VPN Gateway and SDN-A™ Modules

Since formation in 2008 Sub U Systems (formerly IAS) has developed dozens of unique and innovative products. 

In 2015 we set out to build a family of hardware module based IP networking and computing “building blocks” that we could use to accelerate the product development of customer requirements-driven products and solutions.  

We have developed over a dozen different variants of networking appliance modules with additional modules in development, which will yield even more options in the coming years. Current variants include:

  • IAS Router OS VPN Gateway Modules
  • IAS Software Definable Network – Appliance™ Modules
  • IAS Aruba Virtual Mobility Controller Modules

Our networking appliance modules are amazingly flexible and have no restriction on the number of Gigabit Ethernet ports, USB ports, Wi-Fi radios, cellular radios, SDR radios, etc. that can be designed into a product or solution. We offer module variants that range in size, performance, and power consumption.

Additionally, as a Cisco Solutions Technology Integrator Program (STI) partner, we use Cisco’s embeddable IoT modules when customer requirements call for it. We have many designs that leverage Cisco’s Embedded Service Router 5915 (ESR5915), the Embedded Service Router 6300 (ESR6300), the Embedded Service switch 2020 (ESS2020) and the Embedded Service switch 3300 (ESS3300). 


IAS Router VPN Gateway Modules are board-level embeddable enterprise-class IP routers/VPN gateways/IP networking security appliances (Patent Pending). 

  • NSA Commercial Solutions for Classified (CSfC) Compliant
  • NIST FIPS 140-2 Level 2 Validated
  • NIAP Common Criteria Certified

IAS Router VPN Gateway modules offer 

  • Built-in Graphical User Interface 
  • Driver support for Wi-Fi radio(s)
  • 3G/4G cellular radio(s) 
  • Multiple serial interfaces
  • Third-party PCIe and USB based peripherals


Software Definable Network Appliance-Modules™ take our embeddable module concept one step further. We have partnered with commercial IP networking companies, including Cisco Systems™, HPE Aruba™, Palo Alto Networks™, Fortinet™, and others, to leverage their respective software virtual machine (VM) based networking functions.

These software-based VM networking functions were intended for use in software-defined network topologies in cloud server farms. However, we leverage this technology in our small, low power, robust SDN-A Modules.

Our SDN-A Modules can also support MULTIPLE software-based networking functions running simultaneously. This capability enables further reduction of device count in tactical deployable communications applications.


Leveraging our SDN-A modules, we teamed up with HPE Aruba to bring the full suite of capabilities that commercial form factor Aruba Mobility Controllers offer to embedded applications. IAS Aruba VMC modules come in several different sizes, performance levels, and power consumptions.

Additionally, Sub U Systems and Aruba have taken the IAS Aruba Modules through the NIAP Common Criteria certification process. The modules are also listed on the NSA Commercial Solutions for Classified (CSfC) Component List under the IPSec VPN Gateway, Traffic Filtering Firewall, and WLAN Access System categories.


Cisco’s next-generation Embedded Service Router (ESR) and Embedded Service Switch (ESS) are known as the ESR6300 and the ESS3300. These new modules bring gigabit and 10 gigabit network interfaces to their embeddable module product line.  

The ESR6300 offers 

  • Two (2) 1Gbps routed interfaces,
  • Four (4) 1Gbps
  • Optional cellular modems 
  • Removable boot media

The ESS300 offers 

  • Two (2) 10Gbps uplink ports 
  • Twenty-four (24) 1Gbps switched ports

We can build designs around both of these Cisco modules that offer 802.3af and Power over Ethernet (PoE) as well as integrating them with either IAS Router VPN Gateway Modules, SDN-A™ modules or Aruba VMC modules.