CyProtect AG - SafeNet DataSecure i430 Database Encryption

SafeNet DataSecure i430 product brief (PDF)

SafeNet DataSecure i430
Database Encryption

Database and Application Protection with Unparalleled Performance, Availability, and Security

For organizations looking to implement encryption of sensitive data in the enterprise, DataSecure represent a comprehensive solution for deployment throughout the distributed corporation. DataSecure offers a cost-effective data protection solution that features breakthrough performance, high availability, and streamlined implementation.

Optimal Security

Offering the highest level of security available in a commercial encryption solution, the DataSecure 400 Series appliance is compliant with FIPS 140-2 Level 2 and Common Criteria Evaluation Assurance Level 2. DataSecure centralizes all cryptographic processing, key management, logging, auditing, and security policies on a single, hardened appliance, which maximizes overall security.

DataSecure offers a range of robust security features:

• Segregation of administrative duties so key controls are separated among multiple administrators.
• Secure, multi-factor authentication and access control between databases, servers and the DataSecure appliance.
• Granular authorization capabilities that enable constraints to be placed on user operations based on specific key permissions.
• Active alerting capabilities so that, if attempts to breach protected data occur, mechanisms are employed to alert administrators.
• Comprehensive backup and restore functionality and disaster recovery features.
• Support for AES, 3DES, RSA, HMACSHA-1, and other cryptographic algorithms.

Unparalleled Performance and Availability

DataSecure centralizes all cryptographic processing on a highly specialized appliance that delivers performance robust enough for the most demanding processing environments. A single appliance can handle over 100,000 encryptions per second, and DataSecure makes it easy, through load balancing, to add additional appliances and boost scalability as performance needs dictate.

Further, by offloading CPU-intensive cryptographic processing from servers and databases, DataSecure restores server and database performance to optimal levels—resulting in lower data latency and higher resource utilization. Designed specifically for business-critical data processing, DataSecure also features replication, RAID support, health checking, and disaster recovery capabilities.

Streamlined Implementation

Integration is automated and transparent to applications; administration is intuitive; and because all keys and policies are managed on a centralized appliance, ongoing maintenance is streamlined.

With DataSecure, implementation is:

• Transparent to applications —DataSecure can be deployed with complete application transparency, dramatically reducing implementation time and costs.
• Centralized —By centralizing administration of cryptographic policies and configuration, DataSecure streamlines ongoing administration and reduces cost.
• Flexible —DataSecure can be integrated wherever an organization's security and business needs dictate, offers support for leading, standards-based cryptographic algorithms, and supports products from a range of third-party vendors.