Encryption as a Service (EaaS) for
Wide Area Networks

Encryption as a Service: Reduce risk, save money, improve performance

Certes Networks' Encryption as a Service (EaaS) provides a fast and cost-effective option for companies looking to secure their data as it travels across wide area networks. This managed service protects data on the network without impacting the existing network performance or service level agreements and without requiring additional personnel or capital expenditures.

With our Encryption as a Service, companies can eliminate the burden of installation, monitoring, and management functions while still realizing the full benefits of AES 256 bit encryption and per packet/frame authentication. The Encryption as a Service offering is powered by TrustNet, a web-based management platform that simplifies security management while preserving network performance and functionality. In fact, companies who switch from traditional IPSec VPNs can gain a 20%-40% throughput improvement when switching from IPsec tunnels.

With Encryption as a Service, network encryption policies and keys can be easily managed across large and small deployments located anywhere in the world. Customers gain all the benefits of the industry’s leading network security, while eliminating the costs associated with distribution, deployment, and ongoing upgrades and maintenance of corporate owned assets.

TrustNet also allows customers to maintain secure control of their security policy definitions while outsourcing all other facets of the solution, making it ideal for customers who want to maintain policy control while still taking advantage of the managed service cost benefits.

For small and medium-sized businesses with limited budget and small IT staffs, Certes Networks' Encryption as a Service provides enterprise-class security for a nominal monthly fee and minimal impact on IT personnel.

To learn more about our Encryption as a Service or for pricing information, contact us at 1-888-833-1142 or feel free to ask us a question.

Customer Training Videos
A comprehensive set of training videos designed to demonstrate everything you need to know to successfully deploy a Certes Networks encryption solution into your network.

Online Training Videos

Learn More:
Variable Speed Encryptors
FIPS 140-2 Validated Encryptors
Certes TrustNet Manager™

Downloads:
Encryption as a Service Datasheet
TrustNet Difference
Certes TrustNet Manager Whitepaper
Group Encryption Whitepaper
Layer 4 Encryption Test Results

Features and Benefits

Encryption as a Service - Avoid capital expenses and start encrypting quickly. The EaaS includes encryption appliances, management software and support services on a monthly basis. Optional add-on services include:

• Planning – Expert planning for fast and secure deployment
• Basic Staging – Simplify installation with pre-configured encryption appliances and management software
• On-site Staging, Installation and Repair – Hassle-free on-site appliance and management system deployment with continuing on-site repair
• Policy and Configuration – Expert ongoing consulting services to define security policies for initial deployment, add new sites, and change existing sites
• Worldwide Hardware Sparing and Replacement – Premium worldwide fast shipping of replacement hardware for global organizations
• Hosted Service Management with Monitoring – Simple and powerful encryption service management from any location on any platform with 24x7 monitoring for peace of mind
• Full-Service Management – Outsource configuration, management, 24x7 monitoring and reporting while retaining full control of the encryption keys and policies

EaaS and the add-on services described above can be combined to create a custom service. Our security experts will work with you to define a program that meets your security, compliance and budget requirements.

Protect your data while reducing costs and improving performance!
Standards based data protection via encryption and per frame/packet authentication
Flexible payment options
Elimination of performance killing tunnels

Regulatory Compliance
Security requirements are being added every week and many are becoming more stringent. Achieve compliance now to reduce risk and avoid fines.

Transparent Security
Our EaaS solution is transparent to other managed services and is a single solution that can be managed over dual-carrier or multi-carrier networks without violating service agreements.

Reduce Risk Now
Realize immediate risk reduction without having to reallocate budget.

Prepare for the Cloud
Set the stage for secure cloud migration

Customer Training Videos
A comprehensive set of training videos designed to demonstrate everything you need to know to successfully deploy a Certes Networks encryption solution into your network.

Online Training Videos

Learn More:
Variable Speed Encryptors
FIPS 140-2 Validated Encryptors
Certes TrustNet Manager™

Downloads:
Encryption as a Service Datasheet
TrustNet Difference
Certes TrustNet Manager Whitepaper
Group Encryption Whitepaper
Layer 4 Encryption Test Results

Encryption as a Service (EaaS) Use Case

Problem:
A credit card company was under pressure to encrypt traffic flowing from 155 of its member banks to 4 data centers located throughout the world.

The Company uses multiple carriers to route traffic, ensuring uninterrupted traffic flow and network access, (a common practice for many financial institutions). While this architecture ensures high availability, it prevents router-based encryption due to issues with deploying IPsec tunnels to routers of different carriers. Even if this issue could have been resolved, IPsec tunnels introduce an unacceptable impact on performance and latency.

With its unique tunnel-less group encryption approach, TrustNet can easily secure this dual carrier, or any other network. One of the Company’s service providers (Provider A in the diagram below) was a Certes Networks Global Partner and quickly recognized that the issues noted above could be overcome by providing an Encryption as a Service (EaaS) solution.

Solution:
The Provider deployed a Certes Enforcement Point (CEP) behind each router at the member bank and data center sites. With TrustNet, the original headers are left in the clear so that encrypted traffic is transparent to the underlying infrastructure and all network services are preserved.

Group Keying makes the solution easy to manage, and tunnel-less encryption protects data without impacting network or application performance.

Other deployed managed service examples include:

• A 250 site fully meshed MPLS network running encrypted data and VoIP – QoS is maintained
• A national bank encrypting a Metro Ethernet network – Using per VLAN encryption for compliance
• A global manufacturer securing all of their last mile connections over foreign telcos
• An IPTV provider securing data to local sites, while maintaining low latency performance

Customer Training Videos
A comprehensive set of training videos designed to demonstrate everything you need to know to successfully deploy a Certes Networks encryption solution into your network.

Online Training Videos

Learn More:
Variable Speed Encryptors
FIPS 140-2 Validated Encryptors
Certes TrustNet Manager™

Downloads:
TrustNet Difference
Certes TrustNet Manager Whitepaper
Group Encryption Whitepaper
Layer 4 Encryption Test Results