Contact Us
 
Short Title:
This is the Main Title of the content page under Product section and this field cannot be blank.
Ethernet Encryption for Data in Motion
Sub Title:
Enter the Sub Title of the content page and this is optional.
Protect Sensitive Data in Motion with SafeNet Carrier Ethernet Encryption.
Overview:
Enter an Overview of a product which describes about efficiency and some of the important features and this display under Overview tab.
Layer 2 Security - Ethernet encryption icon

Gemalto is the world’s only provider of a complete portfolio of Ethernet encryption solutions – from network encryption appliances for enterprise, telecommunications, and government organizations to embedded security systems for network equipment manufacturers.


Certified High Assurance Meets Ethernet Security


The SafeNet family of high speed encryption products provides high assurance FIPS, Common Criteria, NATO and UC APL certified security. Designed to support the growing movement towards these Ethernet services, the Ethernet Encryptors secure sensitive data more efficiently than higher layer protocols, thereby lowering the cost of network security and compliance.


Reduce Cost and Complexity of Compliance


As companies look to reduce the cost and complexity of compliance, carriers are providing more network services, regardless of layer. Layer 2 encryption, such as that offered by SafeNet Ethernet encryption products, is the superior solution to protecting data in motion over the WAN, where it can be done with low latency and no additional increase in bandwidth.


Ease of Administration


SafeNet Ethernet Encryptors offer central management that provides ease of administration and audit reporting across multiple circuits and network protocols. We offer a range of Ethernet encryptors up to 100 Gbps.


* Approved models only

Ethernet Encryption Image

Hackers are great at intercepting data in motion.

We're great at stopping hackers.

Contact a Security Specialist

Ethernet Encryptors at a Glance:

SafeNet CN9100 Ethernet Encryptor
Delivering 100,000,000,000 bits per second of high-assurance and ultra-low latency, the CN9000 Series provides mega data security (100 Gbps) and high speed network performance with the lowest latency in the industry ( <2µs).

SafeNet Ethernet Encryptor CN9000: 100 Gbps encryptor provides security without compromise for big, or even mega data transmitted over networks across data centers and the cloud.

SafeNet CN4010 Ethernet Encryptor for SMEs

SafeNet Virtual Encryptor CV1000 Designed for extended WANs and SD-WANs, the SafeNet Virtual Encryptor CV1000 delivers robust encryption security for data-in-motion across high speed Carrier WAN links up to 5 Gbps. Because it is software controlled, the SafeNet Virtual Encryptor CV1000 enables greater flexibility and responsiveness in network architecture, as well as opportunities to expand the network scale quickly.

Visit the SafeNet Virtual Encryptor CV1000 page for more information

SafeNet CN8000 Multi-Link Ethernet Encryptor
SafeNet CN8000 Multi-Link Encryptor: The quantum-powered multilink encryption of Layer 2 network Ethernet and Fibre Channel traffic, providing up to 100 Gbps of total encrypted bandwidth, with no overhead and minimal latency in one compact high-density chassis.

Ethernet Encryption Image - SafeNet CN6010 Layer 2 Encryptor

SafeNet CN6000 Series Encryptors: Addressing the security and performance demands of the largest, most performance-intensive environments, including those of enterprises, government agencies, and cloud service providers, the CN6000 Series encryptors offer variable-speed licenses up to 10 Gbps.

SafeNet CN4010 Ethernet Encryptor for SMEs

SafeNet CN4000 Series Encryptors: Versatile and compact, entry-level 10 Mbps-1 Gbps Ethernet encryptors but without comprising network performance.

  • SafeNet Ethernet Encryptor CN4020: Provides optical Ethernet interface encryption in a versatile, compact platform for a range of Fibre to the x (FTTx) configurations up to 1 Gbps.
    Download the CN4020 Product Brief


  • SafeNet Ethernet Encryptor CN4010: Compact encryptor for distributed computing environments and branch office locations with an electrical Ethernet interface (RJ- 45), featuring variable speed licenses up to 1 Gbps.
    Download the CN4010 Product Brief

Application Security Icon
  • SafeNet Security Management Center (SMC) Management Platform: Robust, web-based enterprise grade network management for high speed encryptors that streamlines management of SafeNet high speed encryptors deployed on the network
    Download the SMC Product Brief


  • CM7 (CypherManager™) Management Platform: Versatile Ethernet from 10 Mbps to 1 Gbps Ethernet, or 1, 2, or 4 Gbps Fibre Channel encryption for data in flight across storage area networks (SAN)
    Download the CM7 Product Brief


SafeNet Virtual Encryptor CV1000

Try the SafeNet Virtual Encryptor Today

Take the next step to protect your data in motion!

Register for a Free Trial Today

Specifications:
Enter Specification of platform that the product support, System requirements and other specifications if required. This display under Specification tab of a product.

SAFENET CN4000 SERIES SPECIFICATIONS

FEATURE

CN4010

CN4020

NETWORK PROTOCOLS SUPPORTEDETHERNETETHERNET

PROTOCOLS AND CONNECTIVITY:

FEATURE

CN4010

CN4020

Physical Encryption Channels11
Maximum Speed1 Gbps1 Gbps
Link/Rate Limiting
Support for Jumbo frames
Protocol and application transparent
Encrypts Unicast. Multicast and Broadcast traffic
Automatic network discovery and connection establishment
Network interfaces (optional SFP to RJ45 adapter available)RJ45SFP, SFP+

SECURITY:

FEATURE

CN4010

CN4020

Tamper resistant and evident enclosure, anti-probing barriers
Flexible encryption policy engine
Per packet confidentiality and integrity with AES-GCM encryption
Automatic key management
Traffic flow analysis protection

ENCRYPTION AND POLICY:

FEATURE

CN4010

CN4020

AES 128 or 256 bit keys128/256128/256
Encryption modesCFB, CTR, GCMCFB, CTR, GCM
Policy based on MAC address or VLAN ID
Self healing key management in the event of network outages

CERTIFICATIONS:

FEATURE

CN4010

CN4020

Common CriteriaIn progress
FIPSIn progress
NATOIn progress

PERFORMANCE:

FEATURE

CN4010

CN4020

Low overhead full duplex line-rate encryption
FPGA based cut-through architecture
Ultra low latency for high performance
Latency (microseconds per encryptor) < 10 @ 1 Gbps < 10 @ 1 Gbps

MANAGEMENT:

FEATURE

CN4010

CN4020

Centralized configuration and management using SMC,  CM7 and SNMPv3
Support for external (X.509v3) CAs
Remote management using SNMPv3 (inband and out-of-band)
NTP (time server) support
CRL and OCSP (certificate)  server support

MAINTAINABILITY/INTEROPERABILITY:

FEATURE

CN4010

CN4020

In-field firmware upgrades
Fan cooled 

SAFENET CV1000 SERIES SPECIFICATIONS

SPECIFICATIONS & FEATURES

FEATURE

CV1000

Virtual Network Function (VNF) - Hosting Guide  
Network data encryptor typeVirtualized Network Encryption Solution (Layer 2-4), hosted on x86 platform
Bandwidth / performanceUp to 5 Gbps (with support for DPDK Intel Library)
Customer environment and performanceCV1000 is customer host and target specific - performance dependent upon customer targets, environment and platform
Virtual appliance - Host: hardware requirements1

Host hardware agnostic - x86

Recommended:

  • 256 Mb RAM
  • 500 Mb Virtual Disk Storage
  • Multi-core
Appliance - Host CPU requirementsCompatible with all types
Hypervisor supportVMware, KVM, Microsoft Hyper-V. Other platforms may be supported.

Functional Specifications:

FEATURE

CV1000

Supported topologiesPoint-to-point, hub and spoke, fully meshed
InteroperabilityFully interoperable with all SafeNet High Speed Encryptor CN Series hardware encryptors
Maximum number of connections500+
Maximum number of connections500+
Encryption algorithms

Symmetric Cryptography:

  • AES-128/256 (CFB or CTR modes)

Asymmetric Cryptography:

  • ECC-512
  • RSA-2048
Policy based encryption
  • MAC address
  • VLAN ID
Crypto-agilitySupport for custom curves, custom algorithms and entropy
AuthenticationCertificate based (X.509)
In-band/out-of-band management

Console Command Line Interface (CLI)

  • SSH
  • TACACS+
  • SNMPv3
Virtualized network interfaces

Three para-Virtualized (virtio/vmxnet3) NICs:

  • Eth0 – Management port
  • Eth1 – Local port
  • Eth2 – Network port
Virtualized hosting environment

Supports:

  • VMware
  • KVM/QEMU
  • Hyper-V
  • Virtual Box
  • Intel DPDK
Cloud management platform

Supports:

  • OpenStack
CV1000 management applicationSafeNet Encryptor Manager CM7 – Included; SafeNet Security Management Center (SMC)
Centralized key server supportCustomer determined optional support for SafeNet KeySecure - centralized cryptographic key management solution (master key security and random number generation) 2
Licensing – CV1000 software

Flexible model choice:

  • Perpetual
  • Subscription
  • Excludes host hardware and hypervisor
  • Simple certificate based licensing model
[ektdesignns_placeholder_ID0ESGAE][ektdesignns_placeholder_ID0EVGAE]

SAFENET CN6000 SERIES SPECIFICATIONS

PROTOCOL AND CONNECTIVITY:

FEATURE

CN6010

CN6040 FIBRE CHANNEL

CN6040 ETHERNET

CN6100

Maximum Speed1 Gbps4 Gbps1 Gbps10 Gbps
Link/Rate Limiting
Support for Jumbo frames 
Protocol and application transparent
Encrypts Unicast. Multicast and Broadcast traffic 
Automatic network discovery and connection establishment
Network interfacesRJ45, SFPSFPRJ45, SFPXFP

SECURITY:

FEATURE

CN6010

CN6040 FIBRE CHANNEL

CN6040 ETHERNET

CN6100

Tamper resistant and evident enclosure, anti-probing barriers
Flexible encryption policy engine
Robust AES encryption algorithm
Per packet confidentiality and integrity with AES-GCM encryption
Automatic key management
Traffic flow analysis protection 

ENCRYPTION AND POLICY:

FEATURE

CN6010

CN6040 FIBRE CHANNEL

CN6040 ETHERNET

CN6100

AES 128 or 256 bit keys128/256256128/256128/256
Encryption modesCFB, CTR, GCMCFBCFB, CTR, GCMCFB, CTR, GCM
Policy based on MAC address or VLAN ID 
Self healing key management in the event of network outages

CERTIFICATIONS:

FEATURE

CN6010

CN6040 FIBRE CHANNEL

CN6040 ETHERNET

CN6100

Common Criteria, FIPS, NATO, UC APL

PERFORMANCE:

FEATURE

CN6010

CN6040 FIBRE CHANNEL

CN6040 ETHERNET

CN6100

Low overhead full duplex line-rate encryption
FPGA based cut-through architecture
Ultra low latency for high performance
Latency (microseconds per encryptor) < 10 @ 1 Gbps < 1 < 10 @ 1 Gbps < 10

MANAGEMENT:

FEATURE

CN6010

CN6040 FIBRE CHANNEL

CN6040 ETHERNET

CN6100

Front panel access for all interfacesRSA, ECRSA, ECRSA, ECRSA, EC
Centralized configuration and management using SMC, CM7 and SNMPv3
Support for external (X.509v3) CAs
Remote management using SNMPv3 (in-band and out-of-band)
NTP (time server) support
CRL and OCSP (certificate) server support

MAINTAINABILITY/ INTEROPERABILITY:

FEATURE

CN6010

CN6040 FIBRE CHANNEL

CN6040 ETHERNET

CN6100

In-field firmware upgrades
Dual swappable AC and/or DC power supplies
User replaceable fans and batteries

SAFENET CN8000 SERIES SPECIFICATIONS

PROTOCOLS AND CONNECTIVITY:

FEATURE

CN8000 FIBRE CHANNEL

CN8000 ETHERNET

Ethernet point-point, hub & spoke, mesh full-duplex encryption 
Fibre Channel point-point encryption 
Physical Encryption Channelsup to 10up to 10
Maximum Speed8 Gbps10 Gbps
Link/Rate Limiting
Support for Jumbo frames 
Protocol and application transparent
Encrypts Unicast. Multicast and Broadcast traffic 
Automatic network discovery and connection establishment
Network interfaces (optional SFP to RJ45 adapter available)SFP, SFP+SFP, SFP+

SECURITY:

FEATURE

CN8000 FIBRE CHANNEL

CN8000 ETHERNET

Tamper resistant and evident enclosure, anti-probing barriers
Flexible encryption policy engine
Per packet confidentiality and integrity with AES-GCM encryption
Automatic key management

ENCRYPTION AND POLICY:

FEATURE

CN8000 FIBRE CHANNEL

CN8000 ETHERNET

AES 128 or 256 bit keys256128/256
Encryption modesCFBCFB, CTR, GCM
Policy based on MAC address or VLAN ID 
Self healing key management in the event of network outages

PERFORMANCE:

FEATURE

CN8000 FIBRE CHANNEL

CN8000 ETHERNET

Low overhead full duplex line-rate encryption
FPGA based cut-through architecture
Latency (microseconds per encryptor) < 1 < 10 @ 1
Gbps

MANAGEMENT:

FEATURE

CN8000 FIBRE CHANNEL

CN8000 ETHERNET

Centralized configuration and management using CM7 and SNMPv3
Support for external (X.509v3) CAs
Remote management using SNMPv3 (in-band
and out-of-band)
NTP (time server) support
CRL and OCSP (certificate) server support

MAINTAINABILITY/INTEROPERABILITY:

FEATURE

CN8000 FIBRE CHANNEL

CN8000 ETHERNET

In-field firmware upgrades
Dual swappable AC power supplies
User replaceable fans and batteries

SAFENET CN9000 SERIES SPECIFICATIONS

PROTOCOLS AND CONNECTIVITY:

Model

Protocol

CN9100

ETHERNET

  
Maximum Speed100 Gbps
Support for Jumbo frames
Protocol and application transparent
Encrypts Unicast, Multicast and Broadcast traffic
Automatic network discovery and connection establishment
Network interfacesCFP4

SECURITY:

FEATURE

CN9100

ETHERNET

Tamper resistant and evident enclosure, anti-probing barriers
Flexible encryption policy engine
Automatic key management

ENCRYPTION AND POLICY:

FEATURE

CN9100

ETHERNET

AES 256 bit keys
Encryption modeCTR
Policy based on MAC address or VLAN ID
Self healing key management in the event of network outages

CERTIFICATIONS: 

FEATURE

CN9100

ETHERNET

Designed for Common Criteria, FIPS, NATO, UC APL*
*In progress

PERFORMANCE:

FEATURE

CN9100

ETHERNET

Low overhead full duplex line-rate encryption
Latency (microseconds per encryptor) < 2 μS

MANAGEMENT:

FEATURE

CN9100

ETHERNET

Front panel access for all interfaces
Centralized configuration and management using SMC/ CM7 and SNMPv3
Support for external (X.509v3) CAs
Remote management using SNMPv3 (in-band
and out-of-band)
NTP (time server) support
CRL and OCSP (certificate) server support

MAINTAINABILITY/INTEROPERABILITY:

FEATURE

CN9100

ETHERNET

In-field firmware upgrades
Dual hot-swappable power supplies
User replaceable fans and batteries
Interoperable with all CN Series Encryptors

Features and Benefits:
Enter features and benefit of using this product. This display under Features & Benefits tab of a product.

SafeNet Ethernet Encryptors' Features:

Data Security Shield Icon

Government and defense grade assurance certified

Certified FIPS, Common Criteria, NATO and UC APL

No-compromise certified performance provides exceptional assurance, network performance and peace of mind

  • Near-zero latency
  • Maximum bandwidth
  • Minimum overhead
  • Scalable and flexible
  • Simple to manage

Secure transmission of data through Layer 2 networks

Defense-grade and ultra-reliable 99.999% up-time data security

FPGA flexibility:

  • Field Programmable Gate Array chip technology
  • Provides cut-through architecture
  • Enabling crypto agility and customization

Hardware flexibility not enabled by ASICs

Our high-speed encryptor technology is used by commercial organizations, service providers and governments in more than 35 countries.

* Specific models


 

Learn More about Layer 2 Security and SafeNet Ethernet Encryptors

 
SafeNet Ethernet Encryptor Brochure

Gemalto SafeNet HSE - Delivering Data-in-Motion - Family Brochure

With Gemalto's comprehensive Layer 2 network encryption solutions, customers can better protect their data, video, voice and even metadata from eavesdropping, surveillance, and overt and

Get this resource
Enternet Encryptor Case Study

SafeNet CN8000 Encryptor Secures International Bank's Global WAN

An international bank select Safenet CN8000 multilink encryptor when they needed to enable secure and instant access to customer data from any of their 30+ locations on three continents. <

Get this resource
Ethernet Encryptors CN9100 - Infographic Thumbnail

SafeNet Ethernet Encryptor CN9100 - Infographic

High-assurance encrpytors: powerful, scalable, efficient and certified.

Get this resource
Layer 2 Encryption White Paper Thumbnail

In Control at Layer 2: A Tectonic Shift in Network Security - White Paper

Network hacking and corporate espionage are on the rise and set to intensify. Information security risks remain commonplace, and most organizations need to increase vigilance. At the sam

Get this resource
Network Metadata Security - White Paper Thumbnail

Network Metadata: Why Your Organization is Exposed and What to Do About It - White Paper

As the old saying goes, “loose lips sink ships”. For today’s enterprises, it is network metadata doing the talking—and a lot of potentially dangerous entities are listening. This paper loo

Get this resource
Data in Motion Encryption Webinar - Presentation Cover

Data in Motion: Surveillance - Protect Your IP from Watching Eyes

Join our webinar, "Surveillance: Protect Your IP from Watching Eyes," to learn more about the challenges of protecting data in motion and how they can be resolved.

Get this resource
Data in Motion Encryption Infographic

Data in Motion Encryption Infographic

With more data being transmitted over networks each day, this opens organizations up to ever-evolving threats and ever-devious cyber-criminals. Addressing these issues requires the right dat

Get this resource

Detail Picture:
Insert a picture of a product from library which would display at right side of Overview.
CN6100 Encryptor
Detail Picture Caption:
In this field give some explanation about the detail picture.
Ethernet Encryptor
Thumbnail Picture:
Insert a thumbnail picture of a product from library which would display in the product list.
CN6100 Encryptor   
Companion Products:

Product Brief:
Blocks If you need to display the "Let us Help you" Block check this option and this could be displayed on the right column of the page.
Display Let us help you block
 
If you need to display the "Let us Help you" Block check this option and this could be displayed on the right column of the solution content page.
Display How to Buy tab      
Banner Image

1. Try searching our website:

SafeNet Identity and Data Protection Solutions

Search

Sentinel Software Monetization Solutions

Search
 
Short Title:
This is the Main Title of the content page under Product section and this field cannot be blank.
Ethernet Encryption for Data in Motion
Sub Title:
Enter the Sub Title of the content page and this is optional.
Protect Sensitive Data in Motion with SafeNet Carrier Ethernet Encryption.
Overview:
Enter an Overview of a product which describes about efficiency and some of the important features and this display under Overview tab.
Layer 2 Security - Ethernet encryption icon

Gemalto is the world’s only provider of a complete portfolio of Ethernet encryption solutions – from network encryption appliances for enterprise, telecommunications, and government organizations to embedded security systems for network equipment manufacturers.


Certified High Assurance Meets Ethernet Security


The SafeNet family of high speed encryption products provides high assurance FIPS, Common Criteria, NATO and UC APL certified security. Designed to support the growing movement towards these Ethernet services, the Ethernet Encryptors secure sensitive data more efficiently than higher layer protocols, thereby lowering the cost of network security and compliance.


Reduce Cost and Complexity of Compliance


As companies look to reduce the cost and complexity of compliance, carriers are providing more network services, regardless of layer. Layer 2 encryption, such as that offered by SafeNet Ethernet encryption products, is the superior solution to protecting data in motion over the WAN, where it can be done with low latency and no additional increase in bandwidth.


Ease of Administration


SafeNet Ethernet Encryptors offer central management that provides ease of administration and audit reporting across multiple circuits and network protocols. We offer a range of Ethernet encryptors up to 100 Gbps.


* Approved models only

Ethernet Encryption Image

Hackers are great at intercepting data in motion.

We're great at stopping hackers.

Contact a Security Specialist

Ethernet Encryptors at a Glance:

SafeNet CN9100 Ethernet Encryptor
Delivering 100,000,000,000 bits per second of high-assurance and ultra-low latency, the CN9000 Series provides mega data security (100 Gbps) and high speed network performance with the lowest latency in the industry ( <2µs).

SafeNet Ethernet Encryptor CN9000: 100 Gbps encryptor provides security without compromise for big, or even mega data transmitted over networks across data centers and the cloud.

SafeNet CN4010 Ethernet Encryptor for SMEs

SafeNet Virtual Encryptor CV1000 Designed for extended WANs and SD-WANs, the SafeNet Virtual Encryptor CV1000 delivers robust encryption security for data-in-motion across high speed Carrier WAN links up to 5 Gbps. Because it is software controlled, the SafeNet Virtual Encryptor CV1000 enables greater flexibility and responsiveness in network architecture, as well as opportunities to expand the network scale quickly.

Visit the SafeNet Virtual Encryptor CV1000 page for more information

SafeNet CN8000 Multi-Link Ethernet Encryptor
SafeNet CN8000 Multi-Link Encryptor: The quantum-powered multilink encryption of Layer 2 network Ethernet and Fibre Channel traffic, providing up to 100 Gbps of total encrypted bandwidth, with no overhead and minimal latency in one compact high-density chassis.

Ethernet Encryption Image - SafeNet CN6010 Layer 2 Encryptor

SafeNet CN6000 Series Encryptors: Addressing the security and performance demands of the largest, most performance-intensive environments, including those of enterprises, government agencies, and cloud service providers, the CN6000 Series encryptors offer variable-speed licenses up to 10 Gbps.

SafeNet CN4010 Ethernet Encryptor for SMEs

SafeNet CN4000 Series Encryptors: Versatile and compact, entry-level 10 Mbps-1 Gbps Ethernet encryptors but without comprising network performance.

  • SafeNet Ethernet Encryptor CN4020: Provides optical Ethernet interface encryption in a versatile, compact platform for a range of Fibre to the x (FTTx) configurations up to 1 Gbps.
    Download the CN4020 Product Brief


  • SafeNet Ethernet Encryptor CN4010: Compact encryptor for distributed computing environments and branch office locations with an electrical Ethernet interface (RJ- 45), featuring variable speed licenses up to 1 Gbps.
    Download the CN4010 Product Brief

Application Security Icon
  • SafeNet Security Management Center (SMC) Management Platform: Robust, web-based enterprise grade network management for high speed encryptors that streamlines management of SafeNet high speed encryptors deployed on the network
    Download the SMC Product Brief


  • CM7 (CypherManager™) Management Platform: Versatile Ethernet from 10 Mbps to 1 Gbps Ethernet, or 1, 2, or 4 Gbps Fibre Channel encryption for data in flight across storage area networks (SAN)
    Download the CM7 Product Brief


SafeNet Virtual Encryptor CV1000

Try the SafeNet Virtual Encryptor Today

Take the next step to protect your data in motion!

Register for a Free Trial Today

Specifications:
Enter Specification of platform that the product support, System requirements and other specifications if required. This display under Specification tab of a product.

SAFENET CN4000 SERIES SPECIFICATIONS

FEATURE

CN4010

CN4020

NETWORK PROTOCOLS SUPPORTEDETHERNETETHERNET

PROTOCOLS AND CONNECTIVITY:

FEATURE

CN4010

CN4020

Physical Encryption Channels11
Maximum Speed1 Gbps1 Gbps
Link/Rate Limiting
Support for Jumbo frames
Protocol and application transparent
Encrypts Unicast. Multicast and Broadcast traffic
Automatic network discovery and connection establishment
Network interfaces (optional SFP to RJ45 adapter available)RJ45SFP, SFP+

SECURITY:

FEATURE

CN4010

CN4020

Tamper resistant and evident enclosure, anti-probing barriers
Flexible encryption policy engine
Per packet confidentiality and integrity with AES-GCM encryption
Automatic key management
Traffic flow analysis protection

ENCRYPTION AND POLICY:

FEATURE

CN4010

CN4020

AES 128 or 256 bit keys128/256128/256
Encryption modesCFB, CTR, GCMCFB, CTR, GCM
Policy based on MAC address or VLAN ID
Self healing key management in the event of network outages

CERTIFICATIONS:

FEATURE

CN4010

CN4020

Common CriteriaIn progress
FIPSIn progress
NATOIn progress

PERFORMANCE:

FEATURE

CN4010

CN4020

Low overhead full duplex line-rate encryption
FPGA based cut-through architecture
Ultra low latency for high performance
Latency (microseconds per encryptor) < 10 @ 1 Gbps < 10 @ 1 Gbps

MANAGEMENT:

FEATURE

CN4010

CN4020

Centralized configuration and management using SMC,  CM7 and SNMPv3
Support for external (X.509v3) CAs
Remote management using SNMPv3 (inband and out-of-band)
NTP (time server) support
CRL and OCSP (certificate)  server support

MAINTAINABILITY/INTEROPERABILITY:

FEATURE

CN4010

CN4020

In-field firmware upgrades
Fan cooled 

SAFENET CV1000 SERIES SPECIFICATIONS

SPECIFICATIONS & FEATURES

FEATURE

CV1000

Virtual Network Function (VNF) - Hosting Guide  
Network data encryptor typeVirtualized Network Encryption Solution (Layer 2-4), hosted on x86 platform
Bandwidth / performanceUp to 5 Gbps (with support for DPDK Intel Library)
Customer environment and performanceCV1000 is customer host and target specific - performance dependent upon customer targets, environment and platform
Virtual appliance - Host: hardware requirements1

Host hardware agnostic - x86

Recommended:

  • 256 Mb RAM
  • 500 Mb Virtual Disk Storage
  • Multi-core
Appliance - Host CPU requirementsCompatible with all types
Hypervisor supportVMware, KVM, Microsoft Hyper-V. Other platforms may be supported.

Functional Specifications:

FEATURE

CV1000

Supported topologiesPoint-to-point, hub and spoke, fully meshed
InteroperabilityFully interoperable with all SafeNet High Speed Encryptor CN Series hardware encryptors
Maximum number of connections500+
Maximum number of connections500+
Encryption algorithms

Symmetric Cryptography:

  • AES-128/256 (CFB or CTR modes)

Asymmetric Cryptography:

  • ECC-512
  • RSA-2048
Policy based encryption
  • MAC address
  • VLAN ID
Crypto-agilitySupport for custom curves, custom algorithms and entropy
AuthenticationCertificate based (X.509)
In-band/out-of-band management

Console Command Line Interface (CLI)

  • SSH
  • TACACS+
  • SNMPv3
Virtualized network interfaces

Three para-Virtualized (virtio/vmxnet3) NICs:

  • Eth0 – Management port
  • Eth1 – Local port
  • Eth2 – Network port
Virtualized hosting environment

Supports:

  • VMware
  • KVM/QEMU
  • Hyper-V
  • Virtual Box
  • Intel DPDK
Cloud management platform

Supports:

  • OpenStack
CV1000 management applicationSafeNet Encryptor Manager CM7 – Included; SafeNet Security Management Center (SMC)
Centralized key server supportCustomer determined optional support for SafeNet KeySecure - centralized cryptographic key management solution (master key security and random number generation) 2
Licensing – CV1000 software

Flexible model choice:

  • Perpetual
  • Subscription
  • Excludes host hardware and hypervisor
  • Simple certificate based licensing model
[ektdesignns_placeholder_ID0ESGAE][ektdesignns_placeholder_ID0EVGAE]

SAFENET CN6000 SERIES SPECIFICATIONS

PROTOCOL AND CONNECTIVITY:

FEATURE

CN6010

CN6040 FIBRE CHANNEL

CN6040 ETHERNET

CN6100

Maximum Speed1 Gbps4 Gbps1 Gbps10 Gbps
Link/Rate Limiting
Support for Jumbo frames 
Protocol and application transparent
Encrypts Unicast. Multicast and Broadcast traffic 
Automatic network discovery and connection establishment
Network interfacesRJ45, SFPSFPRJ45, SFPXFP

SECURITY:

FEATURE

CN6010

CN6040 FIBRE CHANNEL

CN6040 ETHERNET

CN6100

Tamper resistant and evident enclosure, anti-probing barriers
Flexible encryption policy engine
Robust AES encryption algorithm
Per packet confidentiality and integrity with AES-GCM encryption
Automatic key management
Traffic flow analysis protection 

ENCRYPTION AND POLICY:

FEATURE

CN6010

CN6040 FIBRE CHANNEL

CN6040 ETHERNET

CN6100

AES 128 or 256 bit keys128/256256128/256128/256
Encryption modesCFB, CTR, GCMCFBCFB, CTR, GCMCFB, CTR, GCM
Policy based on MAC address or VLAN ID 
Self healing key management in the event of network outages

CERTIFICATIONS:

FEATURE

CN6010

CN6040 FIBRE CHANNEL

CN6040 ETHERNET

CN6100

Common Criteria, FIPS, NATO, UC APL

PERFORMANCE:

FEATURE

CN6010

CN6040 FIBRE CHANNEL

CN6040 ETHERNET

CN6100

Low overhead full duplex line-rate encryption
FPGA based cut-through architecture
Ultra low latency for high performance
Latency (microseconds per encryptor) < 10 @ 1 Gbps < 1 < 10 @ 1 Gbps < 10

MANAGEMENT:

FEATURE

CN6010

CN6040 FIBRE CHANNEL

CN6040 ETHERNET

CN6100

Front panel access for all interfacesRSA, ECRSA, ECRSA, ECRSA, EC
Centralized configuration and management using SMC, CM7 and SNMPv3
Support for external (X.509v3) CAs
Remote management using SNMPv3 (in-band and out-of-band)
NTP (time server) support
CRL and OCSP (certificate) server support

MAINTAINABILITY/ INTEROPERABILITY:

FEATURE

CN6010

CN6040 FIBRE CHANNEL

CN6040 ETHERNET

CN6100

In-field firmware upgrades
Dual swappable AC and/or DC power supplies
User replaceable fans and batteries

SAFENET CN8000 SERIES SPECIFICATIONS

PROTOCOLS AND CONNECTIVITY:

FEATURE

CN8000 FIBRE CHANNEL

CN8000 ETHERNET

Ethernet point-point, hub & spoke, mesh full-duplex encryption 
Fibre Channel point-point encryption 
Physical Encryption Channelsup to 10up to 10
Maximum Speed8 Gbps10 Gbps
Link/Rate Limiting
Support for Jumbo frames 
Protocol and application transparent
Encrypts Unicast. Multicast and Broadcast traffic 
Automatic network discovery and connection establishment
Network interfaces (optional SFP to RJ45 adapter available)SFP, SFP+SFP, SFP+

SECURITY:

FEATURE

CN8000 FIBRE CHANNEL

CN8000 ETHERNET

Tamper resistant and evident enclosure, anti-probing barriers
Flexible encryption policy engine
Per packet confidentiality and integrity with AES-GCM encryption
Automatic key management

ENCRYPTION AND POLICY:

FEATURE

CN8000 FIBRE CHANNEL

CN8000 ETHERNET

AES 128 or 256 bit keys256128/256
Encryption modesCFBCFB, CTR, GCM
Policy based on MAC address or VLAN ID 
Self healing key management in the event of network outages

PERFORMANCE:

FEATURE

CN8000 FIBRE CHANNEL

CN8000 ETHERNET

Low overhead full duplex line-rate encryption
FPGA based cut-through architecture
Latency (microseconds per encryptor) < 1 < 10 @ 1
Gbps

MANAGEMENT:

FEATURE

CN8000 FIBRE CHANNEL

CN8000 ETHERNET

Centralized configuration and management using CM7 and SNMPv3
Support for external (X.509v3) CAs
Remote management using SNMPv3 (in-band
and out-of-band)
NTP (time server) support
CRL and OCSP (certificate) server support

MAINTAINABILITY/INTEROPERABILITY:

FEATURE

CN8000 FIBRE CHANNEL

CN8000 ETHERNET

In-field firmware upgrades
Dual swappable AC power supplies
User replaceable fans and batteries

SAFENET CN9000 SERIES SPECIFICATIONS

PROTOCOLS AND CONNECTIVITY:

Model

Protocol

CN9100

ETHERNET

  
Maximum Speed100 Gbps
Support for Jumbo frames
Protocol and application transparent
Encrypts Unicast, Multicast and Broadcast traffic
Automatic network discovery and connection establishment
Network interfacesCFP4

SECURITY:

FEATURE

CN9100

ETHERNET

Tamper resistant and evident enclosure, anti-probing barriers
Flexible encryption policy engine
Automatic key management

ENCRYPTION AND POLICY:

FEATURE

CN9100

ETHERNET

AES 256 bit keys
Encryption modeCTR
Policy based on MAC address or VLAN ID
Self healing key management in the event of network outages

CERTIFICATIONS: 

FEATURE

CN9100

ETHERNET

Designed for Common Criteria, FIPS, NATO, UC APL*
*In progress

PERFORMANCE:

FEATURE

CN9100

ETHERNET

Low overhead full duplex line-rate encryption
Latency (microseconds per encryptor) < 2 μS

MANAGEMENT:

FEATURE

CN9100

ETHERNET

Front panel access for all interfaces
Centralized configuration and management using SMC/ CM7 and SNMPv3
Support for external (X.509v3) CAs
Remote management using SNMPv3 (in-band
and out-of-band)
NTP (time server) support
CRL and OCSP (certificate) server support

MAINTAINABILITY/INTEROPERABILITY:

FEATURE

CN9100

ETHERNET

In-field firmware upgrades
Dual hot-swappable power supplies
User replaceable fans and batteries
Interoperable with all CN Series Encryptors

Features and Benefits:
Enter features and benefit of using this product. This display under Features & Benefits tab of a product.

SafeNet Ethernet Encryptors' Features:

Data Security Shield Icon

Government and defense grade assurance certified

Certified FIPS, Common Criteria, NATO and UC APL

No-compromise certified performance provides exceptional assurance, network performance and peace of mind

  • Near-zero latency
  • Maximum bandwidth
  • Minimum overhead
  • Scalable and flexible
  • Simple to manage

Secure transmission of data through Layer 2 networks

Defense-grade and ultra-reliable 99.999% up-time data security

FPGA flexibility:

  • Field Programmable Gate Array chip technology
  • Provides cut-through architecture
  • Enabling crypto agility and customization

Hardware flexibility not enabled by ASICs

Our high-speed encryptor technology is used by commercial organizations, service providers and governments in more than 35 countries.

* Specific models


 

Learn More about Layer 2 Security and SafeNet Ethernet Encryptors

 
SafeNet Ethernet Encryptor Brochure

Gemalto SafeNet HSE - Delivering Data-in-Motion - Family Brochure

With Gemalto's comprehensive Layer 2 network encryption solutions, customers can better protect their data, video, voice and even metadata from eavesdropping, surveillance, and overt and

Get this resource
Enternet Encryptor Case Study

SafeNet CN8000 Encryptor Secures International Bank's Global WAN

An international bank select Safenet CN8000 multilink encryptor when they needed to enable secure and instant access to customer data from any of their 30+ locations on three continents. <

Get this resource
Ethernet Encryptors CN9100 - Infographic Thumbnail

SafeNet Ethernet Encryptor CN9100 - Infographic

High-assurance encrpytors: powerful, scalable, efficient and certified.

Get this resource
Layer 2 Encryption White Paper Thumbnail

In Control at Layer 2: A Tectonic Shift in Network Security - White Paper

Network hacking and corporate espionage are on the rise and set to intensify. Information security risks remain commonplace, and most organizations need to increase vigilance. At the sam

Get this resource
Network Metadata Security - White Paper Thumbnail

Network Metadata: Why Your Organization is Exposed and What to Do About It - White Paper

As the old saying goes, “loose lips sink ships”. For today’s enterprises, it is network metadata doing the talking—and a lot of potentially dangerous entities are listening. This paper loo

Get this resource
Data in Motion Encryption Webinar - Presentation Cover

Data in Motion: Surveillance - Protect Your IP from Watching Eyes

Join our webinar, "Surveillance: Protect Your IP from Watching Eyes," to learn more about the challenges of protecting data in motion and how they can be resolved.

Get this resource
Data in Motion Encryption Infographic

Data in Motion Encryption Infographic

With more data being transmitted over networks each day, this opens organizations up to ever-evolving threats and ever-devious cyber-criminals. Addressing these issues requires the right dat

Get this resource

Detail Picture:
Insert a picture of a product from library which would display at right side of Overview.
CN6100 Encryptor
Detail Picture Caption:
In this field give some explanation about the detail picture.
Ethernet Encryptor
Thumbnail Picture:
Insert a thumbnail picture of a product from library which would display in the product list.
CN6100 Encryptor   
Companion Products:

Product Brief:
Blocks If you need to display the "Let us Help you" Block check this option and this could be displayed on the right column of the page.
Display Let us help you block
 
If you need to display the "Let us Help you" Block check this option and this could be displayed on the right column of the solution content page.
Display How to Buy tab      
Banner Image