Communication Devices, Inc.
Your Trusted Partner for Secure Out-of-Band Management

For over 30 years, Communication Devices, Inc. (CDI) has been a leading designer, seller and manufacturer of secure out-of-band management products from its U.S. based operation in northern New Jersey. The company specializes in FIPS-validated, turnkey solutions that use alternative communication methods outside the network’s bandwidth to access firewalls, routers, switches, and servers. Equipped with these capabilities, CDI serves numerous businesses with large enterprise networks, including insurance companies, financial institutions, pharmaceutical firms, and major utilities.

No Network, No Problem.

CDI’s PA100 series is a highly secure out-of-band management solution designed specifically for U.S. government networks. The PA100 is FIPS 140-2 validated and has Federal Information Security Modernization Act (FISMA) approval for government installations. The product has undergone rigorous testing before being approved for use within secure facilities. In addition, it received the FIPS 140-1 certificate at launch, which was later updated for FIPS 140-2 authentication. It is now set to be among the first validated tools in the upcoming FIPS 140-3 mandate.

Equally impressive is CDI’s PA200 commercial series. Built for flexible enterprise infrastructures comprising various devices, this product line enables clients to choose from a wide range of device management options based on their security and operational preferences. From simple CLI access to full-featured keystroke logging, these tools make outof-band management easy and secure.

A distinct aspect of the CDI series is the ability to function even if the network is down. CDI’s products don’t rely on network protocols like TACACS+ and RADIUS or any central server. All security and encryption capabilities are integrated into the product infrastructure and managed by CDI’s central management system, Out-of-Band Manager (OBM).

“Like a good referee in a game, an effective out-of-band manager should be discreet and efficient, ensuring smooth network operations”

The OBM is a Windows-based product with a GUI and a browser interface. It allows storage of all keys and security information on a server, which then distributes the database to each remote system. This ensures secure communication with the system even if the remote CDI device lacks connectivity to the customer network.

Keeping Up with Changing Times

CDI’s work in the network security and management domains began in the 1990’s, when the rise of the internet made it difficult for users to safely supervise routers and network appliances. Back then, managing these assets required connections to a network, which created problems for enterprise IT managers who needed reliable access, especially when they were experiencing an outage. Operators initially resolved this hurdle using dial-up, which allowed engineers to configure and troubleshoot devices remotely. Unfortunately, this method posed security risks due to the publicly switched telephone network’s vulnerability to unauthorized access.

Recognizing the opportunity to shift this paradigm, Tadhg Kelly—now the president and of CDI—leveraged his expertise in security and encryption, informed by his background in the banking industry, to develop more secure communication over remote connections.

As systems transitioned from dial-up due to the difficulties in management and the high costs of maintaining analog telephone lines, CDI moved toward cellular networking. Having saturated the mobile telephone market, carriers sought new opportunities in the IoT space.

CDI continued with this digital innovation and incorporated cellular radios into its products, initially with 2G or 3G, transitioning from telco interfaces to cellular carrier networks. It maintained the same business and security model, ensuring secure communication over public cellular networks through keying and encryption.

When cellular networks evolved, the company offered private Access Point Names (APN), providing a private network or a set of IP addresses not accessible from the internet to prevent issues associated with accessibility, such as denial-of-service attacks.

Currently, CDI sells ready-to-use products, cellular service and private APN. The private APN isolates the product, ensuring only the customer’s data can access the device.

It provides encryption and key management from a central pane of glass and can operate globally due to agreements with local cellular carriers worldwide. This seamless integration allows global corporations, financial institutions, utilities, government agencies and insurance carriers to install CDI products and bypass in-country carriers.

All CDI products can connect to multiple serial console interfaces. Up to 48 units can be linked together for higher density locations.

CDI also offers remote power cycling capabilities for network appliances like routers and firewalls. This functionality is available through its external power control module or integrated into its X series products, such as the 244X and 288X models. These products include built-in power control ports, allowing authorized users to power cycle devices remotely and ensure operational continuity even in distant locations. Above all, clients receive a comprehensive and secure method to manage remote network devices and maintain vital network operations.

We continually update our product line, which originally started as a simple dial-up modem on an analog pots line. Over time, we have added network interfaces and LTE network capabilities

Adaptive Solutions + Hands-On Support = Networking Excellence

Customers contacting CDI for assistance are connected with an engineer rather than the typical support representative. This approach ensures that engineers fully engage with the products they design and understand real-world issues. They foster a sense of reliability, creating design offerings with customer experience in mind.

“We aim for our products to work seamlessly, with customers ideally not even thinking about the product while using it. Like a good referee in a game, an effective out-of-band manager should be discreet and efficient, ensuring smooth network operations,” says Kelly.

With excellent support and turnkey solutions, customers do not need to coordinate with multiple providers for wireless circuits, out-of-band management equipment, and support. CDI handles it all. Issues are addressed through a support portal, generating a ticket that an engineer promptly handles. CDI’s comprehensive service allows engineers to diagnose problems swiftly, whether from network issues, SIM problems or CDI devices.

This approach simplifies the customer support process; instead of dealing with multiple vendors and potential finger-pointing, customers make a single call to CDI for quick and effective resolution. CDI’s commitment to integrated support and engineering excellence guarantees that customers receive timely assistance and maintain efficient network operations.

Going Above and Beyond Today’s Requirements

A notable development in the industry is the Cisco Meraki firewall, which lacks a physical serial console—an update met with dissatisfaction from the community. CDI has adapted its products to allow browser connections through its devices over LTE, enabling the management of network-based products without serial interfaces. This new feature, set to be released soon, will allow users to effectively manage new-age firewalls.

For customers with remote firewalls or appliances, CDI offers innovative solutions that provide reporting through SNMP data or other management data via Ethernet interfaces. The company’s devices can route this data back to the headend and hand it to the customer. This enhances out-of-band management solutions by allowing management traffic to return over the LTE infrastructure.

Recently, CDI released version 7.10 of its product set, which includes a browser interface. This update not only supports terminal connectivity but facilitates comprehensive administration. At the same time, constant improvements ensure its products consistently meet customer needs, ensuring CDI maintains its position at the forefront of the secure out-of-band management industry.

“We continually update our product line, which originally started as a simple dial-up modem on an analog POTS line. Over time, we have added network interfaces and LTE network capabilities, resulting in an impactful product line,” says Kelly.

With the growing demand for out-of-band management and the resulting pricing hikes, the company is now developing lower-cost products to maintain accessibility to reliable features. The goal is to create one or two-serial interface devices with simpler microprocessors, reducing costs without compromising global connectivity to APNs.

A Promising and Secure Networking Future

Historically, out-of-band access was primarily to the serial console interface, but newer products, such as the Cisco Meraki, require web browser management. CDI is adapting by developing web proxy access to remote devices over a browser. The company is registering a browser extension that will allow popular browsers to use this feature through their OBM, providing GUI access to remote products, not just serial consoles.

CDI’s ongoing innovation, customer-centric approach and dedication to quality have established it as a leader in secure out-of-band management. By continuously evolving its product line and maintaining a strong connection between engineering and support, the company ensures that its solutions remain relevant and effective in a rapidly changing technological landscape. Concurrently, a focus on providing comprehensive, integrated support and maintaining stringent security standards underscores its commitment to customer satisfaction and excellence.

As networks continue to evolve and the demand for reliable, secure management solutions grows, CDI’s legacy of high-quality, forward-thinking and FIPS-validated solutions will undoubtedly remain at the forefront, meeting the needs of businesses and enterprises worldwide.