THE DATA PROTECTION COMPANY HIGH EFFICIENCY SWITCHABLE CERTIFIED ENCRYPTION UP TO 10 GBPS CN6000 SERIES

Transcription

1 THE DATA ROTECTION COMANY HIGH EFFICIENCY SWITCHABLE CERTIFIED ENCRYTION U TO 10 GBS CN6000 SERIES

2 CN6000 Series Encryptors CN6000 Series Encryptors scalable, efficient and certified - maximum protection of network data without performance compromise. It is often assumed that data networks are inherently safe. They are not. Data networks are vulnerable to security breaches. To be protected from a data network breach, cyber-attack, innocent error, or technical failure, your data must be encrypted. Only when encrypted, can data be safe rendering it useless to unauthorized parties. SafeNet High Speed Encryptors (HSE) are certified by international, independent testing authorities to protect your data while being transmitted. It s why our encryptors are used by governments, defense agencies and enterprises in more than 25 countries! THE CN6000 SERIES The CN6000 series encryptors are the optimal choice when you require: Investment-proof efficient, up to 10 Gbps data encryption Multi-purpose, in-field upgradable and flexible hardware Certified FIS and Common Criteria Compact 1U form factor with advanced performance and powerfeatures. The CN6000 encryptors offer the latest generation and most efficient high-speed and Fibre Channel encryptors. ETHERNET SERVICES Our CN6000 series platforms provide highly secure, full line rate transparent encryption from 10 Mbps up to 10 Gbps for data moving across both dark fibre and metro, or wide area networks in point-to-point, hub & spoke, or any meshed environment. The intrinsic key generation and distribution capability in our CN6000 Encryptors removes reliance on external key servers, providing a robust, fault-tolerant security architecture. The rugged tamperresistant chassis also gives uncompromising protection to key material held in the encryptor. Full interoperability with the SafeNet encryptor range means customers may standardize on one platform to protect transmitted data across large hub and spoke or meshed networks, among locations. FIBRE CHANNEL SERVICES roviding highly secure, full line rate data encryption, our platforms are also the ideal solution for securing Storage Area Networks (SANs) at 1, 2 or 4 Gbps. NETWORK AND MANAGEMENT SafeNet offers two management options. SMC (Security Management Center) is an enterprise manager and CM7 (CypherManager7) is an element manager more suited for smaller deployments. Both offer a simple to use local and remote encryptor management application that provides users with comprehensive and intuitive management functionality. They provide simple, secure remote management either out-of-band using a dedicated management interface or in-band - using the encrypted port. Local management using a command line interface is available via a serial console connector. Fibre-optic and copper interfaces are available, providing functional and cost benefits. Optical interfaces allow operation over single mode fibre, multi-mode fibre or over WDM services by choosing an appropriate wavelength. standards compliant, the CN6000 Series is fully interoperable with industry standard network equipment from leading vendors. CERTIFICATIONS* Government and commercial customers benefit from the CN6000 series international, independent testing authority certifications. FIS Common Criteria *Detailed certification information available upon request.

3 What makes SafeNet encryptors stand out? Security Without Compromise! TRUSTED ASSURANCE BEST ERFORMANCE SET AND FORGET TRILE CERTIFIED OTIMAL ENCRYTION SIMLICITY Because SafeNet encryptors include the only triple-certified products of their types, they are trusted by governments and defense forces around the world. This exhaustive and rigorous testing over many years provides our government and commercial customers with maximum assurance. SafeNet encryptors are certified by: FIS, Common Criteria and CAS (UK).* Whether your encryption needs require SafeNet CN6000 Series enterprise or even defense-grade features; or are more modest, requiring CN4000 Series highperformance Encryptors, the CN platform ensures your choice is the optimal one. Set and forget and transparency are underlying SafeNet design themes. They help ensure simplicity of implementation, operation and management low overheads cost. That simplicity continues with an intuitive user interface providing meaningful descriptive diagnostics such as early warnings and simple fault-finding. They just do their job with minimal resource requirements. RELIABILITY HIGH SEED EASY TO INSTALL SafeNet provides maximum solution integrity the highest data protection and the lowest network impact and overhead. SafeNet encryptors are designed, developed and manufactured to exacting standards. In addition to the high levels of security, they provide reliable % uptime and conform to international requirements for safety and the environment. The designed-in market-leading performance capabilities make SafeNet encryptors stand out. Whether 10 Mbps, 100 Mbps, 1 Gbps or 10 Gbps, they hands-down win competitive performance tests every time! Their encryption speeds; minimal data overhead; near-zero latency; and their consistent performance make SafeNet encryptors ideally suited to the most demanding environments. They are preferred by many of the world s most secure organizations. The Bump in the Wire design of SafeNet encryptors makes them easy to install. Simply place the encryptor at the access point to the Layer 2 network and all data passing through the unit is encrypted using an AES 256 bit encryption algorithm. COMREHENSIVE RANGE ZERO LATENCY ALL TOOLOGIES The CN range of Layer 2 encryptors provides the widest feature-set able to operate at 10 Mbps to 10 Gbps and are able to support, Fibre Channel; SONET/SDH and LINK protocols. This extensive range enables cost-effective network-wide data protection. SafeNet high-speed encryptors operate in full-duplex mode at full line speed without loss of packets. Latency is not affected by packet size (approx. <5 microseconds per unit at 10 Gbps) meaning maximum throughput with zero protocol overhead. Importantly, by using Field rogrammable Gate Array (FGA) technology, this outstanding latency performance is predictable and dependable. SafeNet encryptors operate in multipoint to multi-point (mesh); single-point to multipoint and single-point to single-point network topologies. Whether the network topology is simple or very complex the same encryptor benefits apply. COST EFFECTIVE ZERO IMACT INTEROERABILITY SafeNet encryptors provide excellent total cost of ownership through a mix of: network bandwidth savings; ease of Layer 2 network management; longevity; reliability; interoperability; backward compatibility; minimal installation and management costs; solution flexibility and low power use. Other cost benefits among various SafeNet encryptors include: minimal rack space use; combined rack space/power utilization efficiency; and dual power supplies. The zero impact of SafeNet encryptors is not limited to network bandwidth and speed (latency). It extends to network operations and management. They simply drop in within the user network. They don t require changes to other devices or network reorganization. Zero impact makes SafeNet encryptors a favorite among network engineers - they don t add load to network operations or management. SafeNet encryptors that support the same protocol are fully interoperable. All CN models are backward compatible. CUSTOM ALGORITHMS FLEXIBILITY LOCAL OR CENTRALIZED MANAGEMENT In addition to the AES 256 bit algorithm, SafeNet encryptors may be implemented with customized, customer requested algorithms. Selected SafeNet encryptors also support Quantum Key Distribution (Quantum Cryptography). SafeNet encryptors use of FGA technology enables maximum operational flexibility. They better meet customers specific and unique requirements and provide an optimized high-speed data encryption solution. This flexibility enables on-going operational simplicity, such as infield upgradability, as customers requirements change protecting their investment. Configuration can be performed locally or remotely through the intuitive SafeNet SMC or CM7 management software that acts as the Certificate Authority in a network of encryptors by signing and distributing X.509 certificates. *specific models

4 Your Assurance Enterprise, government and defense-grade assurance certified. The CN6000 series are certified FIS and Common Criteria. CN6000 Series Encryptors at-a-glance MODEL CN6040 CN6100 Fibre Channel 1 Gbps 4 Gbps 1 Gbps 10 Gbps Support for Jumbo frames rotocol and application transparent RJ45, SF SF RJ45, SF XF Tamper resistant and evident enclosure Anti-probing barriers maximum bandwidth Flexible encryption policy engine minimum overhead Robust AES encryption algorithm scalable and flexible er packet confidentiality and integrity with AES GCM encryption * Automatic key management 256 CFB, CTR, GCM CFB CFB, CTR, GCM CFB, CTR, GCM* Common Criteria certified in progress FIS certified in progress Low overhead full duplex line-rate encryption Latency microseconds per encryptor (Typical for Iv4 traffic with octet frames) < 10 <1 < 10 <5 FGA based cut-through architecture Ultra low latency for high performance Front panel access for all interfaces Centralized configuration and management using SMC/CM7 and SNMv3 SNMv1/2 monitoring (read-only) Support for external (X.509v3) CAs Remote management using SNMv3 (in-band and out-of-band) NT (time server) support CRL and OCS (certificate) server support In-field firmware upgrades A brochure does not provide all the information necessary to determine the optimal encryptors for your data protection. Dual swappable AC and/or DC power supplies User replaceable fans and batteries We have data security and network technical specialists who will help. We also work with customers existing data network service providers, systems integrators and information security specialists to specify the optimal high speed encryption solution for your needs. Fully interoperable with related models No-compromise certified performance provides exceptional assurance; maximum network performance and essential peace of mind. Why CN6000 Series Encryptors? No-compromise maximum network performance: near-zero latency zero network impact simple to manage Secure data transmission across Layer 2 networks. Defense-grade and ultrareliable % up-time network data security. FGA flexibility: Field rogrammable Gate Array chip technology and advantages provides cut-through architecture enables customization provides hardware flexibility not enabled by ASICs Our high speed encryptor technology is used by governments, defense forces and commercial organizations in more than 25 countries. *ending firmware release Network rotocol CN6010 point-to-point, hub & spoke, mesh full duplex encryption Fibre Channel point-to-point encryption Maximum speed Encrypts Unicast, Multicast and Broadcast traffic Automatic network discovery and connection establishment Network interfaces AES 128 or 256 bit keys olicy based on MAC address or VLAN ID Encryption modes Self-healing key management in the event of network outages All specifications are accurate as of the time of publishing and are subject to change without notice to meet the ongoing requirements of our customers. *pending release CN Gbps Certified Encryptor CN Gbps Certified Encryptor CN6040 1,2,4 Gbps Fibre Channel Certified Encryptor Gbps Certified Encryptor Talk to Us Wherever you are, simply contact us to discuss your needs. Or, if you prefer, your service provider may contact us on your behalf. The optimal specification of encryptors for your network data protection is dependent upon many factors, including IT and data network environments and business needs.

5 THE DATA ROTECTION COMANY Contact Us: For office locations and contact information, visit Follow Us: SafeNet, Inc. All rights reserved. SafeNet and SafeNet logo are registered trademarks of SafeNet. All other product names are trademarks of their respective owners. FB (EN)