Encrypt the Edge,

Protect the Transit

Secure the Network — Thales Network Encryptor Series

Network encryption appliances

Thales Network Encryptor Series

Thales SafeNet High Speed Encryptor provides customers with a single platform that can encrypt anywhere—from network traffic between data centers and headquarters to backup and disaster recovery sites—across on-prem networks and the cloud.

#HSM #FIPS 140-2 Level 3 #AES-256 #ECDSA #ECDH #SHA512 #NIST #NetworkSecurity #HardwareSecurityModule

SafeNet High Speed Encryptor

To match different requirements and budgets, we offer a portfolio of SafeNet High Speed Network Encryptor products. All models are interoperable, and a single platform enables centralized management from a single customer link to a distributed network. Each encryptor supports up to 512 concurrent encrypted connections. The hardware encryptors are certified to FIPS 140-2 Level 3 and Common Criteria EAL +2 / EAL 4+*.

Key Features

High-performance real-time encryption

• Achieve high throughput and low latency through hardware-accelerated encryption optimized for high-bandwidth traffic.
• Enable real-time encryption for workloads like SSL/TLS, IPsec, database, and storage without any degradation in service quality.

Flexible deployment and network integration

• Easily integrate into same or segmented subnets and diverse network architectures, enabling a single appliance to protect multiple business domains
• Provide high compatibility with existing infrastructure and third-party solutions by supporting standard protocols and a wide range of interfaces

Strong security, availability, and compliance support

• Manage cryptographic keys strictly within secure hardware boundaries while complying with validated standards like FIPS to satisfy regulatory compliance.
• Ensure operational stability and visibility by implementing dual power supplies, high-availability setups, and comprehensive audit logging.

Key Capabilities

Ensure key integrity within hardware boundaries

• Maintain cryptographic keys exclusively inside tamper-responsive hardware compliant with FIPS Level 3, effectively preventing any physical or logical compromise.
• Guarantee integrity across the full key lifecycle through secure key decommissioning processes and comprehensive audit logging.

Firmware customization and DevOps enablement

• Develop custom firmware running inside the HSM by utilizing Functional Modules (FM) and an SDK to enable specialized business logic within the secure boundary.
• Enhance developer productivity by testing and debugging on desktop environments through software emulators, followed by seamless migration to hardware without downtime.

Performance and network flexibility for traffic protection

• Process high-bandwidth real-time traffic (e.g., SSL/TLS, IPsec) with low latency by leveraging hardware-accelerated, high-performance encryption.
• Flexibly address diverse network topologies and high-availability requirements through multiple Ethernet ports with port bonding, deployment on same or separate subnets, and smartcard-based key backup.