Senetas CypherNET CN9000 Series network encryptors: Ultra-fast 100Gbps network encryption hardware with ultra-low latency; protecting ‘mega data’ applications.
The CN9100 is the world’s first commercially available certified high-assurance 100Gbps Ethernet network encryptor that supports all Layer 2 network topologies.
About the CN9000 Series
Like all CypherNET CN network encryptors, the CN9000 Series provides maximum high-assurance network data security, without compromising network and application performance. It boasts ultra-low latency of just 1.5 microseconds in customer testing.
Developed in collaboration with customers and service providers, CN9100 network encryptors are designed to meet the exacting requirements of all 100Gbps use cases:
- Data-centre to data-centre interconnect
- SaaS cloud services
- High-speed data aggregation
- Fully meshed, ultra-fast bandwidth campus network environments
- Fully certified encryption hardware
Integration for KeySecure
Senetas’ CN (and CV) Series network encryptors include integrated support for KeySecure, the industry’s leading centralised key management platform.
KeySecure provides simple and secure encryption key management across the entire lifecycle; including key generation, storage, distribution and deletion.
CypherNET CN9000 Series Key Features
| Model | CN9120 |
|---|---|
| Network Protocol | Ethernet |
| Maximum Speed | 100Gbps |
| Ethernet point-to-point, hub & spoke, mesh full-duplex encryption | ✓ |
| Protocol and application transparent | ✓ |
| Common Criteria EAL2+ EAL4+ | ✓ |
| FIPS 140-2 Level 3 | ✓ |
| Low overhead full duplex line-rate encryption | ✓ |
| Front panel access for all interfaces | ✓ |
| Ultra-low latency for high performance | < 2 micro-seconds |
| Support for external (X.509v3) CAs | ✓ |
| Robust standards-based AES encryption algorithm | ✓ |
| CRL and OCSP (certificate) server support | ✓ |
| Automatic ‘zero touch’ key management | ✓ |
| Flexible encryption policy engine | ✓ |
| Encrypts Unicast, Multicast and Broadcast traffic | ✓ |
| Network and local interface – SR4, LR4, ER4(lite) links (up to 40kms) | QSFP28 |
| Network Interface MAN – Inphi ColorZ – links (up to 80kms)^ | QSFP28 |
| Support for Jumbo frames | ✓ |
| Self-healing key management in the event of network outages | ✓ |
| Automatic network discovery and connection establishment | ✓ |
| Policy-based on VLAN ID | ✓ |
| ‘Store and forward’ data transmission mode support | ✓ |
| Centralised configuration and management using CM7 and SNMPv3 | ✓ |
| AES 128 and 256-bit keys | ✓ |
| Remote management using SNMPv3 (in-band and out-of-band) | ✓ |
| Encryption modes | CTR |
| Secure and tamper-proof enclosure | ✓ |
| User swappable AC and/or DC power supplies | ✓, Dual |
| Anti-probing barriers | ✓ |
| Dual swappable AC or DC power supplies | ✓ |
| Flexible encryption policy engine | ✓ |
| User replaceable fans | ✓, Fan tray |
| Interoperable with other CN Series – 100% (same protocol) | ✓ |
| SNMPv1/2 monitoring (read-only) | ✓ |
| NTP (time server) support | ✓ |
| In-field firmware upgrades | ✓ |
^Longer distance use of the Inphi ColorZ QSFP28 interface may require other network devices. Requirements should be discussed with Senetas or a qualified service provider.
