Generic background of colours from the Viasat visual identity

KG-250XS HAIPE Encryptor

Our lowest SWaP rugged HAIPE

Prepare your Mission for the Next Crypto Evolution.

Learn more
Top/side view of a right hand holding a black, KG-250XS Inline Network Encryptor with the Viasat logo in white
Left side view of the KG-250XS at an angle
Bottom view of the KG-250XS featuring a battery symbol

The Viasat KG-250X/KG-250X-FC (fiber copper) is a rugged, flexible, low-size, weight, and power (SWaP), high-speed National Security Agency (NSA)-certified Type 1 Inline Network Encryptor (INE). It protects Top Secret/Sensitive Compartmented Information (TS/SCI) and uses the latest technologies and software to provide the network security tactical and mobile users rely on.

Download resources

Packing big networking power in a small form factor for data in transit, the Viasat KG-250XS delivers features above and beyond standard HAIPE requirements and improved performance over high-latency links with embedded multicast video on demand and Embedded Transmission Control Protocol/Internet Protocol (TCP/IP) acceleration. The KG-250XS has advanced cryptographic capabilities (ACC), is Over-The-Network Keying (OTNK) Key Management Infrastructure (KMI) Aware, is Product Delivery Enclave (PDE)-enabled, and offers pass-through Layer 2 traffic using Virtual Local Area Network (VLAN)/Ethernet tunneling over Layer 3 networks.

The KG-250XS allows you to remotely rekey a network of HAIPE devices from a physically secure location with HAIPE-to-HAIPE over-the-air/net keying and leverages a field-proven software-upgradable design, so it evolves over time to meet new requirements without hardware changes. It also comes equipped with a browser-based human-machine interface (HMI) for easy configurations and centralized INE management is provided at no extra cost. The Viasat KG-250XS provides trusted on-the-go IP encryption that won’t weigh you down.

Support equipment

  • 1U rack mount holds three Viasat KG-250X, KG-250X-FC or IPS-250X (INEs) 
  • Rack mount holds two Viasat KG-255X INEs with high availability applications, hot swappable fans, dual-redundant power supplies
  • 1U rack mount universal shelf holds two Viasat KG-255X, three Viasat KG-250X/KG-250X-FC/IPS-250X or four KG-250XS INEs

Management:  VINE Manager software

  • Centrally manage and access up to 1,500 INEs
  • Includes a security association (SA) wizard to auto populate remote routes and tunnel SAs
  • Assign keys to common Pre-Placed Key (PPK) sequences on multiple INEs
  • Supports HAIPE and Media Access Control Security (MACsec)/Ethernet Security Standard (ESS) Viasat encryption

Learn more about VINE network management system

We offer security, simplified. With 24/7 customer support, our dedicated team of experts is available around the clock to lend a hand with installation and integration, sustainment of Viasat products and networks, and more.


Contact our help desk toll free: +1-888-272-7232 | Tel: +1-760-476-2600


Secure communications customers: use our portal login or create a new user registration.

Support

  • 3-year warranty (extended options available – terms and conditions apply)
  • Free training and 24/7 technical support
  • INE trade-in program available

Let us help you find a customized security solution that meets your needs.

Help me find a solution
Resources
KG-250XS datasheet
KG-250XS MSRP price list
Download
BEYOND Encryption buying guide
Download
BEYOND Encryption customer support guide
Download
Two Device Rackmount datasheet
Download
Three Device Rackmount datasheet
Download
Universal Shelf datasheet
Download
Beyond Encryption
Transitioning to next-generation hardware
Establishing a foundation for continuous threat resistance
  • Transition legacy high-assurance encryption devices to next-generation hardware platforms.
  • Enable incremental NSA-driven upgrades on a path toward future-ready cryptography.
  • Extended operational lifespan while maintaining mission assurance.
Why transition now?
  • Rapid advances in computing and cryptanalysis are reshaping the threat landscape.
  • Long-deployed high-assurance hardware faces growing risk as adversary capabilities evolve.
  • Proactive modernization is essential to protect U.S. and allied classified communications.
Extract of the BEYOND Encryption Infographic
Prepare to transition
Edge security graphic that looks like a keyhole lit up in vibrant blue surrounded by various cyber elements
Own your key management — from fill to post-quantum

The KIK-007 Modern Key Loader (MKL) meets SERD 2.0, CM2, and KMI-3300 requirements, with an intuitive Android OS that cuts training time and a field-repairable design that keeps operations running when it matters most.

Download KIK-007 datasheet