Secura LION – Ultra-High Security on Demand for your Zero-Trust Environment

PESA LION offers ultra-secure video, audio and USB/KVM distribution. PESA LION is the only fully CNSA compliant solution available today. PESA LION is leading Command and Control (C2)  and into next generation IP networks with secure encrypted IP video, audio, KVM and USB distribution solutions designed from the ground up using FIPS 140-2 cryptography for DoDIN APL certification.

• NIST validated standard crypto security (FIPS 140-2)
• Fully CNSA (Suite B) Compliant
• Mutual Authentication TLS 1.2
• Trusted Protection Modules
• Fully scaleable IP switch fabric
• Complete end to end secure solution designs

With the recent cybersecurity threats and attacks, including breached content, the shutdown and lock outs of systems and the recurrence of ransomware, the reality of the need for zero-trust and cybersecure systems is evident. The White House responded with a new Cybersecurity Executive Order that lays out and defines stringent mandates to update policies and procedures across government entities for adopting cybersecurity best practices.

Learn more in the Webinar, “Prepare for Transformational Changes to Your Video Distribution Systems (VDS) to Meet the Objectives of the Cybersecurity Executive Order”  


Secura LION Command Center

PESA Secura LION Command Center is the centerpiece for the Secura System and provides configuration, control and management of the Secura endpoints and workflow. The Secura LION Command Center (SCC) defines, configures and manages all audio, video, USB and KVM signals as well as their inherent security classifications within one system, even as it scales.

Secura AV-IP

Secura audio/video over IP (A/V over IP) endpoints, or nodes, provide secure, AES-256 encrypted, carriage of HDMI 2.0 video and audio, simultaneously supporting multiple authorization levels and multiple video formats with up to 4K UHD resolutions. Endpoints equipped with USB ports for HID devices, CAC readers and Keyboard, Video, Mouse (KVM) over IP are also available.

Secura Navigator Control Panel

Secura Navigator

The PESA Secura Navigator Control Panel is a small, table-top remote control panel, featuring a full color, graphic, touchscreen. Available in multiple sizes, the panel is designed to provide a cost-effective, customizable, solution to control panels for IP endpoint routing.

With the prevalence of cyber attacks in the news today hitting a wide variety of companies, it is important to understand where your video, audio, control and data may be vulnerable and how to best secure it.

Learn more in the Whitepaper, “Is Your Live Video and Data Safe?”  

encrypted live video and data for secure distribution
PESA Secura Secure Encrypted IP Video, Audio, USB, KVM Distribution


  • Fully CNSA (Suite B) Compliant
  • NIST standard cryptological security (FIPS 140-2)
  • Mutual Authentication TLS 1.2
  • Multiple Independent Levels of Security (MILS)
  • Multiple Formats and Authorization Levels: One System
  • Precision to the pixel with true 4Kp60 at 4:4:4
  • AES-256 Encryption, including essence
  • Prevents AV cables from leaking sensitive information
  • USB CAC and Token Access (HID but not USB drives)
  • Linearly scalable - few ports to enterprise class > 36,000 ports
  • Multiple Signals via Single Cable Interface
  • Control and USB signals encrypted


FIPS 140-2 Cryptographic Module Validation Program (CMVP) Certification bestowed upon PESA Crypto Module used within Secura® VDS-IP for CNSA compliant encrypted, cybersecure video, audio, USB, and control distribution

PESA’s Secura LION is the only live enterprise, cloud-architected, secure CNSA (Suite B) compliant, video distribution platform for closed and distributed environments with encryption in all flows.”

— Howard Sutton


Announcing Secura LION, a Secure, WAN-Enabled, Multiclass, Source-to-Glass Video Distribution System Over IP (VDS-IP) Platform to Protect and Defend Sensitive, High-Value or Classified Video, Audio and KVM Content

“Secura LION has broken through the IP barrier providing an unprecedented level of encrypted MILS security for video, audio and KVM distribution systems,” said Howard Sutton, PESA chairman and CEO.

Secura Encrypted IP Video, Audio, USB and KVM Distribution System (VDS)

Specs & Ordering Info



Inputup to 4Kp60 4:4:4 (single cable) HD, Full HD, 4K UHD (4:4:4) plus HDR
Outputup to 4Kp60 4:4:4 (single cable) HD, Full HD, 4K UHD (4:4:4) plus HDR
Video Resolution Display FormatsMixed (Dynamic) EDID
Low latency ~1ms
AudioDolby (HDMI 2.0), Mono, Stereo,5.1


RJ451 Gb/s Copper Ethernet (optional 2.5 Gb Ethernet)
RJ45 SFP10 Gbe Copper Ethernet
SFP/SFP+SFP+ 10Gb Fiber Ethernet (TRX)
HDMIHDMI 2.0 / HDCP 2.2 / HDMI 1.4 / HDMI 1.3
POEYes (RJ45)
Display Port Yes


Max Endpoints~1 Million plus+
mDNSYes – Registration and Discovery (SECURED TUNNELS)
ARP No (Not Secure)
LAN/Campus CapableYes
Open Architecture – Cloud Native Design



Multi Factor AuthenticationYes
Mutual Authentication TLS 1.2Yes
Trusted Protection ModuleYes
CNSA Top Secret EncryptionYes
Number of Security Levelsunlimited
MILS LevelsYes
Video EncryptedYes (AES256)
Audio EncryptedYes (AES256)
USB EncryptedYES (PESA Crypto Module- FIPS Validated)
Control EncryptedYES (PESA Crypto Module- FIPS Validated)
DoD APL and NIAP Secure SwitchYES (Arista with SDN and TPM)
NIST Certified FIPS 140-2 Encryption – YES!



PESA Crypto ModuleYes
NIST FIPS 140-2 Validation (CMVP)Yes (Cert 4021)
DoDIN APL SwitchesYes
NIAP SwitchesYes
TAA Compliant Yes
Conforms to National Security Export Restrictions YES


Environmental Specifications:

Operating Temperature0 – 40 °C
Humidity5% to 95%, non-condensing

Secura LION Command Center Software

SEC-IP-SCSW-ROne (1) year of Annual Term License for Secura LION Crypto System Control Software
SEC-IP-SCSW-R-[2-5][2-5] consecutive years of Annual Term License for Secura LION Crypto System Control Software
SEC-IP-SCSW-R-PLPerpetual License for Secura LION Crypto System Control Software. 
SEC-IP-SWMNT-ROne (1) year of Annual Software Maintenance for Secura LION Crypto System Control Perpetual Software License
SEC-IP-SWMNT-R-[2-5][2-5] consecutive years of Annual Software Maintenance for Secura LION Crypto System Control Perpetual Software License


Secura LION Command Center Hardware

SEC-IP-SCH-250Secura Server, System Controller Hardware, 2RU, for up to 250 Endpoints
SEC-IP-SCH-250-RDRedundant Secura Server, Hardware, 2RU, for up to 250 Endpoints


Validated IP Switches and Accessories

PS-CCS-758-25-BNDArista 758 Chassis bundle. Includes 750X 8-slot Chassis, 1 Switch Card, 1 Sup25
PS-CCS-750X-48TP-LCArista 750 Series 48 port 1G PoE (30W) linecard
PS-PWR-3351-AC-REDArista 3300W AC PSU POE Front to Rear
PS-CCS-750-SCVRSpare Blank Cover for 750 Series Supervisor Slot
PS-CCS-750-LCVRSpare Blank Cover for 750 Series Linecard Slot
PS-CAB-C19-6-20Power Cord, NA, C19 – NEMA 6-20, 20A/250V, 2.5M, UL/CSA
PS-SVC-758XP-1M-NBA-Care Software & NBD Hardware Replacement/Same Day Ship for CCS-758 Arista Networks (year 1-4)
Additional Information on Arista 750 Series SwitchesLink to Arista 750 IP Switches 


Secura Services and Extended Maintenance Options

OSC-DOM-DY1Domestic On-site Commissioning Day 1 (per 8 hour day)(North America only)
OSC-DOM-ADDLDYSDomestic On-site Commissioning Additional Days (per 8 hour day)(North America only)
IPEXWExtension of warranty for hardware items (year 2-4)

For Endpoint and Panel parts please see respective pages.

Please contact us at for more information.

Additional Resources

Brochure: Secura Command Center

Brochure: Secura IP

Brochure: Secura Touch Panel

Brochure: C2 Use Case

Brochure: Distributed C2 Use Case

Please contact for Data Sheets

Please contact or for additional user guides or product manuals. 

Shopping Basket