Senetas CN9000 Series 100Gbps Ethernet Encryptor

Senetas CN9000 Series encryptors – ultra-fast 100Gbps network encryption with ultra-low latency; protecting ‘Mega Data’ applications.

The CN9100 is the world’s first commercially available certified high-assurance 100Gbps Ethernet network encryptor that supports all Layer 2 network topologies.

Like all Senetas CN encryptors, the CN9000 Series provides maximum high-assurance network data security, without compromising network and application performance. It boasts ultra-low latency of just 1.5 microseconds in customer testing.

Developed in collaboration with customers and service providers, Senetas CN9100 encryptors (also known as SafeNet CN9100 Ethernet Encryptors) are designed to meet the exacting requirements of all 100Gbps use cases:

  • Data-centre to data-centre interconnect
  • SaaS Cloud services
  • High-speed data aggregation
  • Fully meshed, ultra-fast bandwidth campus network environments

Senetas’ CN (and CV) Series encryptors include integrated support for SafeNet KeySecure (Gemalto’s centralised cryptographic key management solution) that provides maximum security for the storage of master keys, the integrity of security policies and the source of entropy for the generation of cryptographic keys.

CN9000 Key Features

Model CN9100 CN9120
Network Protocol Ethernet Ethernet
Maximum Speed 100Gbps 100Gbps
Ethernet point-to-point, hub & spoke, mesh full-duplex encryption
Protocol and application transparent
Common Criteria certified In progress In progress
FIPS 140-2 level 3
Low overhead full duplex line-rate encryption
Front panel access for all interfaces
Ultra-low latency for high performance < 2 micro-seconds < 2 micro-seconds
Support for external (X.509v3) CAs
Robust standards-based AES encryption algorithm
CRL and OCSP (certificate) server support
Automatic ‘zero touch’ key management
Flexible encryption policy engine
Encrypts Unicast, Multicast and Broadcast traffic
Network and local interface – SR4, LR4, ER4(lite) links (up to 40kms) CFP4 QSFP28
Network Interface MAN – Inphi ColorZ – links (up to 80kms)^ N/A QSFP28
Support for Jumbo frames
Self-healing key management in the event of network outages
Automatic network discovery and connection establishment
Policy-based on VLAN ID
‘Store and forward’ data transmission mode support
Centralised configuration and management using CM7 and SNMPv3
AES 128 and 256-bit keys
Remote management using SNMPv3 (in-band and out-of-band)
Encryption modes CTR CTR
Secure and tamper-proof enclosure
User swappable AC and/or DC power supplies ✓, Dual ✓, Dual
Anti-probing barriers
Dual swappable AC or DC power supplies
Flexible encryption policy engine
User replaceable fans ✓, Fan tray ✓, Fan tray
Interoperable with other CN Series – 100% (same protocol)
SNMPv1/2 monitoring (read-only)
NTP (time server) support
In-field firmware upgrades

^Longer distance use of the Inphi ColorZ QSFP28 interface may require other network devices. Requirements should be discussed with Senetas or a qualified service provider.