RF GNSS Security

• We offer BroadShield™ interference and spoofing detection on received GPS signals and ThreatBlocker in-line anti-jamming and spoofing protection.
• Our 8230AJ GPS/GNSS Anti-Jam Outdoor Antenna offers horizon blocking technology to protect against intentional or unintentional jamming or spoofing.
• With alternate signal solutions such as STL augmentation, you can receive precise time and position information even in GPS-denied environments, and you can authenticate GPS to prevent spoofing by using an encrypted signal.
• The GPSdome Anti-Jammer is the industry's only non-ITAR GPS anti-jammer and provides protection against GPS jamming, ensuring continuity of autonomous navigation and operation during jamming conditions.

Orolia's resilient PNT network solutions help protect against cyberattacks with the following features:

• Access control lists (ACL) limit network access to only authorized users.
• We provide the ability to disable services and ports – admin level configuration to enable only those services and ports that are necessary for operation.
• User data is not stored on our time servers – though they are servers in the general sense, they are outputting precise time, not serving a file storage function (other than activity logs), so there is no user data to be compromised.
• Iptables: We support iptables in our time servers. With Iptables, customers can create their own set of security rules using the source and destination of the IP address and/or port numbers. Using iptables, customers can add such alternative layers of security rules to prevent unauthorized and unwanted access to the system.
• Our SecureSync time servers are approved for use by US federal defense agencies, including DISA. SecureSync is the first and longest-standing DISA-approved time server.

Orolia's Resilient PNT applications include built-in security such as:

• AAA – Authentication, Authorization and Accounting– Our products adhere to AAA security practices. The following protocols are supported:
  • LDAP
  • RADIUS authentication
  • TACACS+ (Cisco)
• Multi-level authorization
• Configurable, complex passwords that expire periodically and cannot be reused
• HTTPS -- no-clear text is standard, using signed certificates (SHA256 default) with configurable cipher usage and TLS v1.1 and v1.2
• NTP – symmetric keys and autokey. Orolia also serves on the standards setting committees for the creation of more robust protocols.
• SSL, SSH, SCP, SFTP with public/private key support
• Compliance with NIST standards for Personally Identifiable Information and Digital Identity Guidelines

We scan continuously against CVEs (Common Vulnerabilities and Exposures), and issue routine software update releases with safeguard protections.