PARE-FEU · PLANET
PUF-Anchored Quantum-Resilient Cybersecurity Gateway
The PLANET PQCG-800 is an enterprise-grade PUF-Anchored Quantum-Resilient Cybersecurity Gateway built with a PUF-based Hardware Root of Trust to strengthen device security from the hardware level. Combining hardware-rooted protection, post-quantum cryptography, IDS/IPS, Layer 7 D…
Conception et intégration réseau.
PUF-Based Hardware Root of Trust and Configuration Protection
At the core of the PQCG-800 is Physical Unclonable Function (PUF) technology, which establishes a hardware-rooted trust foundation for protecting security-critical operations. For configuration change authorization, the gateway works with the CoreTrust Key and a paired management device to provide an additional hardware-backed control layer. Only a device that has completed pairing and has the authorized CoreTrust Key inserted can modify protecte
Post-Quantum Cryptography for Long-Term Data Protection
Building on its PUF-based Hardware Root of Trust, the PQCG-800 incorporates post-quantum cryptographic technologies to strengthen communications against emerging quantum-computing threats. This quantum-resilient security architecture is designed to address risks such as “harvest now, decrypt later”, where encrypted information captured today could potentially be decrypted by future quantum computers. By combining hardware-rooted trust with post-q
Anti-SCA Protection and PUF-Assisted Hardware TRNG
The PQCG-800 integrates Anti-Side-Channel Attack (Anti-SCA) protection to help safeguard cryptographic keys against leakage through side-channel attacks. A PUF-assisted Hardware True Random Number Generator (TRNG) supports secure cryptographic key generation, further strengthening the gateway’s hardware security foundation.
Applications et cas d’usage réseau.
Post-Quantum Protection for Critical Enterprise Networks
The PQCG-800 provides secure connectivity for government agencies, financial institutions, and enterprise networks handling sensitive information. Hybrid PQC TLS supports long-term communication security, while PUF-based configuration protection allows only paired devices with an inserted CoreTrust Key to modify gateway settings. Devices that do not meet both requirements cannot change settings even after login. Integrated IDS/IPS, Layer 7 DPI, s
Secure Branch Connectivity with Centralized Network Management
The PQCG-800 combines dual 10G WAN connectivity, enterprise cybersecurity, and centralized network management for business offices and branch networks. SD-WAN, load balancing, and automatic failover help maintain reliable access to cloud applications and business services, while integrated IDS/IPS, Layer 7 DPI, and firewall protection safeguard network traffic. With a built-in AP Controller, Captive Portal, RADIUS authentication, and DHCP server,
Fonctionnalités et technologies clés.
Highlights
- PUF-based configuration protection requiring completed device pairing and an inserted CoreTrust Key
- Hybrid Post-Quantum TLS for long-term protection against quantum-computing threats
Hybrid Post-Quantum TLS
- Anti-SCA protection to help safeguard cryptographic keys
- Trusted platform security with Secure Boot and PUF-assisted hardware TRNG
- Advanced threat protection with IDS/IPS, Layer 7 DPI, content filtering and application visibility
- Zero Trust and identity-based access with FIDO2 Passkey, TOTP MFA, certificate authentication and ZTNA
- Multi-protocol VPN with IPSec, OpenVPN, WireGuard, GRE, PPTP and L2TP
- Dual 10G WAN interfaces with SD-WAN, load balancing, automatic failover and High Availability
Hardware
- 4 10/100/1000BASE-T RJ45 ports
- 1 1G/2.5G/5G/10GBASE-T RJ45 port for WAN/LAN interface
- 1 1G/2.5G/10GBASE-X SFP+ slot for WAN/LAN interface
- 1 USB port for system configuration backup and restoration
- Reset button
- Desktop installation or rack mounting
Trusted Platform Security
- PUF-based configuration change authorization requiring completed device pairing and an inserted CoreTrust Key
- Prevents configuration changes when either requirement is not met, even after connecting and logging in
- Secure Boot to ensure only authenticated and trusted firmware is executed during system startup
- PUF-assisted hardware TRNG (True Random Number Generator) for secure cryptographic key generation
- Anti-Side-Channel Attack (Anti-SCA) protection to help safeguard cryptographic keys
- Security design follows EU Cyber Resilience Act (CRA) principles
Spécifications techniques détaillées.
| Hardware Specifications | |
|---|---|
| Ethernet | 4 10/100/1000BASE-T RJ45 Ethernet ports (Port 1 to 4) 1 1G/2.5G/5G/10GBASE-T RJ45 port (Port 5) Supports WAN port mode or LAN port mode over software configuration |
| Fiber | One 1G/2.5G/10GBASE-X SFP+ port (Port 6) Supports WAN port mode or LAN port mode over software configuration |
| USB Port | 1 USB 2.0 port for system configuration backup and restoration |
| Reset Button | Reset to factory default |
| Thermal Fan | 1 |
| LED Indicators | System: PWR, Internet, (Green) Ethernet Interfaces (Port 1-4): 10/100/1000 LNK/ACT (Green) Ethernet Interfaces (Port 5): 1G/2.5G/5G/10G LNK/ACT (Green) Fiber Interfaces (Port 6): 1G/2.5G/10G LNK/ACT (Green) |
| Installation | Desktop installation or rack mounting |
| Power Requirements | 100~240V AC, 50/60Hz, auto-sensing |
| Power Consumption / Dissipation | Max. 3.3 watts/10.92BTU (Power on without any connection) Max. 11 watts/37.53BTU (Full loading) |
| Weight | 1725g |
| Dimensions (W x D x H) | 330.2 x 200 x 43.1mm, 1U height |
| Enclosure | Metal |
| Security Service | |
| Hardware Root of Trust | PUF-based hardware protection for configuration change authorization |
| Configuration Change Authorization | Requires completed device pairing and an inserted CoreTrust Key to modify gateway settings Devices without either requirement cannot change settings, even after connecting and logging in |
| Side-Channel Attack Protection | Anti-SCA protection to help safeguard cryptographic keys against side-channel attacks |
| Hardware Random Number Generator | PUF-assisted hardware TRNG for secure cryptographic key generation |
| Firewall Security | Hardware TRNG for secure cryptographic key generation Stateful Packet Inspection (SPI) Security log and event reporting Automatic threat signature updates Blocks DoS/DDoS attack Role-based access policy enforcement |
| ALG (Application Layer Gateway) | SIP, RTSP, FTP, H.323, TFTP |
| NAT | Port forwarding DMZ Host UPnP NAT disable (supports routing mode) |
| Content Filtering | MAC filtering IP filtering Web filtering |
| Bandwidth Management | Outbound load balancing Failover for dual-WAN QoS (Quality of Service) |
| Zero Trust | Zero Trust access control with identity verification Multi-factor authentication via external hardware security key support |
| Intrusion Prevention System | Intrusion Detection and Prevention (IDS/IPS) Layer 7 Deep Packet Inspection (DPI) Application-level traffic visibility |
| Secure Boot | Establishes a Chain of Trust (CoT) across all boot stages via cryptographic image signature verification |
| Networking | |
| Operation Mode | Routing mode |
| Routing Protocol | Static Route, Dynamic Route (RIP), OSPF |
| VLAN | 802.1Q Tag-based, Port-based, Multi-VLAN |
| Multicast | IGMP Proxy |
| NAT Throughput | Max. 9.4Gbps |
| Outbound Load Balancing | Supported algorithms: Weight |
| Protocol | IPv4, IPv6, TCP/IP, UDP, ARP, HTTP, HTTPS, NTP, DNS, PLANET DDNS, PLANET Easy DDNS, DHCP, PPPoE, SNMPv1/v2c/v3 |
| Key Features | HA (High Availability) Captive Portal RADIUS Server/Client AP Control |
| VPN | |
| VPN Function | IPSec (Net-to-Net, Host-to-Net) IPSec Remote Server GRE PPTP Server L2TP Server SSL Server SSL Client (Open VPN, Surfshark, NordVPN, PureVPN) WireGuard VPN Server/Client |
| VPN Tunnel Capacity by Protocol | IPSec: 16 GRE: 5 PPTP: 100 SSL VPN: 200 |
| VPN Throughput | L2TP (1Gbps): 145~463Mbps L2TP (10Gbps): 483~885Mbps L2TP/IPsec (1Gbps): 150~334Mbps L2TP/IPsec (10Gbps): 438~496Mbps IPsec/AES128 (1Gbps): 894~910Mbps IPsec/AES128 (10Gbps): 1,110~1,310Mbps IPsec/AES256 (1Gbps): 752~842Mbps IPsec/AES256 (10Gbps): 864~1,060Mbps WireGuard (1Gbps): 815~883Mbps WireGuard (10Gbps): 1,430~1,890Mbps |
| Encryption Methods | DES, 3DES, AES or AES-128/192/256 encryption PQC TLS (Post-Quantum Cryptography TLS) ready Supports Hybrid Post-Quantum TLS key exchange using ML-KEM (Kyber) |
| Authentication Methods | SHA-256/SHA-384/SHA-512 authentication algorithm TLS_KYBER_RSA_WITH_AES_256_GCM_SHA384 FIDO2 Passkey authentication Certificate-based authentication TOTP MFA RADIUS authentication |
| Management | |
| Basic Management Interfaces | Web browser SNMP v1, v2c PLANET Smart Discovery utility/UNI-NMS supported PLANET NMS System/CloudNMS |
| Secure Management Interfaces | SSHv2, TLSv1.3, SNMP v3 |
| System Log | System Event Log Security Log Event Report Scheduled Signature Update |
| Others | Setup wizard Dashboard System status/service Statistics Security Monitoring Dashboard Connection status Auto reboot Diagnostics |
| Standards Conformance | |
| Regulatory Compliance | CE, FCC |
| Environment Specifications | |
| Operating | Temperature: 0 ~ 50 degrees C Relative Humidity: 5 ~ 95% (non-condensing) |
| Storage | Temperature: -10 ~ 60 degrees C Relative Humidity: 5 ~ 95% (non-condensing) |
Téléchargements et documentation officielle.
Téléchargez les documents techniques officiels, manuels constructeur et certificats de conformité pour le PLANET PQCG-800.
| Document | Version | Date | Format | Lien officiel |
|---|---|---|---|---|
| Fiche technique officielle (Datasheet) PQCG-800 |
v1.0 | 16/10/2026 | Télécharger le PDF | |
| Guide d’installation rapide (Quick Guide) Initial release. |
v1.0 | 08/10/2026 | Télécharger le PDF | |
| Manuel d’utilisation (User’s Manual) Initial release. |
v1.2 | 16/10/2026 | Télécharger le PDF |
Les réponses utiles.
Quelles sont les principales caractéristiques du PLANET PQCG-800 ?
D’après la fiche officielle : Débit maximal : 10 Gbit/s. Le détail complet est dans les spécifications techniques de cette page.
Où trouver la documentation officielle du PQCG-800 ?
Dans la rubrique Téléchargements de cette fiche : manuel et documentation PLANET, avec le lien vers la page officielle du constructeur.
Comment obtenir un prix pour le PQCG-800 au Maroc ?
Contactez l’équipe PINET à Casablanca avec la référence PQCG-800 et la quantité souhaitée : le prix et la disponibilité sont confirmés sur devis, avec livraison partout au Maroc.
Voir toutes les illustrations officielles PLANET (15 visuels constructeur)
Informations et illustrations d’après la fiche officielle PLANET PQCG-800. Prix, accessoires et disponibilité à confirmer auprès de PINET.
