The world’s only NSA certified FI-capable Type 1 high-speed IP network encryptor, that is airborne qualified. The AltaSec KG-250M/T from ViaSat® offers seamless foreign interoperability and programmable information assurance. This inline network encryptor (INE) is certified by the National Security Agency for use on classified US Government communications networks, and is available to U.S. Department of Defense customers, and authorized international and Homeland Security organizations.

The KG-250M/T is ready for multi-national operations, featuring Suite A and/or Suite B cryptographic algorithms, and both software source and key material source authentication and programmability. With support for multiple Communities of Interest (COIs), the KG-250M/T ensures that communications are controlled and restricted to members of selected COIs via Exclusion Keys. Featuring field tamper recovery and advanced technology to handle complex missions, this AltaSec can be deployed to support the end-to end security requirements of the Global Information Grid (GIG), providing the warfighter with secure information when and where it is needed.

Based on ViaSat’s PSIAM™ crypto system, the KG-250M/T features programmable and scalable information assurance capabilities that can evolve and adapt to ongoing changes in your network infrastructure.

This INE is designed for low cost of ownership and ease of portability. Unlike other network encryptors, the KG-250M/T does not require a centralized manager, making it the product of choice for one-way networks or mobile networks with partial or intermittent connectivity. However, KG-250M/T networks can be centrally managed, monitored, and configured by the VINE™ Manager software application, which is free to ViaSat AltaSec customers. VINE Manager’s intuitive interface allows users to remotely manage any AltaSec parameter.

By incorporating the latest networking features, this equipment brings full mesh network operation to the classified user in an intuitively managed, cost-effective package. Also, while completely appropriate in strategic applications, the KG-250M/T delivers the advantage of a quick setup, high throughput node on any IP-capable medium to the on-the-move airborne tactical user.

Part of the AltaSec® family of inline networking encryptors


Airborne and mobile Type 1 security

Form Factor:



HAIPE, Suite B, MIL-STD-810F KG-250M is the first Type 1 HAIPE® device specifically designed for secure networking in mobile platforms such as helicopters, cargo aircraft, and HMMWVs. This inline network encryptor is built to move, with mobile-specific features such as a remote interface to stowable device, remote zeroization, and heartbeat signaling. The KG-250T is the first MIL-STD-810F ruggedized Type 1 HAIPE® device specifically designed for secure networking in extreme airborne and mobile platforms such as UAVs and fighter jets. This inline network encryptor is built to fly, with airborne-specific features such as a remote interface to stowable device, remote zeroization, and heartbeat signaling.

The only HAIPE built to move with mobile-specific features:

• Remote interface panel
• Suite B cryptography
• Remote zeroization
• Heartbeat signaling
• Mobile and Airborne-specific housing enclosures

The KG-250M and KG-250T offer remote zeroization and heartbeat ("keep alive") signaling, ideal for any situation in which a command post warfighter needs to assess or terminate crypto operation in a remote vehicle or aircraft. For installations in which the remote interface panel is not near the driver or pilot, you have the option of connecting a small, secondary zeroization panel within the user’s reach to allow for even faster zeroization in emergency situations. The first certified HAIPE with Suite B algorithms, AltaSec is the crypto of choice for mobile platforms in hostile environments. This cryptography also ensures that the KG-250M and KG-250T can connect with coalition HAIPE devices.

Convenient Management of Stowed Crypto

Stow your airborne-ready AltaSec anywhere in the vehicle or aircraft, and control the encryptor by using its remote interface panel – even if the stowed crypto is not physically accessible. The remote interface panel, only available on AltaSec encryptors, can be used via cable away from the stowed unit.