CN9000 Series 100Gbps Encryptors

Transcription

1 CN9000 Series 100Gbps Encryptors

2 Senetas CN9000 Series, 100 Gigabits streamed in 1 second Ultra-Fast, Ultra-Secure, Ultra-Reliable The CN9000 series from Senetas sets a new benchmark for encryption performance; delivering 100% bandwidth at an ultra-fast 100Gbps. And in real time ultra-low latency! High-assurance CN9000 encryptors are certified by leading independent testing authorities as suitable for the most demanding of cryptographic applications. Every mega data application is enabled by support for all topologies no matter how complex. Senetas encryptors are used by governments, defence forces, leading commercial and industrial organisations, global Cloud and data centre service providers in more than 35 countries worldwide All 100 Gigabits of data every second in real time no delay and 100% secure!

3 100Gigabits streamed in one second - ultra-fast, certified high-assurance security with a low TCO and high ROI.

4 CN9000 in Action The all new Senetas CN9000 Series is designed to deliver maximum network data security and maximum network performance at unprecedented speeds. As Big Data becomes mega data, the ultra-fast 100Gbps bandwidth of the new CN9000 Series makes it the ideal solution for the most sensitive network data encryption environments: Big Data Applications Data Centre Interconnect Mega Data Campus Network Environments Cloud Computing Services Backbones Aggregating High-Speed Network Links Large Scale, MAN and WAN Security The 100Gigabits Journey in 1 second

5 What makes the new Senetas CN9000 so powerful? Key features: Ultra-Fast 100Gbps Ultra-Low Latency (< 2μs) Globally certified: FIPS and Common Criteria Unique support for the mega data meshed networks Protocols & connectivity: Ethernet: P2P, multi-point, hub & spoke, fully meshed Support for jumbo frames Protocol and application transparent Unicast, multicast and broadcast traffic CFP4 and QSFP28 interface options Flexible and Crypto-Agile: 100% interoperable and compatible Support for custom curves and entropy Quantum safe for long-term data protection AES 128bit or 256bit standards Flexible FPGA platform for tailoring to customer needs High-assurance: Secure, tamper-proof dedicated hardware State-of-the-art, automatic zero-touch encryption key management End-to-end, authenticated network encryption Standards based encryption algorithm

6 MODELS NETWORK PROTOCOL PROTOCOLS AND CONNECTIVITY: Ethernet point-to-point, multi-point hub & spoke, fully meshed, full duplex - all topologies CN9100 CN9120 ETHERNET Physical Encryption Channels 1 Maximum Speed Link/Rate Limiting Support for Jumbo Frames Protocol and application transparent Encrypts Unicast, Multicast and Broadcast traffic Automatic network discovery and connection establishment Network Interface Link distance of available optical transceiver SECURITY: Secure and Tamper resistant enclosure Anti-probing barriers Flexible encryption policy engine Robust standards-based AES encryption algorithm Automatic zero-touch key management ENCRYPTION & POLICIES: 100 Gbps n/a CFP4 (CN9100), QSFP28 (CN9120) up to 10km (CN9100), up to 80km (CN9120) AES 128 or 256 bit keys 128/256 Policy based on VLAN ID Encryption modes Self healing key management in the event of network outages CTR CERTIFICATIONS: Common Criteria FIPS level 3 PERFORMANCE: Low overhead full duplex line-rate encryption Store and forward data transmission mode support Ultra-low latency for high performance 1 MANAGEMENT: Centralised configuration and management using Senetas CM7 and SNMPv3 SNMPv1/2 monitoring (read-only) Certificate signing Support for external (X.509v3) CAs Remote management using SNMPv3 (inband and out-of-band) NTP (time server) support CRL and OCSP(certificate) server support MAINTAINABILITY / INTEROPERABILITY: In-field firmware upgrades User swappable AC and/or DC power supplies User replaceable fans and batteries Interoperable with other CN Series - 100% (same protocol) pending <2 μs RSA, EC,Dual, Fan tray

7 MODELS NETWORK PROTOCOL HARDWARE: Form factor Physical dimensions (W, D, H) Weight Power source/s Power input rating Power consumption (Typical at highest data rate) All interfaces accessable on single panel ENVIRONMENT, REGULATORY AND SAFETY: RoHS compliant CN9100 CN9120 ETHERNET 1U, rack mount 435, 480, 43 mm 8kg AC or DC VAC, 50/60 Hz, 2 A or VDC, 4.5 A 80 W Maximum operating temperature 40 C 0-80% RH at 40 C Safety standards UL listed FCC Part 15 / CISPR 32 / EN Emissions EMC (Emission and immunity) EN (CE) IEC AS/NZS Yes Class B FCC 47 CFP Part 15 (USA) ICES-003 (Canada) EN55022 (CE) AS/NZS CISPR 22 (RCM) EN (CE) EN (CE) EN (CE) CERTIFIED HIGH-ASSURANCE LAYER 2 NETWORK ENCRYPTORS > FIPS and Common Criteria certifications > Secure, tamper-proof dedicated hardware > State-of-the-art, automatic zero-touch encryption key management > End-to-end, authenticated network encryption > Standards based encryption algorithm 100Gbps Network Interfaces Extensive network interface testing, including customer PoCs, have been conducted to ensure the optimal CN9100 and CN Gbps performance. Each test involved network interfaces to encrypt at full line rates of 100Gbps across WANs (up to 40 km) and MANs (up to 80 km) using optical CFP4 and QSFP28 interfaces respectively. In all instances the test adopted the Inphi ColorZ interface for longer range use (up to 80 km), performance capabilities and features. Customers with longer range MAN requirements (up to 80 km) should note that additional network items may be required. For more information please contact Senetas or an approved qualified service provider. Specifications are as at January 1st, 2017 and are subject to change without notice. 1 Specifications may vary based on customer operating environment and installation micro-seconds average in customer use-cases.

8 SENETAS CORPORATION LIMITED E info@senetas.com Senetas manufactures high-assurance Layer 2 Metro Area and Carrier Ethernet network encryptors. They support all Layer 2 protocols and topologies. Our multi-certified encryptors are used by some of the world s most secure organisations, including governments and defence forces; commercial and industrial enterprises; Cloud, data centre and telecommunications service providers in more than 30 countries. CN9000-BR1217