Our client, a foreign affairs ministry, needed encrypted Layer 3 connectivity between its headquarters and many remote sites and embassies. Some of these sites were in reliable, well-resourced locations; others in diverse and constrained environments.

The ministry’s existing network had no native encryption, and it required a capability that would slot into its IP routing, hold up under high-performance demands and work reliably wherever it was deployed.

The solution: establishing secure point-to-multipoint links over an MPLS network carrying a mix of data, voice, video and control traffic in Transport Independent Mode (TIM). This would maintain security and policy flexibility consistent across an international footprint spanning multiple jurisdictions.

Operating in TIM, the encryptors combined policy-based encryption with transport-agnostic protection across a wide range of network topologies, giving the ministry the flexibility to protect traffic according to IP routes and applications.

This integrated directly into the ministry’s existing network architecture, so there was no need to redesign routing to accommodate it. The global communications network achieved end-to-end security while maintaining high-performance, reliable communications at every site.

• Senetas CN6140 installed at the ministry’s headquarters data centres, with CN4010 deployed across remote sites and embassy locations

• Point-to-multipoint encryption established over MPLS, spanning data, voice, video and control traffic
• Layer 3, policy-based encryption applied according to IP routes and applications
• Transport Independent Mode (TIM) enabled transport-agnostic protection across diverse network topologies
• Encryption integrated into existing IP routing without requiring a network redesign
• Consistent security and policy flexibility maintained across a global, multi-jurisdictional footprint, including constrained site environments