Senetas CN4000 Series 1Gpbs Encryptors: Compact, versatile and high-performance encryptors for network data security without compromise.
Network security threats don’t discriminate by organization size — and neither does the CN4000 Series. Designed for businesses that demand high-assurance encryption without the complexity or cost of rack-mounted hardware, the CN4000 delivers the same robust security credentials in a compact, cost-effective form factor.
Certified and field-proven, CN4000 Series encryptors protect data in motion across networks up to 1Gbps — with zero performance compromise.
About the CN4000 Series
CN4000 Series encryptors offer Transport Independent Mode (TIM) — a Senetas-designed, network layer-independent encryption approach that works across Layer 2, Layer 3, and Layer 4, regardless of protocol. Native Layer 3 support gives network operators the flexibility to use TCP/IP routing while maintaining full protection of their most critical data.
Integration with CipherTrust
Senetas CN Series encryptors include integrated support for Thales CipherTrust, the industry’s leading centralised key management platform.
CipherTrust provides simple and secure encryption key management across the entire lifecycle; including key generation, storage, distribution and deletion.
CN4000 Series Key Features
| Model | CN4010 | CN4020 |
|---|---|---|
| Protocol | Ethernet | Ethernet |
| Maximum Speed | 1Gbps | 1Gbps |
| Physical encryption channels | 1 | 1 |
| Protocol and application transparent | ✓ | ✓ |
| Common Criteria EAL4+ certified | ✓ | ✓ |
| FIPS 140-3 Level 3 certified | ✓ | ✓ |
| Low overhead full duplex line-rate encryption | ✓ | ✓ |
| Ultra-low latency for high performance | ✓ | ✓ |
| Support for external (X.509v3) CAs | ✓ | ✓ |
| Network interfaces | RJ45 | SFP* |
| Robust AES encryption algorithm | ✓ | ✓ |
| AES 128 or 256bit keys | 128/256 | 128/256 |
| CRL and OCSP server support | ✓ | ✓ |
| Automatic key management | ✓ | ✓ |
| Flexible encryption policy engine | ✓ | ✓ |
| Encrypts Unicast, Multicast and Broadcast traffic | ✓ | ✓ |
| Policy based on MAC address or VLAN ID | ✓ | ✓ |
| Support for Jumbo frames | ✓ | ✓ |
| Self-healing key management in the event of network outages | ✓ | ✓ |
| Per packet confidentiality and integrity with AES-GCM encryption* | ✓ | ✓ |
| Smart network discovery and automatic connection establishment | ✓ | ✓ |
| Centralized configuration and management using Senetas CM7 | ✓ | ✓ |
| Remote management using SNMPv3 (in-band and out-of-band) | ✓ | ✓ |
| FPGA based cut-through architecture | ✓ | ✓ |
| Tamper resistant and evident enclosure | ✓ | ✓ |
| Fully interoperable with related CN/CS/SEE models | ✓ | ✓ |
*Optional RJ45 adapter available
