IPSec

The Datacryptor IP range of products responds to the growing need for IP security by providing not only end-to-end confidentiality and integrity of data, but also value-added services such as selective IP filtering and accounting.

The Datacryptor 2000 IP provides the one of the strongest encryption technology available commercially, using Triple DES (168-bit key) as standard. In addition, the unit accepts customized/national algorithms, and is the first IP encryptor that can be soft-upgraded in place for Advanced Encryption Standard (AES). Secure authentication of each of the Datacryptor 2000 IP systems is achieved through use of standards based, public key and X.509 key exchanges as approved by FIPS, CAPS. The first release has two 10 Mbps Ethernet LAN interfaces and is intended for installation between the sub-network to be protected and the external router that provides wide area access to the inter-network. The Datacryptor 2000 IP can also be installed on the LAN between an individual host or workstation and the rest of the sub-network. The Datacryptor 2000 IP platform supports a variety of communications protocols, so a customer currently using Link, Relay, Frame or X.25 can run any of these protocols in the unit and later upgrade to IP when its network migrates. These unique capabilities ensure that customers’ investment in Datacryptor 2000 technology is protected against the certainty of network upgrades and changes in algorithm policy.

The Datacryptor Advanced Performance (AP) High-Speed IP Network Encryptor is the latest member of a proven family of network encryption products. Available in 10 Mbps and 10/100 Mbps versions, it provides the strongest encryption technology available commercially, using Triple DES (168-bit key) or Rijndael - AES (128, 192, and 256-bit) algorithms as standard offerings. In addition the Datacryptor AP employs X.509 certificates for authentication, and Diffie-Hellman automatic key exchange, thereby ensuring minimal human intervention once commissioned. Continuing Thales’s strong history of independent certifications the unit is designed in compliance with FIPS 140-2, Level 3, and the international Common Criteria Evaluation Assurance Level (EAL) 4. Datacryptor AP facilitates high performance Quality of Service (QoS) applications like voice over IP and offers data transfer rates of over 90 Mbps.

The Datacryptor Gigabit IP answers the requirement of the growing need for ultra high-speed Internet Protocol (IP) security. The new product enables packetized encryption of high bandwidth connections using IPSec tunnels to provide certified confidentiality and integrity of sensitive and high-value data. Using concurrent 3DES (168-bit key) and Rijndael - AES (256-bit) algorithms as standard offerings, the Datacryptor Gigabit IP is easy to use and requires no human intervention once commissioned. The unit employs X.509 v3 certificates and the Secure Hash Algorithm (SHA-1), as well as Diffie-Hellman and Internet Key Exchange (IKE) protocols to perform authentication and automatic exchange of key material. Supporting up to 8,000 tunnels with a maximum encrypted throughput of 1.8Gbps, Thales’ Datacryptor Gigabit IP is one of the fasted IPSec encryption device in the market. Typical application scenarios of the new product include protection of sensitive information over corporate LANs, site-to-site public VPN, site-to-site MAN, storage over IP, disaster recovery and data back-up, remote medical imaging, and site-to-site wireless intercampus connectivity.
Please note: The new Thales Datacryptor Gigabit IP encryptor is initially available in the Americas only.