Secura LION – Ultra-High Security on Demand for your Zero-Trust Environment

PESA LION offers ultra-secure video, audio and USB/KVM distribution. PESA LION is the only fully CNSA compliant solution available today. PESA LION is leading Command and Control (C2)  and into next generation IP networks with secure encrypted IP video, audio, KVM and USB distribution solutions designed from the ground up using FIPS 140-2 cryptography for DoDIN APL certification.

• NIST validated standard crypto security (FIPS 140-2)
• Fully CNSA (Suite B) Compliant
• Mutual Authentication TLS 1.2
• Trusted Protection Modules
• Fully scaleable IP switch fabric
• Complete end to end secure solution designs

With the recent cybersecurity threats and attacks, including breached content, the shutdown and lock outs of systems and the recurrence of ransomware, the reality of the need for zero-trust and cybersecure systems is evident. The White House responded with a new Cybersecurity Executive Order that lays out and defines stringent mandates to update policies and procedures across government entities for adopting cybersecurity best practices.

Learn more in the Webinar, “Prepare for Transformational Changes to Your Video Distribution Systems (VDS) to Meet the Objectives of the Cybersecurity Executive Order”  


Secura LION Command Center

PESA Secura LION Command Center is the centerpiece for the Secura System and provides configuration, control and management of the Secura endpoints and workflow. The Secura LION Command Center (SCC) defines, configures and manages all audio, video, USB and KVM signals as well as their inherent security classifications within one system, even as it scales.

Secura AV-IP

Secura audio/video over IP (A/V over IP) endpoints, or nodes, provide secure, AES-256 encrypted, carriage of HDMI 2.0 video and audio, simultaneously supporting multiple authorization levels and multiple video formats with up to 4K UHD resolutions. Endpoints equipped with USB ports for HID devices, CAC readers and Keyboard, Video, Mouse (KVM) over IP are also available.

Secura Navigator Control Panel

Secura Navigator

The PESA Secura Navigator Control Panel is a small, table-top remote control panel, featuring a full color, graphic, touchscreen. Available in multiple sizes, the panel is designed to provide a cost-effective, customizable, solution to control panels for IP endpoint routing.

With the prevalence of cyber attacks in the news today hitting a wide variety of companies, it is important to understand where your video, audio, control and data may be vulnerable and how to best secure it.

Learn more in the Whitepaper, “Is Your Live Video and Data Safe?”  

encrypted live video and data for secure distribution
PESA Secura Secure Encrypted IP Video, Audio, USB, KVM Distribution


  • Fully CNSA (Suite B) Compliant
  • NIST standard cryptological security (FIPS 140-2)
  • Mutual Authentication TLS 1.2
  • Multiple Independent Levels of Security (MILS)
  • Multiple Formats and Authorization Levels: One System
  • Precision to the pixel with true 4Kp60 at 4:4:4
  • AES-256 Encryption, including essence
  • Prevents AV cables from leaking sensitive information
  • USB CAC and Token Access (HID but not USB drives)
  • Linearly scalable - few ports to enterprise class > 36,000 ports
  • Multiple Signals via Single Cable Interface
  • Control and USB signals encrypted


FIPS 140-2 Cryptographic Module Validation Program (CMVP) Certification bestowed upon PESA Crypto Module used within Secura® VDS-IP for CNSA compliant encrypted, cybersecure video, audio, USB, and control distribution

PESA’s Secura LION is the only live enterprise, cloud-architected, secure CNSA (Suite B) compliant, video distribution platform for closed and distributed environments with encryption in all flows.”

— Howard Sutton


Announcing Secura LION, a Secure, WAN-Enabled, Multiclass, Source-to-Glass Video Distribution System Over IP (VDS-IP) Platform to Protect and Defend Sensitive, High-Value or Classified Video, Audio and KVM Content

“Secura LION has broken through the IP barrier providing an unprecedented level of encrypted MILS security for video, audio and KVM distribution systems,” said Howard Sutton, PESA chairman and CEO.

Secura Encrypted IP Video, Audio, USB and KVM Distribution System (VDS)

Specs & Ordering Info



Inputup to 4Kp60 4:4:4 (single cable) HD, Full HD, 4K UHD (4:4:4) plus HDR
Outputup to 4Kp60 4:4:4 (single cable) HD, Full HD, 4K UHD (4:4:4) plus HDR
Video Resolution Display FormatsMixed (Dynamic) EDID
Low latency ~1ms
AudioDolby (HDMI 2.0), Mono, Stereo,5.1


RJ451 Gb/s Copper Ethernet (optional 2.5 Gb Ethernet)
RJ45 SFP10 Gbe Copper Ethernet
SFP/SFP+SFP+ 10Gb Fiber Ethernet (TRX)
HDMIHDMI 2.0 / HDCP 2.2 / HDMI 1.4 / HDMI 1.3
POEYes (RJ45)
Display Port Yes


Max Endpoints~1 Million plus+
mDNSYes – Registration and Discovery (SECURED TUNNELS)
ARP No (Not Secure)
LAN/Campus CapableYes
Open Architecture – Cloud Native Design



Multi Factor AuthenticationYes
Mutual Authentication TLS 1.2Yes
Trusted Protection ModuleYes
CNSA Top Secret EncryptionYes
Number of Security Levelsunlimited
MILS LevelsYes
Video EncryptedYes (AES256)
Audio EncryptedYes (AES256)
USB EncryptedYES (PESA Crypto Module- FIPS Validated)
Control EncryptedYES (PESA Crypto Module- FIPS Validated)
DoD APL and NIAP Secure SwitchYES (Arista with SDN and TPM)
NIST Certified FIPS 140-2 Encryption – YES!



PESA Crypto ModuleYes
NIST FIPS 140-2 Validation (CMVP)Yes (Cert 4021)
DoDIN APL SwitchesYes
NIAP SwitchesYes
TAA Compliant Yes
Conforms to National Security Export Restrictions YES


Environmental Specifications:

Operating Temperature0 – 40 °C
Humidity5% to 95%, non-condensing

Secura LION Command Center Software

SEC-IP-SCSW-3 Annual Term License for SECURA® Crypto System Control Software, per each PESA secure device
Standard Software License for SECURA® Crypto System Control Software, per each IP secure device
Standard Software License for SECURA® Crypto System Control Software, per each third-party (Non-PESA) secure system device.
SEC-IP-SWMNT-5 5 consecutive years of Annual Software Maintenance for SECURA® Standard Software License, per each IP secure device
SEC-IP-SWMNT-SL-3RDP 5 consecutive years of Annual Software Maintenance for SECURA® Standard Software License for third-party (Non-PESA) secure system devices


Secura LION Command Center Hardware

SEC-IP-SCH-250 SECURA® Server, System Controller Hardware, 2RU, for systems with greater than 96 up to 250 Endpoints
SEC-IP-SCH-250-RD Redundant SECURA® Server, Hardware, 2RU, for systems with greater than 96 up to 250 Endpoints


Validated IP Switches and Accessories

DCS-7050QX2-32S-F+A Arista 7050X2 Switch, 32x40GbE, QSFP+, 4xSFP+, with 12 Month A-care Coverage
DCS-7050SX2-128-F+A Arista 7050X2, 96x10GbE, SFP+, 8xQSFP, with 12 Month A-care Coverage
Arista 7060X2, 32x100GbE, QSFP, 2xSFP+, with 12 Month A-care Coverage
DCS-7060CX2-32S-F+A Arista 7060X2, 32x100GbE, QSFP, 2xSFP+, with 12 Month A-care Coverage
DCS-7060SX2-48YC6-F+A Arista 7060X2, 48x25GbE, SFP, 6x100GbE, QSFP, with 12 Month A-care Coverage
DCS-7300X-32Q-LC Arista 7300X 32-port 40GbE QSFP+ linecard (Ships in chassis)
DCS-7300X-32Q-LC# Arista 7300X3 32-port 40GbE QSFP linecard for 7300X3 Series (Ships in chassis)
Additional Information on Arista 750 Series Switches Link to Arista 750 IP Switches 


Secura Services and Extended Maintenance Options

OSC-DOM-DY1 Domestic On-site Commissioning Day 1 (per 8 hour day)(North America only)
OSC-DOM-ADDLDYS Domestic On-site Commissioning Additional Days (per 8 hour day)(North America only)
IPEXW Extension of warranty for hardware items (year 2-4)

For Endpoint and Panel parts please see respective pages.

Please contact us at for more information.

Additional Resources

Brochure: Secura Command Center

Brochure: Secura IP

Brochure: Secura Touch Panel

Brochure: C2 Use Case

Brochure: Distributed C2 Use Case

Please contact for Data Sheets

Please contact or for additional user guides or product manuals. 

Shopping Basket