High Security VPN for Large-Scale Public Sector Infrastructure Projects: AEP Net

High-Security VPN for Large-Scale Public Sector Infrastructure Projects

Certification

Features

Benefits

Key Management

	home » products » net » government applications
AEP Net for Government Applications

AEP Net 100M is a high-security VPN security gateway that offers superior performance. It is designed specifically for sophisticated and strategic infrastructure projects such as Public Service network environments that demand high availability, flexibility and easy management.

AEP Net 100M is a managed encryption solution that protects IP traffic across networks. The encryptors provide both data confidentiality and source authentication for network traffic, resulting in high-confidence VPN communications. By protecting data on 100Mbps backbone networks, Net enables the high level of service required by the next generation of large-scale Public Sector infrastructure projects, such as departmental Intranets and inter-departmental Extranets at national and international levels.

With a radically expanded bandwidth capability and an increased data throughput of 100 Mbps full duplex, AEP Net is capable of supporting data center throughput for the most demanding of networks. Net 100M integrates fully with Net 20M enabling new or existing users to design networks with both 10Mbps and 100Mbps encrypted connections."

The Net 100M encryption solution is designed to keep management costs to a minimum requiring no more than five days management effort annually. Net’s highly-functional management system and the “fit-and-forget” operation of the encryptors distinguishes it from competing products.

Following stringent evaluation, Net 100M has achieved formal approval from the UK Government CESG Assisted Products Scheme at Enhanced Grade, a security rating for the protection of classified information recognized across Europe.

•		“Enhanced Grade” IPSec-based IP Security Gateway for the government market
•		VPN operation - separates private and public networks
•		Both certificate and address-based Community of Interest (COI) management
•		100M, 160+Mbps continuous throughput (1464 byte UDP)
•		20M 18Mbps continuous throughput (1464 byte UDP)
•		18Mbps throughput (1464 byte UDP)
•		PKI Infrastructure using UniCERT and Net Keyper HSM
•		Digitally signed certificate requests
•		Automatic traffic key management using ISAKMP
•		“Enhanced Grade” IP traffic protection
•		Continuous output monitor for cryptographic integrity assurance
•		Continuous random number generation checks
•		Resilient operation options
•		Disaster recovery options
•		Self-test health check on power-up
•		Secure remote management using AEP Policy Manager
•		Acts as a router to the private network and a host on the public network
•		Supports up to 2000 secure connections
•		10/100 base-t public and private Ethernet interfaces
•		Built on the tamper protective AEP Crypto Kernel
•		Compromise control
•		Secure Audit and Accounting
•		INAT, DHCP and SNMP support
•		Rack mount or Desktop options

•		Enables e-business over the Internet and other open networks by protecting sensitive data to an assured standard.
•		Fully automated key management eliminates administration costs of routine re-keying
•		Encryption at the IP level is independent of the WAN so enabling organizations to choose or change the WAN to meet their needs
•		Seamless integration into existing networks since the encryptor uses industry standard protocols
•		Protection of investment as the securely programmable cryptographic kernel means that new algorithms can be loaded if required without changing the hardware
•		Comprehensive GUI-based central management software suite
•		Highly scalable and flexible configuration options to match the network architecture
•		Can be installed on existing Net protected networks to expand bandwidth

For more information, download the AEP Net datasheet (PDF 841KB).

Algorithm Set

AEP Net ED20M implements the hashing, signing and key management algorithm sets laid down by the UK National Technical Authority - SHA-1, DSA, Enhanced Diffie-Hellman, ISAKMP and the UK Government "Enhanced Grade" confidentiality algorithm. Other algorithms can be factory loaded or in some circumstances, loaded at the customer site.

Furthermore, the cryptographic and application libraries can be upgraded throughout the life of the equipment offering the customer both flexibility of deployment and future proofing against changes in standards and the introduction of new algorithms

Contact Us

AEP Net ED20M product variant employs a 2-tier PKI with the UK National Authority as the root and the AEP Net Management Center as the sub-CA. The only keys that need to be ordered from the UKKPA are for these management components. AEP's Net Keyper is used for key storage and signing.

AEP Net products generate all other keys including encryptor public/private key pairs and certificates, traffic keys and packet authentication keys. This means that there is no key material handling outside the encryptor management center, and then only at Sub-CA key update intervals (typically 3 years).

For more information, download the AEP Net datasheet (PDF 841KB).

Related Resources:

Managed Encryption Service

Looking for a high quality managed encryption service?

If you lack the in-house resources or seek a cost-effective encrypted communications solution, AEP partners can remotely - and securely - manage the process for you.

Regency IT Consulting