 16 x 10.4 inches (190 x 419 x 264 mm)
  • Weight: ~11.25 lb ( 5.10 kg)
  • Operation Temperature: 0 °C ~ 60 °C
  • Operation Humidity: 10 ~ 90 %RH
  • Storage Temperature: -20 °C ~ 70 °C
  • Storage Humidity: 5~ 95 %RH


PRODUCTS

SN535E1G-S - (Secure NAS R5)
Content: Secure Network Attached or Direct Attached Storage appliance with AES 256-bit hard ware encryption, one eSATA cable (AAESATA100C), a pair of standard cipher keys (AAENKEY256-2), one eSATAp - USB 3.1 adapter (ADU31ESP), power cord, user guide
Price: 549.00
SN535E1G-SH - (Secure NAS R5 with HMAC key)
Content: Secure Network Attached or Direct Attached Storage appliance with AES 256-bit hard ware encryption, one eSATA cable (AAESATA100C), two HMAC keys (AAHMACK), one eSATAp - USB 3.1 adapter (ADU31ESP), power cord, user guide.
Price: 599.00

ACCESSORIES

ASWRNG (RNG programming suite for Cipher key (AAENKEY256 and AAENKEY256-2))
Content: Addonics RNG (Random Number Generator) programming software for cipher key model AAENKEY256 and AAENKEY256-2. Windows 10 compatible. Requires Addonics 6G SATA encryption hardware.
Price: 60.00
AAENKEY256 (1 AES 256-bit Cipher key)
Content: 1 piece of AES-256-bit encryption key
Price: 9.00
ASWRNG-P30 (RNG software suite PRO with 30 HMAC key license)
Content: Addonics RNG (Random Number Generator) software suite PRO with license to program up to 30 HMAC keys. HMAC key is not included. Windows 10 compatible. Requires Addonics 6G SATA encryption hardware.
Price: 569.00
AAHMACK (1 AES 256-bit HMAC Cipher key)
Content: 1 piece of AES 256-bit HMAC key. Note: The cipher code file (a .BIN file) is provided in either a CD or email. If the customer wants to receive this file via email, please include the email address in the instruction box on the final check out page when placing the order from our online store. The BIN file is required to program additional cipher keys with the same code. For security purpose, we store the BIN file for up to 30 days only after the product delivery. It is important for the customer to make extra copies of this file and keep them in a safe place once the file is received.
Price: 39.95
AAHMACK-30 (30 AES 256-bit HMAC Cipher keys + RNG software PRO)
Content: 30 pieces of AES 256-bit HMAC keys, RNG software PRO, user guide
Price: 849.00
AAHMACK-50 (50 AES 256-bit HMAC Cipher keys + RNG software PRO)
Content: 50 pieces of AES 256-bit HMAC keys, RNG software PRO, user guide
Price: 1249.00
AAHMACK-100 (100 AES 256-bit HMAC Cipher keys + RNG software PRO)
Content: 100 pieces of AES 256-bit HMAC keys, RNG software PRO, user guide
Price: 2199.00
ASWRNG-P30 (RNG software suite PRO with 30 HMAC key license)
Content: Addonics RNG (Random Number Generator) software suite PRO with license to program up to 30 HMAC keys. HMAC key is not included. Windows 10 compatible. Requires Addonics 6G SATA encryption hardware.
Price: 569.00
ASWRNG-P50 (RNG software suite PRO with 50 HMAC key license)
Content: Addonics RNG (Random Number Generator) software suite PRO with license to program up to 50 HMAC keys. HMAC Key is not included. Windows 10 compatible. Requires Addonics 6G SATA encryption hardware.
Price: 849.00
ASWRNG-P100 (RNG software suite PRO with 100 HMAC key license)
Content: Addonics RNG (Random Number Generator) software suite PRO with license to program up to 100 HMAC keys. HMAC Key is not included. Windows 10 compatible. Requires Addonics 6G SATA encryption hardware.
Price: 1399.00
AD4U3HE (4-port USB 3.0 hub, external)

4-port external USB 3.0 hub with built-in 3 feet USB 3.0 cable, user guide.

Price: 25.99
AD5EHPMEU3 (External Port Multiplier Ultra)
Package content: External Port Multiplier Ultra main unit, 5V 110/230V power adapter (AAPAC5V), 24" USB power cable (AAUSBPCP24), user guide
Price: 89.00
AAESATA200C (eSATA cable, 200 cm (6 ft.))
Content: 200 cm. eSATA connecting cable with eSATA connector on both ends. Full compliance with eSATA specification. Great for connecting external storage device with eSATA connector to eSATA host controller.
Price: 13.99