Architecture Overview

The CU is a secure overlay network (see Figure 1). That is, it is an independent, logical network that runs over existing physical network facilities between participating sites. It employs a number of security appliances (one at each participating site) that create and maintain the CU network. The appliance, termed the CyberWATCH Underground Tunnel Server (CUTS), is a modest computer. Each CUTS will be sent to the participating site preconfigured,fully ready to drop into the site's network. The CUTS runs the Linux operating system and creates the CU network through either a Layer 3 or Layer 4 secure tunnel. The CUTS also provides network health information via SNMP to a health monitoring server. The CU is a separate logical network, but uses the campus/ISP (physical) connection of the local site. Ideally, the CUTS will be placed in the lab of a CyberWATCH member.