EncrypTightTM WAN Encryption Secure WAN links without tunnels! BLACK BOX Strong WAN encryption without IPsec VPN tunnels. Multilayer encryption. Transparent operation without latency. E n c r y p T i g h t B L A C K B O X W A N E N C R Y P T I O N E n c r y p T i g h t B L A C K B O X W A N E N C R Y P T I O N 724-746-5500 | blackbox.com/go/EncrypTight (R) E n c r y p T i g h t B L A C K B O X W A N E N C R Y P T I O N E n c r y p T i g h t Solid security with versatility and scalability. B L A C K * * * * * * * B O X W A N E N C R Y P T I O N Encrypts at OSI Layer 2, 3, or 4. Works with all kinds of network traffic, including VoIP. Works on the Internet or on private WANs. No need for VPN tunnels. No delays, no jitter, no latency. Transparent to network operation and applications. FF WARRANTY -- 1 Year More and more organizations are using the Internet to send data to branch offices. But because the Internet is a public network, security is an issue, so sensitive data must be encrypted. EncrypTightTM is an encryption solution that overcomes the limitations associated with IPsec VPN tunnels. It brings you air-tight encryption across any WAN -- even the Internet -- without the hassle of setting up a VPN tunnel for each connection. Layer 4 encryption capability leaves packet headers intact, making encrypted data far more compatible with network operations. Plus, EncrypTight doesn't add latency to bog down network operations -- it's totally transparent. The not-so-private MPLS WAN Many organizations don't encrypt their data because it's traveling on a "safe" MPLS network. Although MPLS networks provide more reliable connections than the Internet and aren't as public, they cannot be counted upon to be private -- they're still vulnerable to attack. MPLS is technically a VPN that mimics privacy by logically separating data with labels. Although the data traffic is kept separate from other traffic, it can still be easily intercepted at any node. When vendors say MPLS is secure, what they mean is that the traffic is kept separate from other traffic, that they have processes in place to prevent unauthorized data snooping, and that their employees probably aren't going to snoop either. In fact, your data probably won't be stolen on an MPLS network, but you have no way of being sure and no way to tell if your data has been breached. In fact, the only way to ensure data security over an MPLS network is by encrypting data as it travels across the WAN. ET1000A ET0010A Breaking out of the tunnel Although IPsec VPN tunnels are fairly simple to set up between only two points, when remote sites multiply, the number of tunnels increases exponentially. A tunnel is needed between each pair of sites, leading to administrative hassles every time a remote site is added. EncrypTight eliminates the need to establish point-to-point tunnels between each pair of remote sites, freeing network administrators for other tasks. With EncrypTight, every network on your WAN can establish an instant encrypted connection to every other network equipped with an EncrypTight appliance. Layer 4 encryption In addition to Layer 2 Ethernet frame encryptions and Layer 3 IP packet encryption, EncrypTight offers a Layer 4 payload-only encryption option. Layer 4 encryption offers many advantages, including: * Ability to pass encrypted data through NAT devices. VPN tunnels, which encapsulate the Layer 3 address, often don't work with NAT. * Compatibility with policy-based routing and load balancing that require Layer 3 addresses to be intact. * Layer 4 encryption leaves Layer 3 headers intact, making it possible to troubleshoot a network without turning off encryption. * Because headers are intact, data looks unencrypted, making it possible to use within countries that restrict encrypted data. Central management Manage all your EncrypTight appliances with EncrypTight Management Software. The simple drag-and-drop interface scales seamlessly and enables you to set encryption policies based on IP addresses, port numbers, protocol IDs, or VLAN tags. You can quickly change policies across the entire WAN without interrupting network traffic. EncrypTight Management Software generates, and securely pushes, encryption keys and policies to appliances throughout the WAN. Logging and auditing functions enable you to collect and monitor important criteria such as enforcement point status, as well as policy, password, and device configuration changes. 2| 724-746-5500 | blackbox.com/go/EncrypTight E n c r y p T i g h t B L A C K B O X W A N E N C R Y P T I O N E n c r y p T i g h t Traditional IPsec VPN B L A C K * Tunnel based * Difficult to set up and manage * Requires added personnel to maintain * Slows network performance * Doesn't support dual carrier environments * Slows or disables multicast applications * No Layer 4 network services B O X W A N E N C R Y P T I O N Network Network Network Internet Network Network Network Network Network EncrypTight * No tunnels! * Doesn't slow network performance * Easy to set up, configure, and manage * Can be administered from a single location * Supports dual-carrier networks * VoIP and video compatible * Compatible with multicast applications * Preserves Layer 4 services Network Network Network Internet, MPLS, or Ethernet Network Network Network Network Network Compliance Seamless scalability EncrypTight helps you comply with HIPAA, HITECH, PCI, or other industry or government data-protection standards. EncrypTight offers AES 256-bit encryption. Plus, its logging and auditing functions help you save and organize the records required by many of these standards, reducing the scope of audits with thorough recordkeeping. Because there are no tunnels to set up, it's easy to deploy EncrypTight across large WANs. New sites can be added instantly without having to establish a VPN tunnel to every other site. Additionally, EncrypTight Manager--included with each EncrypTight appliance--enables network administrators to centrally manage security across the entire WAN using a simple drag-and-drop interface. FREE, live help in 30 seconds or less! |3 E n c r y p T i g h t B L A C K Code Available Speeds W A N E N C R Y P T I O N E n c r y p T i g h t EncrypTight Appliance Specifications Item B O X B L A C K Connectors Power B O X W A N Size E N C R Y P T I O N Local: (1) 10-/100-/1000-Mbps RJ-45 Ethernet; 3-50 Mbps EncrypTight Appliance ET0010A 3, 6, 10, 25, 50 Mbps Remote: (1) 10-/100-/1000-Mbps RJ-45 Ethernet; Management: (1) 10-/100-Mbps RJ-45 Ethernet, (1) RJ-45 RS-232; Weight Rackmount: 3 lb. (1.4 kg); Autosensing 100-240-VAC, 50/60 Hz External Power Supply 1.6"H x 8"W x 5.8"D (4 x 20.3 x 14.7 cm) Autosensing 100-240-VAC, 50/60 Hz Internal Power Supply 1.75"H (1U) x 17"W x 10"D (4.4 x 43.2 x 25.4 cm) 6 lb. (2.7 kg) Dual, Hot-Swappable, Autosensing 100-240-VAC, 50/60 Hz Internal Power Supply 3.5"H (2U) x 17"W x 15"D (8.9 x 43.2 x 38.1 cm) 9 lb. (4.1 kg) Dual, Hot-Swappable, Autosensing 100-240-VAC, 50/60 Hz Internal Power Supply 3.5"H (2U) x 17"W x 15"D (8.9 x 43.2 x 38.1 cm) 22 lb. (10 kg) Desktop: 1.3 lb. (0.6 kg) For future use: (1) RJ-45 Local: (1) 10-/100-/1000-Mbps RJ-45 Ethernet; 100-250 Mbps EncrypTight Appliance ET0100A 100, 155, 250 Mbps Remote: (1) 10-/100-/1000-Mbps RJ-45 Ethernet; Management: (1) 10-/100-Mbps RJ-45 Ethernet, (1) RJ-45 RS-232 Local: (1) SFP (1000-Mbps); 500 Mbps- 1 Gbps EncrypTight Appliance ET1000A 500, 650 Mbps 1 Gbps Remote: (1) SFP (1000-Mbps); Management: (1) 10-/100-Mbps RJ-45 Ethernet; (1) RJ-45 RS-232; For future use: (1) RJ-45, (1) SFP Local: (1) SFP+ (10-Gbps); 2.5-10 Gbps EncrypTight Appliance Remote: (1) SFP+ (10-Gbps); ET10000A 2.5, 5, 10 Gbps Management: (1) 10-/100-Mbps RJ-45 Ethernet; (1) RJ-45 RS-232; For future use: (4) RJ-45, (3) SFP, (2) USB Item First, select your appliance... EncrypTightTM Appliances 3 - 50 Mbps 100 - 250 Mbps 500 Mbps -1 Gbps 2.5 -10 Gbps Code ET0010A ET0100A ET1000A ET10000A ...then, select a license for the desired bandwidth... EncrypTight Bandwidth Licenses ET0010A Licenses 3-Mbps ET-BWL-3MBPS 6-Mbps ET-BWL-6MBPS 10-Mbps ET-BWL-10MBPS 25-Mbps ET-BWL-25MBPS 50-Mbps ET-BWL-50MBPS ET0100A Licenses 100-Mbps ET-BWL-100MBPS 155-Mbps ET-BWL-155MBPS 250-Mbps ET-BWL-250MBPS ET1000A Licenses 500-Mbps ET-BWL-500MBPS 650-Mbps ET-BWL-650MBPS 1-Gbps ET-BWL-1GBPS ET10000A Licenses 2.5-Gbps ET-BWL-2.5GBPS 5-Gbps ET-BWL-5GBPS 10-Gbps ET-BWL-10GBPS Item Code For an instant 10-Mbps Encryption Solution, order... EncrypTight Starter Kit ET-STARTER-KIT Includes (2) EncrypTightTM Appliances (ET0010A) and (2) 10-Mbps Bandwidth Licenses (ET-BWL-10MBPS). To add additional users to EncrypTight Manager, order... EncrypTight Management User License ET-MGR-SW-USER For EncrypTight Manager pre-loaded onto an optimized server, order... EncrypTight Manager Server ET-MGR-HW Ordering EncrypTight Management Each EncrypTight appliance includes EncrypTight Manager, which consists of one EncrypTight Manager software license for use on one server; one management user license, which supports one active user at a time and an unlimited number of named user accounts; documentation; and a CD containing key, policy, and device management software in VMware(R) format. To add more simultaneous active users, order EncrypTight Management User Licenses (ET-MGR-SW-USER). EncrypTight Manager is also available pre-loaded onto an optimized Dell PowerEdge R310 server (ET-MGR-HW). EncrypTight Manager Server requires an EncrypTight Management User License (ET-MGR-SW-USER) for the first user as well as for each additional user. et0010a_(27152)_v2 4| 724-746-5500 | blackbox.com/go/EncrypTight