Contact Us

SafeNet Virtual Encryptor CV1000

Scalable, simple, flexibility, and cost-efficient

Layer 2 Security - Ethernet encryption icon

The SafeNet Virtual Encryptor CV1000 is the first hardened virtual encryptor, and is designed for extended WANs and SD-WANs. The SafeNet Virtual Encryptor CV1000 delivers robust encryption security for data-in-motion across high speed Carrier WAN links up to 5 Gbps.

Virtualized encryption

The SafeNet Virtual Encryptor CV1000 uses Network Function Virtualization (NFV). NFV enables organizations to programmatically define and execute the services that run on networks. NFV infrastructures are comprised of virtual network functions (VNF), the components that deliver specific services. The SafeNet Virtual Encryptor CV1000 is a Virtual Network Function (VNF) that delivers flexibility, scalability and responsiveness, (especially in high-scale network environments) and reduces capital expenditure requirements.

An Increase in workforce mobility, distributed WAN, and virtualization and borderless infrastructure, are business needs that demand robust, high-performance virtualized encryption security. Virtualized encryption provides organizations with an operational and expense friendly alternative to using a hardware appliance for securing data in motion across networks and meeting security and compliance requirements.

SafeNet Virtual Encryptor CV1000

Try the SafeNet Virtual Encryptor Today

Take the next step to protect your data in motion!

Register for a Free Trial Today


Specifications and Features



Virtual Network Function (VNF) - Hosting Guide  
Network data encryptor type Virtualized Network Encryption Solution (Layer 2-4), hosted on x86 platform
Bandwidth / performance Up to 5 Gbps (with support for DPDK Intel Library)
Customer environment and performance CV1000 is customer host and target specific - performance dependent upon customer targets, environment and platform
Virtual appliance - Host: hardware requirements1

Host hardware agnostic - x86


  • 256 Mb RAM
  • 500 Mb Virtual Disk Storage
  • Multi-core
Appliance - Host CPU requirements Compatible with all types
Hypervisor support VMware, KVM, Microsoft Hyper-V. Other platforms may be supported.

Functional Specifications:



Supported topologies Point-to-point, hub and spoke, fully meshed
Interoperability Fully interoperable with all SafeNet High Speed Encryptor CN Series hardware encryptors
Maximum number of connections 500+
Maximum number of connections 500+
Encryption algorithms

Symmetric Cryptography:

  • AES-128/256 (CFB or CTR modes)

Asymmetric Cryptography:

  • ECC-512
  • RSA-2048
Policy based encryption
  • MAC address
Crypto-agility Support for custom curves, custom algorithms and entropy
Authentication Certificate based (X.509)
In-band/out-of-band management

Console Command Line Interface (CLI)

  • SSH
  • SNMPv3
Virtualized network interfaces

Three para-Virtualized (virtio/vmxnet3) NICs:

  • Eth0 – Management port
  • Eth1 – Local port
  • Eth2 – Network port
Virtualized hosting environment


  • VMware
  • Hyper-V
  • Virtual Box
  • Intel DPDK
Cloud management platform


  • OpenStack
CV1000 management application SafeNet Encryptor Manager CM7 – Included; SafeNet Security Management Center (SMC)
Centralized key server support Customer determined optional support for SafeNet KeySecure - centralized cryptographic key management solution (master key security and random number generation) 2
Licensing – CV1000 software

Flexible model choice:

  • Perpetual
  • Subscription
  • Excludes host hardware and hypervisor
  • Simple certificate based licensing model

SafeNet Virtual Encryptor CV1000 Features

Data Security Shield Icon

Trusted Security

  • Optimizes concurrent multi-layer network traffic encryption across Layer 2,3, and 4
  • Flexible, cost-effective way to encrypt all the way to the network edge

Customer Benefits

  • Agile, scalable solution, highly responsive to changes in IT and business needs
  • Near-zero overhead
  • At least 10 times more affordable than hardware-based appliances

Scalable and Simple

  • Point to Point, Hub and Spoke, and Full Mesh
  • Instant scalability to match the scale and flexibility of their Software Defined Networks Ethernet Services
  • Ease of deployment with centralized, ‘zero-touch’

Back to Top

Contact Us

Thank you for your interest in our products. Please fill out and submit the form to receive more information about Gemalto or to be contacted by a Gemalto specialist.

Your Information

* Email Address:  
* First Name:  
* Last Name:  
* Company Name:  
* Phone:  
* Country:  
* State (US Only):  
* Province (Canada/Australia Only):  

By submitting this form I agree to receive information from Gemalto and its affiliates as described in our Privacy statement.