The Unified Command & Control Security Platform

SAFEnet is a patented open architecture, flexible framework security command and control operating system that is a generation beyond current integrated solutions. It overcomes the limitations of current industry offerings by providing:

• Unprecedented Flexibility to Customize and Scale the Solution
• True Unification of Attached Resources
• A Single Environment, A Complete Solution
• The Fastest, Most Cost Efficient Development of New Capabilities
• Capacity to Meet Security Needs Well into the FutureTrue Unification of Attached Resources

The benefits of Unification over Integration are many. True Unification allows complete collaborative and actionable views of the entire security picture for the fastest situational analysis and response. It allows automated response and management by exception for a solution that requires a fraction of the staff normally needed to monitor security. And true Unification allows the system to accommodate leap step technology advances that would require completely new version releases and potentially complete rewrites to address in other solutions. SAFEnet allows the fastest, most cost efficient development of assets needed to unify the full spectrum of data and commands from any attached resource.

Fastest Development of New Capabilities

SAFEnet’s use of modular add-ons to implement functionality allows development of new capabilities through discrete modules. This flexible framework architecture greatly diminishes the impact of new development on the rest of the system, reducing time and cost of development, testing and implementation. This also allows any newly developed module to be made available to every other SAFEnet client. What takes months or years and tremendous cost to develop in other solutions in the industry takes days or weeks to develop for SAFEnet and can be accomplished at a fraction of the cost.

Unprecedented Flexibility

SAFEnet facilitates nearly every aspect of security and facility management through modular add-ons which rest on top of a flexible framework architecture. The platform allows modular addition of Graphic User Interfaces, functionality, logic, data, and data driven device drivers. The result of this architecture is unprecedented flexibility, scalability and agility both to customize the solution set at install, for the individual user, or for additions in the future. No other solution on the market today is as flexible or agile.

Capacity to Meet Security Needs Well into the Future

If a command and control solution cannot meet your needs five years from now, it doesn’t make sense to implement it. SAFEnet is designed to allow rapid custom development of discrete add-on modules to accommodate literally anything required. It was designed specifically to allow Monitor Dynamics or the client to evolve the solution to any need, even ones we could not predict. Modular functionality makes this possible. The core framework architecture need not change to realize incremental growth of functionality. It is the only command and control solution that provides this kind of growth potential.

SAFEnet Delivers a Tremendous Return on Investment and the Lowest Total Cost of Ownership:

Reduced Cost of Installation

Unified Technology dramatically reduces the cost to attach new resources to the system and eliminates the surprises inherent in other C2 solutions when supposedly integrated devices require integration at install. Single solution license eliminates the additional or surprise licensing requirements to facilitate a complete solution.
Single environment solution allows the installation staff to focus on a single technology without managing the potential conflicts between the various separate executables.

Reduced Cost of Maintenance

A Single Unified Command and Control Environment minimizes training required to monitor and maintain the solution. Single solution greatly reduces time required to troubleshoot errors and reduces potential for errors or conflicts.

Reduced Cost of Operation

Unified collaborative and actionable access to the full range of data and functionality of attached resources allows management by exception, automation and the fastest possible situational analysis and response. The security staff is able to focus on only those events that require their immediate intervention, significantly reducing staff requirements to monitor security while improving response times to critical events. With SAFEnet, response to security events can happen in seconds rather than minutes. The efficiency of the system allows centralized monitoring of geographically disparate locations with a small staff. There are current clients that monitor more than 40 facilities across the US from a central location with a staff of less than 5.

Reduced Cost to Upgrade

Unified and complete environment reduces potential software conflicts and testing required for upgrades. With separate solution executables from other vendors potential conflict between legacy and new version releases must be considered. The framework architecture in SAFEnet separates the core solution from the individual functional elements at the code level. Addition of new functionality to the system may be made without customization or modification to the core. The result is a solution that may be freely added to or customized without potential conflict in upgrading to a new release. Modular add-on architecture allows any new or custom functionality developed to be available to all SAFEnet clients, significantly reducing the cost of new development and accelerating the availability of new capabilities for all SAFEnet solutions. New development of custom functionality is accomplished through modular architecture, greatly reducing impact on the rest of SAFEnet. The result is dramatically reduced cost to develop, test and implement.

Reduced Cost of Expansion

SAFEnet was built to scale. Any SAFEnet solution may expand to multiple or even global facility security management, distributed, centralized or both without hardware or software replacement cost or conversion
SAFEnet does not force dependence on proprietary control hardware. If your current command and control solution uses industry standard door control hardware from MERCURY Security you can migrate to SAFEnet without incurring hardware replacement cost.

SAFEnet uses modular add-ons for nearly every aspect of its functionality. These modules are licensed as functional solution sets. This eliminates the need for separate executables to manage each area of the security solution. Where traditional command and control solutions require purchase of multiple software packages with separate executables for complete management of your security resources, the SAFEnet enterprise solution set provides an all-inclusive environment with everything required to manage, control and administer security and more.

SAFEnet delivers an enterprise-grade Easy to Use Unified Solution that is HSPD-12, FIPS 201 and PIV II Compliant. (Certipath Certified)

Designed to give users the power and scalability of an IT centric enterprise-class access control solution, without the high costs, configuration time and extensive training commitments.

Designed to give users the power and scalability of an IT centric enterprise-class access control solution, without the high costs, configuration time and extensive training commitments. The PointGuard X software and hardware is easy to install and use, but does not limit the client to the “skinny” features of traditional small business access control packages. It integrated access control solution is built on a sophisticated enterprise open-architecture software platform called SAFEnet with an accessible MSDE or SQL back end, that has been successfully protecting high-security government and blue-chip enterprise clients for over two decades. It ’s unique value to the security industry comes from a fact that it was designed around specific requirements from dealers, installers and end users. The PointGuard X system delivers the greatest ease of installation and useability on the market.

An effective entry-level access control system should:

• Be able to expand easily and cost effectively as the need for additional control locations grow.
• Be easy to install, providing a rapid return on its investment.
• Offer an Xtreme range of usability, from the Receptionist, to the HR Department to the Security and Loss Prevention Manager.
• Be capable of adding features and capabilities as the need for additional security measures grow.
• Be able to deliver interactive color
• Graphics with dynamic icons for mapbased system control.
• Offer Microsoft® type interactive device trees for real-time updating and control of field devices.
• Include simple yet effective photo ID and badging capabilities.
• Provide integration capabilities that match the most demanding enterprise platforms.
• Be IP network centric and converge seamlessly with existing infrastructure.

The VIEWpoint Hybrid Video Recorder (HVR) is a combination IP network video recorder and an analog digital video recorder in one.

VIEWpoint runs both analog cameras and IP cameras on the same system, individually – delivering total scalability, flexibility and value to the end user.

Since the inception of digital video recording, VIEWpoint has been delivering video surveillance and recording solutions to organizations across the globe. Today, VIEWpoint systems can be found in over 30 countries around the world, protecting everything from international banks and financial institutions, to high-security government buildings and quick serve restaurant franchises. Thousands of security minded customers have relied upon the VIEWpoint Series of DVRs and HVRs to protect people and property from frivolous lawsuits, theft, vandalism, armed robbery and other crimes. Whether your need is for a basic video security system with just a few cameras, or a professional networked video surveillance system with centralized command and control capabilities, intelligent video and object recognition, the VIEWpoint series has the perfect digital recording solution to meet most any video recording need.

VIEWpoint is the perfect solution for customers taking their analog DVR system to the next level. The hybrid design allows users to migrate towards IP video while maximizing value from the use of existing analog cameras and existing wiring infrastructure. VIEWpoint offers an unmatched combination of power and performance in a cost-effective package. Users can realize the benefits of high resolution IP cameras where they need them most within their organization, while still getting maximum value from existing analog cameras, cabling and power infrastructure. VIEWpoint reduces installation and operating costs through its many user friendly features such as the logical diagram, which empowers users with a virtual input and output template to instantly connect systems and cameras together – and an intuitive graphical user interface, which makes installation easy and decreases learning times for end-users and operators.

The VIEWpoint HVR unifies with the SAFEnet platform to deliver a blend of Access Control, Intrusion Detection and Video Surveillance that is unmatched in the industry in regards to features, storage capability and affordability.

VIEWpoint features provide customers with a complete solution for live viewing, recording, playback and storage of digital video. VIEWpoint continues to lead the way in video output flexibility, quality display, remote management and expanded playback and search capabilities to ensure complete coverage for security professionals.

A Cross-Section of VIEWpoint HVR features:

• Live Digital Video
• Digital Recording for playback
• Hard Drive Video Storage
• Web Client interface
• UDP Capture Card for Analog Camera Function
• ATM Transaction Recording and Video
• Cash Register Transactions Recording and Video
• Alarm and voice over IP
• Video Time and Attendance module
• IP Camera Integration
• PTZ Control, With presets and touring
• Access User Rights
• Remote Client Applications for viewing live video and playback remotely
• Addition Software Tools
• Multiview Application – for viewing multiple DVR’s/NVR’s on the network at the same time

Making FIPS 201 Compliant PACS, Reading PIV and PIV-I, a Reality for Government

To comply with the directive for all federal agencies to file implementation plans for a federated identity credential access and management (FICAM) strategy as defined by the Office of Management and Budget (OMB) Memo 11-11, Monitor Dynamics offers agency Security Officers an accelerated path to compliance with a turn-key FIPS-201 compliant PACS (Physical Access Control System) solution, capable of reading PIV, PIV-I and PIV-C out of the box. The OMB memo, issued February 3, 2011, adds true repercussions and monetary holdbacks on IT funding for Agency non-compliance of the Government’s call for implementation of identity and credential access and management systems, policies and processes.

OMB M-11-11 recognizes that a large percentage of federal employees currently use PIV credentials that meet the FIPS 201 standard required by HSPD-12, there remains a significant opportunity for all agencies to “aggressively step up their efforts to use the electronic capabilities of the credentials”; specifically to use these credentials as the common means of authentication for access to facilities, networks, and information systems.

Today, Monitor Dynamics is the only PACS manufacturer with a field-proven, 3rd party certified electronic access control system that can meet the requirements of an integrated approach to controlling access for both federal facilities and their associated information systems. In 2010, after being the first PACS to pass the stringent CertiPath Certification, and the only PACS to pass on the first try, MonDyn partnered with three best-in-class Identity Solution Providers to create The Trusted FICAM (Federated Identity Credential & Access Management) Platform. By teaming with ActivIdentity (ActivEntry F5 board), CertiPath (System Validation and Compliance Testing) and Veridt (Three Factor Authentication Readers), MonDyn’s Trusted FICAM Platform delivers a complete FIPS 201 compliant Trusted PACS system.

The Trusted FICAM Platform was the first PACS based system to read the appropriate card formats that are necessary for complying with PIV-I standards. Trusted FICAM is currently the only PACS system reading PIV and PIV-I utilizing FIPS-201 compliant three-factor authentication readers (card, biometric and PIN number) in a Department of Defense operating environment.

The Path to an Upgrade

Migrating From SAFEnet 5.6.3 (sp3) to SAFEnet 6.2.16 (sp4)

I. Comprehensive Site Survey

• a. Meet to MonDyn System Engineer to discuss options, process flow, path forward
• b. Review process with MonDyn Engineering Team
• c. Perform detailed system diagnostic, analysis and asset discovery (report)
• d. Create Plan of Action with Milestones for Implementation (Based on Discovery)
• e. Create Final Upgrade Price Quote (Based on Discovery)
• f. Review and Receive Upgrade Sign-off from MonDyn Engineering Team

II. Purchase New Servers (Database and Application) and Workstations*

• a. Install 2008 Server
• b. Install 2008 SQL Server
• c. Install MS Windows 7
• d. Install SAFEnet 6.2.16 sp4 on New Servers
• e. Configure Disaster Recovery and Backup

III. Purchase SAFEnet 5.6.3 sp3 to 6.2.16 sp4 Upgrade Software*

IV. Acquire the existing SAFEnet 5.6.3 sp3 Database Information from Customer*

• a. Perform Database Conversion (conversions can be performed on-site, depending on the information security needs of the client due to sensitivity or classification level of the data being converted)

V. Install Converted Database to New Servers (with customer release)*

VI. Test Servers and Configurations*

• a. Change Server Names to Match Sites
• b. Change IP Addresses to Match Sites

VII. Setup New Workstations*

• a. Synchronize with New Upgraded Servers

*Performed at Factory – unless otherwise required by customer Synchronize

VIII. Create System Cut-Over Plan (based on customer site specifics and requirements)

IX. Install on Network and Cut-Over to New Servers (as detailed in plan)

X. Test all Alarm Points and Access Control Functionality

XI. Train Users on Changes – SOFTWARE UPGRADE COMPLETE

The new SAFEnet 6.2.16 sp4 System and Related Hardware

I. All Legacy SAFEnet Hardware is 100% Compatible with new SAFEnet Software Versions

• a. While not necessary, it is recommended that any client running legacy PPU hardware (175 & 180 processor boards), convert to PB2000 hardware, as PPU hardware is no longer manufactured

II. If the client site is running on legacy hardware, we recommend upgrading the field panels at the time of upgrade. This is primarily due to the risk that parts availability issues may arise from unforeseen end-of-life announcements from our suppliers on any hardware older than the IDC (Integrated Digital Controller) Line.

III. A Phased Implementation Plan for the installation of new SAFEnet Hardware can be created with assistance from the Monitor Dynamics “Blue Team”. This Implementation can be modified to meet the budgetary and operational needs of the client.

IV. Hardware Conversions can be phased-in during the SAFEnet 6.2.16 sp4 Software Upgrade for best results.

• STAT – H.I.S. – Handheld Identity Station (One, Two or Three Factor Authentication)
• STAT – H.I.S. TA – Integrated Time & Attendance
• STAT – M.I.S. – Mobile Identity Station (Ruggedized Tablet PC with One, Two or Three Factor Authentication)
• STAT – M.I.S. TA – Integrated Time & Attendance

STAT delivers up-to-date, wireless mobile credential validation for millions of cardholders – with or without database connectivity, and is powered by the SAFEnet Unified PACS Platform.

STAT Identity Stations are designed to allow authorized security personnel the ability to control access to any site, no matter how remote, with confidence by quickly authenticating and validating the roles, credentials and identities of individuals attempting to enter a specified area. Identity information on millions of individuals can be managed, using a handheld or ruggedized table device, without affecting performance, and without requiring a persistent connection to a server or other data source.

STAT was initially designed for use by the perimeter security guard, needing a FIPS 201 (HSPD-12) compliant mobile or handheld CAC, PIV or PIV-I, three factor authentication reader to validate the identities of all vehicle passengers. With integrated time & attendance capabilities, the STAT identity station quickly became a valuable tool for Federal Agencies to track personnel resources and more securely occupy guard stations at campus, base and agency perimeters.

STAT’s mobile ID verification capabilities are critical when major emergencies, homeland security incidents, riots or natural disasters happen. These incidents may require the support of a number of federal, state, and local agencies, as well as private organizations, that do not collaborate with one another on a day to day basis. Faced with such a large and diverse group of first responders, accurate and efficient access control is very challenging. With STAT, unified into the SAFEnet System, individual cardholder privileges and identities are drawn from existing independent databases and published to STAT Handhelds and STAT mobile devices in a secure, fast and compressed data format.

As a smart card holder presents their credential, the information on the card is validated and the privileges displayed to the Security Officer, charged with controlling access and keeping facilities secure. STAT Identity Stations ensure that even when all computer and communication networks are down, the right people are able to gain access to the right areas at the right time.

STAT Identity Station Basic Features:

Mobile validation – Perform immediate credential validation, anywhere, with or without network connectivity.

Large Database Storage Capabilities – Individual identity and access control information is stored on the STAT in a highly compressed, digitally signed identity and privilege list. With STAT, access and identity information on millions of cardholders from various agencies and organizations is readily available, anywhere, anytime.

Multiple, independent databases – Access privalege and identity data are sent to the STAT IPL Publisher from existing Government personnel databases. Participating independent organizations at the city, county, and national levels continue to maintain the identity and access privilege information in independent databases as they do normally.

Always current and updated – The STAT System synchronizes dynamically using standard wired or wireless connections when available. When an emergency strikes, or the STAT Identity Station is needed as a stand-alone solution, the device will always contain the latest data and a full electrical charge.

Continues working during network downtimes – STAT Identity Stations always store the most up-to-date identity and access privilege information in their local memory. This means that cardholders can be validated instantly without requiring a wired or wireless network connection to perform the operation, grant or deny access.

Multi-use device – The STAT Handheld or Mobile Identity Station is part of a Unified Security System. This means that the STAT can be used for various applications ranging from security at special events, mustering, and access control in remote environments where connectivity to outside networks is not possible.

Comprehensive reporting features – All events on the STAT Identity Station are logged and uploaded to the Central Station during synchronization times. These event logs can be used by security personnel to create comprehensive activity and after-action reports as required by supervisory personnel.

STAT Identity Stations can deliver one, two or three factor authentication using Card, PIN and Biometric (finger) for true FIPS 201 compliance at every guard station, security checkpoint, gate entry or mobile emergency location.

STAT supports US Government issued smart cards including:

• FIPS 201-compliant PIV and PIV-I Cards
• First Responder Authentication Credential (FRAC)
• All Common Access Cards (CAC)
• Mariner Administrative Cards
• US State Department PKI Cards
• Transportation Worker Identity (TWIC) Cards
• Contact and contactless smart cards
• US driver’s licenses

High-Security SCIF (Sensitive Compartmentalized Information Facilities) “Closed Area” Solutions

Monitor Dynamics is the clear leader in securing government agencies both large and small, including critical infrastructure and Department of Defense (DoD) locations across the globe. MonDyn Engineers have been developing access control and intrusion detection systems for SCIF environments since 1979. The SAFEnet platform unifies access control and intrusion detection for Security Officers and Administrators to meet the high-security, DCID and UL system compliance demands required of SCIF environments.

MonDyn offers a turn-key Modular-Off-The-Shelf (MOTS) system for SCIF environments that is affordable, effective and easy to install and operate. Utilizing the latest version of SAFEnet 6.2.16 sp4 combined with the new DDC3K edge technology and ACU7 Keypads, the MonDyn SCIF solution is designed to exceed even the most stringent closed area requirements.

The SAFEnet Unified PACS system was designed by Government Security Officers – for Government Security Officers. As the world’s first Modular-off-the-Shelf product offering (MOTS), SAFEnet delivers SCIF specific security controls that, at the heart of the system, combine access control and intrusion detection, side by side, better than anyone else in the security business – past, present or future.

{SAFEnet was the first PACS solution to received and announce third party independent verification and validation (IV&V) for DITSCAP, DIACAP and FISMA Certification & Accreditation procedures}

Certified Maintenance Agreements

The CMA coverage as listed is available after, or as a supplement to, the initial warranty.

Certified Monitor Dynamics Dealers opting to purchase support services on an as needed basis may do so at prevailing Time and Material Rates (T&M). Certified Dealers with a minimum of two trained and certified SAFEnet technicians will be qualified to purchase software maintenance agreements. Those individuals will be registered as the points of contact for the service agreement. It is important to mention that customers without a CMA may experience a delay in service while the Monitor Dynamics technical support agent works with them to establish a method of payment for services. Valid methods of payment for T&M services can be by credit card or a signed Purchase Order for Dealers that have established a credit line. Integrators or Dealers with sites not covered by Warranty, Intermediate Care Service or Critical Care Service options are encouraged to create an Open Purchase Order to cover T&M cost to reduce delay in support coverage. Pricing for T&M technical support services are in the Dealer Price list.

For Dealers desiring to purchase a CMA for systems that are not under a current CMA, these systems may be subject to a recertification charge prior to inclusion under CMA as well as a charge for a software upgrade.

Monitor Dynamics will only accept calls from Certified Dealers with current Service Maintenance Agreements. If a call is received from a Dealer other than the Certified Dealer on record, Monitor Dynamics will require permission in written form from the end user stating that they (the end user) are requesting us to share data about their specific site with another Dealer. After receiving the letter, the Certified Dealer of record will be notified and will be provided ample time to review the account before MonDyn will supply any information to any other integrator other than the SSP of record.

Standard Telephone Service

Our Customer Support Center provides standard telephone assistance during normal support hours (Mon – Fri, 7:00 a.m. – 6:00 p.m., CST). This also includes dial-in system interrogation and diagnosis ability for SAFEnet, PointGuard and VIEWpoint systems for those customers who have installed an access path (There is no charge for Critical Care Service and Intermediate Care Service customers; however, a fee is assessed for warranty customers.) To prepare for this service, the end user should supply an auto-answer modem (9600 baud or greater) or a network connection and all of the appropriate software in advance of a remote service request. A dedicated phone line and modem with PC Anywhere are preferred, but not required.

24 x 7 Coverage

A Certified Dealer’s product-certified technician may leave an emergency message, outside the normal coverage hours, in the technical support emergency mailbox by calling the standard technical support telephone number and leaving the message. If the system the caller is servicing has a valid Critical Care Service agreement and the call is an emergency in nature, there will be no charge for the after hours or holiday telephone technical support provided. If the caller is at a site which does not have a valid Critical Care Service agreement and requires telephone technical assistance, a purchase order at prevailing rates must be forwarded to the on call technician prior to telephone support activities being rendered. Additional charges apply if modem diagnostic support is required.

Telephone Technical Support

During the Agreement, Monitor Dynamics will only accept service calls from employees of the Certified Dealers of Record for the specific installation to which the support inquiry relates. This caller must have taken and passed a Monitor Dynamics certified course in the product they are servicing. Any other caller requiring technical assistance must forward to a document to Monitor Dynamics, in writing on the end user’s company letterhead, either (1) granting permission from the end user to service the system or (2) stating that the SSP of Record has changed to the caller’s current employer. End users do not have access to direct technical support from Monitor Dynamics.

Products Not Purchased from Monitor Dynamics

On many occasions, the Customer Support Center is requested to provide assistance on hardware and/or software products not purchased from Monitor Dynamics, or assistance is required due to problems caused by these products. When requested, the Customer Support Center will attempt to provide assistance where possible. All Customer Support assistance for such support requests will be billable under the T & M rates then currently in effect.

Software Enhancement Update Service

This service is included as required provision as new features and enhancements are found in software version updates. This service also includes updated documentation as appropriate. Depending on the product, separate charges may be applicable to enhancements or major version upgrades.

Software Maintenance Update Service

This service is included as part of the Critical Care Service and Intermediate Care Service.

Firmware Updates

Firmware updates are provided for IDC and Mercury hardware and Keypad/Readers for Critical Care Service and Intermediate Care Service customers, by request.

Substantial energy savings of up to 80% can be made using Borer’s power management and energy delivery systems.

Alternative legacy door access systems typically consume in excess of 50 Watts to control one door equipped with a fail safe electrical release.

Compare this with less than 2 Watts required by a Borer intelligent Smartcard Reader and electric release combination using Borer’s smart power delivery and PoE energy saving technology.

The size of credit card, the Lock Manager is normally mounted inside the Push to Exit housing, is designed to multiple tasks including managing the Power and Data supplied from the Midspan Bridge and monitor door status.

Please see attached Borer datasheets and contact our office 01279816485 for a site survey and costs.

Download Borer White Paper Wiegand Security Compromise (October 2007)
Download Borer Catalogue 2010
Download Borer Fingerprint Reader

Feature Screenshots

Standard home screen	Installer Customisation
Set screen	Area/Group set status

A system management tool:

Event log	System setup

Galaxy® Dimension TouchCenter can be utilised as an effective system management tool, enabling users to see at a glance, the full system status and take action appropriately. A touch on the screen is all it takes to use the TouchCenter as an effective business management tool.

• Track when employees and temporary users operate the system
• View full system status at a glance
• Clear and simple management of system users

Installer access:

For installer access to the system, the following features are available:

• Emulation of standard MK7 2×16 alpha LCD keypad display
• Diagnostics screen allows testing of:
• LCD display
• Audio
• Event log display