100Gbps, ultra-fast, certified high-assurance network encryption and ultra-low latency; protecting ‘Mega Data’ applications.

The evolution of 100Gbps links and networks reflect the exponential growth in volume and types of data generated by business applications and the Internet of Things. Big data is rapidly becoming ‘Mega Data’ and high-speed networks are becoming ultra-fast.

The CN9000 was launched by Gemalto, the international distributor of Senetas high-assurance encryptors, at RSA 2017 in California. In April, the CN9100 received FIPS 140-2 Level 3 certification (No. 2892)

The CN9100 is the world’s first commercially available certified high-assurance 100Gbps Ethernet network encryptor that supports all Layer 2 network topologies.

Like all Senetas CN Series encryptors, the CN9100 provides maximum high-assurance network data security, without compromising network and application performance. It boasts ultra-low latency of just 1.5 microseconds in customer testing.

Developed in collaboration with customers and service providers, Senetas’s CN9000 Series is designed to meet the exacting requirements of all 100Gbps ‘mega data’ use cases:

  • data-centre to data-centre interconnect
  • SaaS Cloud services
  • high-speed data aggregation
  • fully meshed, ultra-fast bandwidth campus network environments

Senetas CN9000 series encryptors deliver maximum security for real-time applications and feature:

  • Secure, tamper-proof hardware enclosure
  • Automatic, zero-touch encryption key management
  • Standards-based AES encryption algorithms
  • End-to-end, authenticated encryption

The CN9000 series offers a choice of CFP4 or QSFP28 interfaces. It occupies just 1U rack space and boasts excellent “green” credentials, with very low power consumption.


100Gbps Network Interfaces

Extensive network interface testing, including customer PoCs, have been conducted to ensure the optimal CN9100 and CN9120 100Gbps performance.

Each test involved network interfaces to encrypt at full line rates of 100Gbps across MANs (up to 40 km) and WANs (up to 80 km) using optical CFP4 and QSFP28 interfaces respectively. We adopted the Inphi ColorZ interface for longer range (up to 80kms) use due to its performance and features.

Customers with longer range WAN requirements (up to 80 km) should note that additional network items may be required. For more information please contact Senetas or an approved qualified service provider.


For CN9100 sales information in Australia and New Zealand, go to www.senetas.com/partners/channel-partners/

Outside Australia and New Zealand, the CN9100 is known as the SafeNet Ethernet Encryptor CN9100. Further details can be found here: https://safenet.gemalto.com/data-encryption/network-encryption/ethernet-encryption/

Following an extensive evaluation process, the Senetas CN9000 Series has been allocated FIPS 140-2 Level 3 certificate number 2892.


CN9000 Key Features

Model CN9100 CN9120
Network Protocol Ethernet Ethernet
Maximum Speed 100Gbps 100Gbps
Ethernet point-to-point, hub & spoke, mesh full-duplex encryption
Protocol and application transparent
Common Criteria certified In progress In progress
FIPS 140-2 level 3
Low overhead full duplex line-rate encryption
Front panel access for all interfaces
Ultra-low latency for high performance < 2 micro-seconds < 2 micro-seconds
Support for external (X.509v3) CAs
Robust standards-based AES encryption algorithm
CRL and OCSP (certificate) server support
Automatic ‘zero touch’ key management
Flexible encryption policy engine
Encrypts Unicast, Multicast and Broadcast traffic
Network and local interface – SR4, LR4, ER4(lite) links (up to 40kms) CFP4 QSFP28
Network Interface MAN – Inphi ColorZ – links (up to 80kms)^ N/A QSFP28
Support for Jumbo frames
Self-healing key management in the event of network outages
Automatic network discovery and connection establishment
Policy-based on VLAN ID
‘Store and forward’ data transmission mode support
Centralised configuration and management using CM7 and SNMPv3
AES 128 and 256-bit keys
Remote management using SNMPv3 (in-band and out-of-band)
Encryption modes CTR CTR
Secure and tamper-proof enclosure
User swappable AC and/or DC power supplies ✓, Dual ✓, Dual
Anti-probing barriers
Dual swappable AC or DC power supplies
Flexible encryption policy engine
User replaceable fans ✓, Fan tray ✓, Fan tray
Interoperable with other CN Series – 100% (same protocol)
SNMPv1/2 monitoring (read-only)
NTP (time server) support
In-field firmware upgrades

^Longer distance use of the Inphi ColorZ QSFP28 interface may require other network devices. Requirements should be discussed with Senetas or a qualified service provider.

Download Brochure