100Gbps, ultra-fast, certified high-assurance network encryption and ultra-low latency; protecting ‘Mega Data’ applications.
The evolution of 100Gbps links and networks reflect the exponential growth in volume and types of data generated by business applications and the Internet of Things. Big data is rapidly becoming ‘Mega Data’ and high-speed networks are becoming ultra-fast.
The CN9000 was launched by Gemalto, the international distributor of Senetas high-assurance encryptors, at RSA 2017 in California. In April, the CN9100 received FIPS 140-2 Level 3 certification (No. 2892)
The CN9100 is the world’s first commercially available certified high-assurance 100Gbps Ethernet network encryptor that supports all Layer 2 network topologies.
Like all Senetas CN Series encryptors, the CN9100 provides maximum high-assurance network data security, without compromising network and application performance. It boasts ultra-low latency of just 1.5 microseconds in customer testing.
Developed in collaboration with customers and service providers, Senetas’s CN9000 Series is designed to meet the exacting requirements of all 100Gbps ‘mega data’ use cases:
- data-centre to data-centre interconnect
- SaaS Cloud services
- high-speed data aggregation
- fully meshed, ultra-fast bandwidth campus network environments
Senetas CN9000 series encryptors deliver maximum security for real-time applications and feature:
- Secure, tamper-proof hardware enclosure
- Automatic, zero-touch encryption key management
- Standards-based AES encryption algorithms
- End-to-end, authenticated encryption
The CN9000 series offers a choice of CFP4 or QSFP28 interfaces. It occupies just 1U rack space and boasts excellent “green” credentials, with very low power consumption.
100Gbps Network Interfaces
Extensive network interface testing, including customer PoCs, have been conducted to ensure the optimal CN9100 and CN9120 100Gbps performance.
Each test involved network interfaces to encrypt at full line rates of 100Gbps across MANs (up to 40 km) and WANs (up to 80 km) using optical CFP4 and QSFP28 interfaces respectively. We adopted the Inphi ColorZ interface for longer range (up to 80kms) use due to its performance and features.
Customers with longer range WAN requirements (up to 80 km) should note that additional network items may be required. For more information please contact Senetas or an approved qualified service provider.
For CN9100 sales information in Australia and New Zealand, go to www.senetas.com/partners/channel-partners/
Outside Australia and New Zealand, the CN9100 is known as the SafeNet Ethernet Encryptor CN9100. Further details can be found here: https://safenet.gemalto.com/data-encryption/network-encryption/ethernet-encryption/
Following an extensive evaluation process, the Senetas CN9000 Series has been allocated FIPS 140-2 Level 3 certificate number 2892.
CN9000 Key Features
|Ethernet point-to-point, hub & spoke, mesh full-duplex encryption||✓||✓|
|Protocol and application transparent||✓||✓|
|Common Criteria certified||In progress||In progress|
|FIPS 140-2 level 3||✓||✓|
|Low overhead full duplex line-rate encryption||✓||✓|
|Front panel access for all interfaces||✓||✓|
|Ultra-low latency for high performance||< 2 micro-seconds||< 2 micro-seconds|
|Support for external (X.509v3) CAs||✓||✓|
|Robust standards-based AES encryption algorithm||✓||✓|
|CRL and OCSP (certificate) server support||✓||✓|
|Automatic ‘zero touch’ key management||✓||✓|
|Flexible encryption policy engine||✓||✓|
|Encrypts Unicast, Multicast and Broadcast traffic||✓||✓|
|Network and local interface – SR4, LR4, ER4(lite) links (up to 40kms)||CFP4||QSFP28|
|Network Interface MAN – Inphi ColorZ – links (up to 80kms)^||N/A||QSFP28|
|Support for Jumbo frames||✓||✓|
|Self-healing key management in the event of network outages||✓||✓|
|Automatic network discovery and connection establishment||✓||✓|
|Policy-based on VLAN ID||✓||✓|
|‘Store and forward’ data transmission mode support||✓||✓|
|Centralised configuration and management using CM7 and SNMPv3||✓||✓|
|AES 128 and 256-bit keys||✓||✓|
|Remote management using SNMPv3 (in-band and out-of-band)||✓||✓|
|Secure and tamper-proof enclosure||✓||✓|
|User swappable AC and/or DC power supplies||✓, Dual||✓, Dual|
|Dual swappable AC or DC power supplies||✓||✓|
|Flexible encryption policy engine||✓||✓|
|User replaceable fans||✓, Fan tray||✓, Fan tray|
|Interoperable with other CN Series – 100% (same protocol)||✓||✓|
|SNMPv1/2 monitoring (read-only)||✓||✓|
|NTP (time server) support||✓||✓|
|In-field firmware upgrades||✓||✓|
^Longer distance use of the Inphi ColorZ QSFP28 interface may require other network devices. Requirements should be discussed with Senetas or a qualified service provider.Download Brochure