Layer 2 Encryption
Using Thales network encryption platforms, you can deploy proven solutions to maximise confidence that your sensitive, high-value data will not be compromised during transport. Thales network encryption platforms offer increased levels of protection over unencrypted data transport and basic encryption capabilities embedded in routers and switches.
- Challenges
- Solutions
- Benefits
Eavesdropping on Unencrypted Network data
Attackers can “eavesdrop” on unencrypted data travelling over a network, not only impacting privacy but potentially opening the potential to modify or substitute data as a way to stage more sophisticated attacks.
Compliance with Data Protection Mandates
Because industry mandates often require protection for data in motion, organisations that do not implement this protection risk fines, embarrassing data breach disclosure statements and resulting damage to their reputation.
Insufficient Security in Routers and Switches
Depending on the application, encryption capabilities embedded in routers and switches may not offer the combination of security and performance you need.
Thales CN Series Network Encryptors
Thales High Speed Encryption solutions provide customers with a single platform to 'encrypt everywhere’ – from network traffic between data centres and the headquarters to backup and disaster recovery sites, whether on premises or in the cloud.
High Bandwidth Efficiency & Robust Scalability
- Comprehensive data in motion security for Layer 2, IPv4 and IPv6 Networks.
- 95% bandwidth efficiency, which optimises encrypted throughput from 10Mbps to 10Gbps.
- Integrated group key management system, which scales to support hundreds of encryptors with no-cost redundancy.
- Physical and logical separation of network administration and security responsibilities enforces policy and reduces opportunity for insider attacks.
Leading Security Capabilities
- Traffic flow security to prevent traffic analysis and side channel attacks.
- Field-upgradeability to protect against new threats and to ensure long service life.
- Capabilities not found natively in network switches and routers, such as tamper-resistant physical hardening, strong authentication for administators, hardware-based key generation and embedded and remote key management.
- Support for the strongest commercially-available algorithms, government ciphers or customised algorithms.
Flexible Support for Your Encryption Requirements
For organisations wishing to deploy country-specific or sovereign encryption algorithms and key management standards it is possible to minimise costs through the use off-the-shelf encryption devices that can be customised and reprogrammed to meet specific requirements.