Contact Us

Ethernet Encryption for Data in Motion

Protect Sensitive Data in Motion with SafeNet Carrier Ethernet Encryption.

Layer 2 Security - Ethernet encryption icon

Gemalto is the world’s only provider of a complete portfolio of Ethernet encryption solutions – from network encryption appliances for enterprise, telecommunications, and government organizations to embedded security systems for network equipment manufacturers.


Certified Assurance Meets Ethernet Security


The SafeNet family of high speed encryption products provides the assurance of FIPS-, Common Criteria- and CAPs* certified security. Designed to support the growing movement towards these Ethernet services, the Ethernet Encryptors secure sensitive data more efficiently than higher layer protocols, thereby lowering the cost of network security and compliance.


Reduce Cost and Complexity of Compliance


As companies look to reduce the cost and complexity of compliance, carriers are providing more Layer 2 network services. Layer 2 encryption, such as that offered by SafeNet Ethernet encryption products, is the superior solution to protecting data in motion over the WAN, where it can be done with low latency and no additional increase in bandwidth.


Ease of Administration


SafeNet Ethernet Encryptors offer central management that provides ease of administration and audit reporting across multiple circuits and network protocols. We offer a range of Ethernet encryptors up to 10 Gbps.


*Approved models only

Ethernet Encryption Image

Hackers are great at intercepting data in motion.

We're great at stopping hackers.

Contact a Security Specialist

Ethernet Encryptors at a Glance:

SafeNet CN8000 Multi-Link Ethernet Encryptor
SafeNet CN8000 Multi-Link Encryptor: The quantum-powered multilink encryption of Layer 2 network Ethernet and Fibre Channel traffic, providing up to 100 Gbps of total encrypted bandwidth, with no overhead and minimal latency in one compact high-density chassis.

Ethernet Encryption Image - SafeNet CN6010 Layer 2 Encryptor

SafeNet CN6000 Series Encryptors: Addressing the security and performance demands of the largest, most performance-intensive environments, including those of enterprises, government agencies, and cloud service providers, the CN6000 Series encryptors offer variable-speed licenses up to 10 Gbps.

SafeNet CN4010 Ethernet Encryptor for SMEs

SafeNet CN4000 Series Encryptors: Versatile and compact, entry-level 10 Mbps-1 Gbps Ethernet encryptors but without comprising network performance.

  • SafeNet Ethernet Encryptor CN4020: Provides optical Ethernet interface encryption in a versatile, compact platform for a range of Fibre to the x (FTTx) configurations up to 1 Gbps.
    Download the CN4020 Product Brief


  • SafeNet Ethernet Encryptor CN4010: Compact encryptor for distributed computing environments and branch office locations with an electrical Ethernet interface (RJ- 45), featuring variable speed licenses up to 1 Gbps.
    Download the CN4010 Product Brief

Application Security Icon
  • SafeNet Security Management Center (SMC) Management Platform: Robust, web-based enterprise grade network management for high speed encryptors that streamlines management of SafeNet high speed encryptors deployed on the network
    Download the SMC Product Brief


  • CM7 (CypherManager™) Management Platform: Versatile Ethernet from 10 Mbps to 1 Gbps Ethernet, or 1, 2, or 4 Gbps Fibre Channel encryption for data in flight across storage area networks (SAN)
    Download the CM7 Product Brief

SAFENET CN4000 SERIES SPECIFICATIONS

FEATURE

CN4010

CN4020

NETWORK PROTOCOLS SUPPORTED ETHERNET ETHERNET

PROTOCOLS AND CONNECTIVITY:

FEATURE

CN4010

CN4020

Physical Encryption Channels 1 1
Maximum Speed 1 Gbps 1 Gbps
Link/Rate Limiting
Support for Jumbo frames
Protocol and application transparent
Encrypts Unicast. Multicast and Broadcast traffic
Automatic network discovery and connection establishment
Network interfaces (optional SFP to RJ45 adapter available) RJ45 SFP, SFP+

SECURITY:

FEATURE

CN4010

CN4020

Tamper resistant and evident enclosure, anti-probing barriers
Flexible encryption policy engine
Per packet confidentiality and integrity with AES-GCM encryption
Automatic key management
Traffic flow analysis protection

ENCRYPTION AND POLICY:

FEATURE

CN4010

CN4020

AES 128 or 256 bit keys 128/256 128/256
Encryption modes CFB, CTR, GCM CFB, CTR, GCM
Policy based on MAC address or VLAN ID
Self healing key management in the event of network outages

CERTIFICATIONS:

FEATURE

CN4010

CN4020

Common Criteria In progress
FIPS In progress
NATO In progress

PERFORMANCE:

FEATURE

CN4010

CN4020

Low overhead full duplex line-rate encryption
FPGA based cut-through architecture
Ultra low latency for high performance
Latency (microseconds per encryptor) < 10 @ 1 Gbps < 10 @ 1 Gbps

MANAGEMENT:

FEATURE

CN4010

CN4020

Centralized configuration and management using SMC,  CM7 and SNMPv3
Support for external (X.509v3) CAs
Remote management using SNMPv3 (inband and out-of-band)
NTP (time server) support
CRL and OCSP (certificate)  server support

MAINTAINABILITY/INTEROPERABILITY:

FEATURE

CN4010

CN4020

In-field firmware upgrades
Fan cooled  

SAFENET CN6000 SERIES SPECIFICATIONS

PROTOCOL AND CONNECTIVITY:

FEATURE

CN6010

CN6040 FIBRE CHANNEL

CN6040 ETHERNET

CN6100

Maximum Speed 1 Gbps 4 Gbps 1 Gbps 10 Gbps
Link/Rate Limiting
Support for Jumbo frames  
Protocol and application transparent
Encrypts Unicast. Multicast and Broadcast traffic  
Automatic network discovery and connection establishment
Network interfaces RJ45, SFP SFP RJ45, SFP XFP

SECURITY:

FEATURE

CN6010

CN6040 FIBRE CHANNEL

CN6040 ETHERNET

CN6100

Tamper resistant and evident enclosure, anti-probing barriers
Flexible encryption policy engine
Robust AES encryption algorithm
Per packet confidentiality and integrity with AES-GCM encryption
Automatic key management
Traffic flow analysis protection  

ENCRYPTION AND POLICY:

FEATURE

CN6010

CN6040 FIBRE CHANNEL

CN6040 ETHERNET

CN6100

AES 128 or 256 bit keys 128/256 256 128/256 128/256
Encryption modes CFB, CTR, GCM CFB CFB, CTR, GCM CFB, CTR, GCM
Policy based on MAC address or VLAN ID  
Self healing key management in the event of network outages

CERTIFICATIONS:

FEATURE

CN6010

CN6040 FIBRE CHANNEL

CN6040 ETHERNET

CN6100

Common Criteria, FIPS, NATO, UC APL

PERFORMANCE:

FEATURE

CN6010

CN6040 FIBRE CHANNEL

CN6040 ETHERNET

CN6100

Low overhead full duplex line-rate encryption
FPGA based cut-through architecture
Ultra low latency for high performance
Latency (microseconds per encryptor) < 10 @ 1 Gbps < 1 < 10 @ 1 Gbps < 10

MANAGEMENT:

FEATURE

CN6010

CN6040 FIBRE CHANNEL

CN6040 ETHERNET

CN6100

Front panel access for all interfaces RSA, EC RSA, EC RSA, EC RSA, EC
Centralized configuration and management using SMC, CM7 and SNMPv3
Support for external (X.509v3) CAs
Remote management using SNMPv3 (in-band and out-of-band)
NTP (time server) support
CRL and OCSP (certificate) server support

MAINTAINABILITY/ INTEROPERABILITY:

FEATURE

CN6010

CN6040 FIBRE CHANNEL

CN6040 ETHERNET

CN6100

In-field firmware upgrades
Dual swappable AC and/or DC power supplies
User replaceable fans and batteries

SAFENET CN8000 SERIES SPECIFICATIONS

PROTOCOLS AND CONNECTIVITY:

FEATURE

CN8000 FIBRE CHANNEL

CN8000 ETHERNET

Ethernet point-point, hub & spoke, mesh full-duplex encryption  
Fibre Channel point-point encryption  
Physical Encryption Channels up to 10 up to 10
Maximum Speed 8 Gbps 10 Gbps
Link/Rate Limiting
Support for Jumbo frames  
Protocol and application transparent
Encrypts Unicast. Multicast and Broadcast traffic  
Automatic network discovery and connection establishment
Network interfaces (optional SFP to RJ45 adapter available) SFP, SFP+ SFP, SFP+

SECURITY:

FEATURE

CN8000 FIBRE CHANNEL

CN8000 ETHERNET

Tamper resistant and evident enclosure, anti-probing barriers
Flexible encryption policy engine
Per packet confidentiality and integrity with AES-GCM encryption
Automatic key management

ENCRYPTION AND POLICY:

FEATURE

CN8000 FIBRE CHANNEL

CN8000 ETHERNET

AES 128 or 256 bit keys 256 128/256
Encryption modes CFB CFB, CTR, GCM
Policy based on MAC address or VLAN ID  
Self healing key management in the event of network outages

PERFORMANCE:

FEATURE

CN8000 FIBRE CHANNEL

CN8000 ETHERNET

Low overhead full duplex line-rate encryption
FPGA based cut-through architecture
Latency (microseconds per encryptor) < 1 < 10 @ 1
Gbps

MANAGEMENT:

FEATURE

CN8000 FIBRE CHANNEL

CN8000 ETHERNET

Centralized configuration and management using CM7 and SNMPv3
Support for external (X.509v3) CAs
Remote management using SNMPv3 (in-band
and out-of-band)
NTP (time server) support
CRL and OCSP (certificate) server support

MAINTAINABILITY/INTEROPERABILITY:

FEATURE

CN8000 FIBRE CHANNEL

CN8000 ETHERNET

In-field firmware upgrades
Dual swappable AC power supplies
User replaceable fans and batteries

SafeNet Ethernet Encryptors' Features:

Data Security Shield Icon
  • Government and defense grade assurance certified
  • Certified FIPS, Common Criteria, and CAPS*
  • No-compromise certified performance provides exceptional assurance, network performance and peace of mind
    • Near-zero latency
    • Maximum bandwidth
    • Minimum overhead
    • Scalable and flexible
    • Simple to manage
  • Secure transmission of data through Layer 2 networks
  • Defense-grade and ultra-reliable 99.999% up-time data security
  • FPGA flexibility:
    • Field Programmable Gate Array chip technology
    • Provides cut-through architecture
    • Enabling customization
  • Hardware flexibility not enabled by ASICs
  • Our high-speed encryptor technology is used by governments, defense forces and commercial organizations in more than 25 countries.

*Specific models


Learn More about Layer 2 Security and SafeNet Ethernet Encryptors

SafeNet Ethernet Encryptor Brochure

Gemalto SafeNet HSE - Delivering Data-in-Motion - Family Brochure

With Gemalto's comprehensive Layer 2 network encryption solutions, customers can better protect their data, video, voice and even metadata from eavesdropping, surveillance, and overt and

Get this resource
Enternet Encryptor Case Study

SafeNet CN8000 Encryptor Secures International Bank's Global WAN

An international bank select Safenet CN8000 multilink encryptor when they needed to enable secure and instant access to customer data from any of their 30+ locations on three continents. <

Get this resource
Layer 2 Encryption White Paper Thumbnail

In Control at Layer 2: A Tectonic Shift in Network Security - White Paper

Network hacking and corporate espionage are on the rise and set to intensify. Information security risks remain commonplace, and most organizations need to increase vigilance. At the sam

Get this resource
Network Metadata Security - White Paper Thumbnail

Network Metadata: Why Your Organization is Exposed and What to Do About It - White Paper

As the old saying goes, “loose lips sink ships”. For today’s enterprises, it is network metadata doing the talking—and a lot of potentially dangerous entities are listening. This paper loo

Get this resource
Data in Motion Encryption Webinar - Presentation Cover

Data in Motion: Surveillance - Protect Your IP from Watching Eyes

Join our webinar, "Surveillance: Protect Your IP from Watching Eyes," to learn more about the challenges of protecting data in motion and how they can be resolved.

Get this resource
Data in Motion Encryption Infographic

Data in Motion Encryption Infographic

With more data being transmitted over networks each day, this opens organizations up to ever-evolving threats and ever-devious cyber-criminals. Addressing these issues requires the right dat

Get this resource
Back to Top

Contact Us

Thank you for your interest in our products. Please fill out and submit the form to receive more information about Gemalto or to be contacted by a Gemalto specialist.

Your Information

* Email Address:  
* First Name:  
* Last Name:  
* Company Name:  
* Phone:  
* Country:  
* State (US Only):  
* Province (Canada/Australia Only):  
Comments:  
 


By submitting this form I agree to receive information from Gemalto and its affiliates as described in our Privacy statement.