IP Encryptors

CEP10, CEP100 and CEP1000
10Mbps, 100Mbps and 1Gbps IP Encryption

Product Overview
The CipherEngine Enforcement Points (CEPs) are FIPS 140-2 L2 Certified hardware-accelerated encryption appliances providing flexible IP packet encryption. The CEPs also provide an option for Layer 4 payload only encryption, designed for MPLS networks. The CEPs are available in three models, offering full-duplex wire-speed encryption at 10Mbps, 100Mbps or 1Gbps speeds.

CipherOptics CEPs integrate easily into your existing network without the need for network configuration changes or router upgrades. They operate transparently over any network, encrypting data transmissions without compromising network or application performance.

IP Packet Encryption
In routed IP networks, the CEP family utilizes the CipherEngine Encapsulating Security Payload protocol (CE-ESP) to preserve the original IP packet header and encrypt only the payload, as illustrated below.

IP Packet Encryption

By preserving the original header information and encrypting the payload, the CEPs can encrypt data over load-balanced, redundant and resilient networks. CipherEngine and the CEPs enable encrypted site-to-site connections or meshed group connections over public or private IP networks without compromising your current network design.

Payload Only Encryption
The CEP family provides an additional option designed for backbone MPLS networks. When this option is enabled, the Layer 4 header information remains in the clear and only the payload is encrypted, as shown in the illustration below.

Data Payload Encryption

This unique capability provides maximum data protection and Service Level Agreement (SLA) management within the MPLS network. In fact, one of the largest service providers in the U.S. tested our Layer 4 encryption solution performance in their labs. The results speak for themselves.

Layer 4 Encryption Test Results

CipherEngine Video

Watch a nine-node encryption deployment take place in less than 10 minutes

Centralized Administration
Managing the CEPs is easy with CipherOptics CipherEngine. Within CipherEngine, CEPs can be grouped into network sets where every member of the group uses the same key material. This grouping capability greatly reduces the complexity of large-scale IP encryption deployments.

To learn just how easy it can be to deploy encryption on your IP network, contact us at 1-877-878-6655 or feel free to ask us a question.

Datasheets

SG100 and SG1002 Datasheet