Delivering 100,000,000,000 bits per second of high-assurance data encryption, the Thales CN9120 Network Encryptor provides data security (100 Gbps) and high speed network performance with ultra-low latency (<2 μS). Safeguard data in motion with high speed encryption proven to meet network performance demands for real-time low latency and near-zero overhead, ensuring security without compromise for big, or even data transmitted over networks across data centers and the cloud.
Use Cases
- Big Data Applications
- Data Center Interconnect
- ‘Mega Data’ Campus Network Environments
- Cloud Computing Services ‘Backbones’
- Aggregating High-Speed Network Links
- Large Scale, MAN and WAN Security
Why CN9120 Encryptors?
Trusted Security
- True end-to-end, authenticated encryption
- State-of-the-art automatic zero-touch key management
- Designed for FIPS 140-3 L3, Common Criteria, NATO, DoDIN APL
- Preferred by market leading commercial and government enterprises in over 35 countries
Maximum Network Performance
- Microsecond latency (<2 μS)
- Near-zero overhead
- Self-Healing capabilities for maximum up time
Scalable and Simple
- Point to Point, Hub and Spoke and Full Mesh
- Fully auditable alarm and event logs from 3rd party management tools
- Field serviceable with hot swappable fans
Key Features
| Model | CN9120 |
|---|---|
| Maximum Speed | 100Gbps |
| Support for Jumbo frames | ✓ |
| Protocol and application transparent | ✓ |
| Encrypts Unicast, Multicast and Broadcast traffic | ✓ |
| Automatic network discovery and connection establishment | ✓ |
| Network and local interface – SR4, LR4, ER4(lite) links (up to 40kms) | QSFP28 |
| Tamper resistant and evident enclosure, anti-probing barriers | ✓ |
| Flexible encryption policy engine | ✓ |
| Automatic key management | ✓ |
| AES 256 bit keys | ✓ |
| Encryption mode | CTR |
| Policy based on MAC address or VLAN ID | ✓ |
| Self-healing key management in the event of network outages | ✓ |
| FIPS 140-2 Level 3, DODIN APL | ✓ |
| Low overhead full duplex line-rate encryption | ✓ |
| FPGA based architecture | ✓ |
| Latency (microseconds per encryptor) | <2 μS |
| Front panel access for all interfaces | ✓ |
| Remote management using SNMPv3 (in-band and out-of-band) | ✓ |
| NTP (time server) support | ✓ |
| Centralized configuration and management using SMC/ CM7 and SNMPv3 | ✓ |
| Support for external (X.509v3) CAs | ✓ |
| CRL and OCSP (certificate) server support | ✓ |
| In-field firmware upgrades | ✓ |
| Dual hot-swappable AC power supplies | ✓ |
| User replaceable fans and batteries—dual redundancy | ✓ |
| Interoperable with all CN Series Encryptors | ✓ |
| Transport Independent Mode | ✓ |
