1601369-Bizzabo-Thumbnail-Banner-background-dots.png

KG-255XJ Multi-Channel Ground Operating Equipment (GOE)

Flexible, next-generation Satellite Operations Center data protection

Prepare your Mission for the Next Crypto Evolution.

Learn more
Top view of a black KG-255XJ with a white Viasat logo featuring status lights, power and reset buttons, data ports and a battery compartment
GOV_1088807_KG-255XJ_011_hires.jpg
GOV_1088807_KG-255XJ_019_hires.jpg
Top right-angled view of the KG-255XJ
Top left-angled view of the KG-255XJ

The KS-255XJ is the NSA-certified Type 1, next-generation End Cryptographic Unit (ECU) for securing Telemetry, Tracking, and Commanding (TT&C) and mission data in Satellite Operation Centers (SOCs). It can protect Top Secret/Sensitive Compartmented Information (TS/SCI) and below data, help reduce integration costs, and seamlessly integrate into networks.

Download resources

The flexible KG-255XJ is configurable for multiple cryptographic functions using industry standard Ethernet interfaces for both data and control.

 

Building upon the applications of the KS-252 with lower size, weight, and power (SWaP), the Viasat KG-255XJ has higher traffic data throughput while supporting existing algorithms, formats, and features like TT&C, Command Spacing Stamp (CSS), Cypher Text (CT) Inversion, and traffic statistics.

 

Leveraging Gigabit Ethernet interfaces, this high-availability security appliance delivers modern networking standards for your SOC. The KG-255XJ has the ability to host a wide range of networking applications within its high-assurance boundaries, such as system logging protocol (SYSLOG), Network Time Protocol (NTP), and Lightweight Directory Access Protocol (LDAP).

Additionally, the Viasat KG-255XJ is software reprogrammable, allowing you to conveniently upgrade or modify its functionality for future applications including updated algorithms, key specifications, additional network support, cybersecurity support, and Transmission Security (TRANSEC).

Crypto-modernization centric

  • Six independent channels
    • Each channel is configurable:
      • Algorithm and mode
      • Key
      • Direction (encryption or decryption)
      • Source/Destination address
  • Encryption and decryption channels each have aggregate throughput of 900 Mbps (1800 Mbps total)
  • Human-machine interface (HMI) and Representational State Transfer (REST) man-machine interface (MMI) control interfaces
  • Software upgradable
    • Programmable encryption
    • Adapt to evolving security requirements
    • Upgrade to the latest commercial standards

Light weight, compact size

  • Less than 9 lbs
  • Two KG-255XJs fit side-by-side in a standard 19 in. x 1U rack

*Throughput speeds are shown for UDP with 1 channel.

 

KG-255XJ (US SW)

KG-255XJ (CNSA SW)

Suite

A/CNSA

CNSA

Traffic channels

6

6

Algorithms

Mbps*

Mbps*

CAROUSEL

60

  

CARDHOLDER

60

  

BELSHAZZAR (PEGASUS)

180

  

INSCOE (KG-29)

60

  

INY (KI-23)

20

  

GOODSPEED (KG-28)

80

  

AES-256 (ECB, CTR, GCM, CFB) (Gryphon and ACE compatible)

900 (ECB, CTR, GCM)

700 (CFB)

900 (ECB, CTR, GCM)

700 (CFB)

Bypass


600


600

Support equipment

  • 1U rack mount holds two Viasat KG-255XJs
  • High-density, high-availability rack mount holds up to two KG-255XJs

Management

  • Web-based management or application programming interfaces (APIs) available

We offer security, simplified. With 24/7 customer support, our dedicated team of experts is available around the clock to lend a hand with installation and integration, sustainment of Viasat products and networks, and more.


Contact our help desk toll free: +1-888-272-7232 | Tel: +1-760-476-2600


Secure communications customers: use our portal login or create a new user registration.

Let us help you find a customized security solution that meets your needs.

Help me find a solution
Resources
KG-255XJ datasheet
Download
KG-255XJ MSRP price list
Download
BEYOND Encryption buying guide
Download
BEYOND Encryption customer support guide
Download
Two Device Rackmount datasheet
Download
Universal Shelf datasheet
Download
Beyond Encryption
Transitioning to next-generation hardware
Establishing a foundation for continuous threat resistance
  • Transition legacy high-assurance encryption devices to next-generation hardware platforms.
  • Enable incremental NSA-driven upgrades on a path toward future-ready cryptography.
  • Extended operational lifespan while maintaining mission assurance.
Why transition now?
  • Rapid advances in computing and cryptanalysis are reshaping the threat landscape.
  • Long-deployed high-assurance hardware faces growing risk as adversary capabilities evolve.
  • Proactive modernization is essential to protect U.S. and allied classified communications.
Extract of the BEYOND Encryption Infographic
Prepare to transition
Edge security graphic that looks like a keyhole lit up in vibrant blue surrounded by various cyber elements
Own your key management — from fill to post-quantum

The KIK-007 Modern Key Loader (MKL) meets SERD 2.0, CM2, and KMI-3300 requirements, with an intuitive Android OS that cuts training time and a field-repairable design that keeps operations running when it matters most.

Download KIK-007 datasheet
Talk to us
Looking for an innovative solution? Talk to us about your needs.
Contact us

The appearance of U.S. Department of Defense (DoD) visual information does not imply or constitute DoD endorsement.