USAccess: Neoscale CryptoStor FC, CryptoStor for Tape and CryptoStor SAN VPN

The NeoScale CryptoStor appliance family encrypts information on networked or distributed storage systems, to protect information privacy and enable regulatory compliance.

Deploy seamlessly
Deliver wire-speed encryption security
Operate with the existing storage infrastructure
Require no host software or network reconfiguration

	CryptoStor FC is the industry's first enterprise-class storage security appliance providing true wire-speed encryption, centralized policy management, storage Firewall access control, and Fabric transparent operation for strong storage transport and media privacy (both arrays and tape on one platform). CryptoStor FC Datasheet.pdf more
	CryptoStor for Tape is a readily deployable, high-speed tape media protection appliance that compresses, encrypts and digitally signs data as it goes to the tape media - without disrupting backup processes. CryptoStor eliminates the threat of unauthorized access to sensitive, regulated and trusted data on tape or virtual tape. CryptoStor for Tape Datasheet.pdf more
	CryptoStor SAN VPN enables companies to securely run real-time storage applications (e.g., synchronous mirroring, SAN to SAN inter-connect) between sites in a Metropolitan Area Network (MAN). SAN VPN is the first appliance to provide wire-speed Fibre Channel link encryption and compression in order to secure SAN extension applications without any change to the storage application or devices. SAN VPN also enables customers to extend their SANs across long distances (up to 460km / 286 miles) without performance degradation by providing buffer credits. CryptoStor SAN VPN Datasheet.pdf more

NEOSCALE CRYPTOSTOR PRODUCT LINE DETAILED INFORMATION

CryptoStor FC
High-Performance Storage Security Appliance
NeoScale CryptoStor FC is the industry's first enterprise-class storage security appliance providing true wire-speed encryption, centralized policy management, storage Firewall access control, and Fabric transparent operation for strong storage transport and media privacy (both arrays and tape on one platform).

Availability Means Risk™
The migration from direct-attached storage (DAS) to sophisticated storage-area networks (SAN) and network-attached storage (NAS) brings the promise to meet demand capacity, availability and continuity - it also introduces a host of security challenges. Current storage security practices combined with emerging standards, such as authentication, port zoning and LUN masking, only provide partial data protection to enterprise storage resources. In addition, sweeping changes in financial, healthcare and commerce legislation have created liabilities for companies that fail to ensure data privacy at all storage levels. By applying policy-based access and encryption to storage data during transport, on the storage subsystem, and on the media, companies can provide a strong barrier against unauthorized storage data disclosure, theft and corruption.

Simple • Reliable • Secure™
Until now, the adoption of storage data protection was hindered by complexity, performance issues, poor manageability and high costs. NeoScale CryptoStor™ uniquely overcomes these obstacles with a readily deployable, manageable and scalable gigabit-speed data protection solution that complements current and evolving network storage security efforts. Employing wire-speed, policy-based encryption over standard storage protocols, CryptoStor offers the most flexible and cost-effective means for complete storage data confidentiality.

Key features include:

Rack-mountable, enterprise storage security appliance
Gigabit-speed, standards-based storage encryption
Completely transparent operation
Storage Firewall access controls
Application, transport and platform transparent operation
Strong storage data protection during transport and on media
Single high-speed platform to protect both array and tape media
Extensive, automated key management and exchange
Secure remote management and redundant operation
Flexible data preparation and recovery options
Hardened system with FIPS 140 Level 2 compliance
Fibre Channel fabric interoperability
Support for leading security, storage and network management standards, applications and frameworks

CryptoStor for Tape
Enterprise-Class Tape Protection Appliance
NeoScale CryptoStor for Tape is the first enterprise class data protection and privacy appliance for backup. CryptoStor for Tape is a readily deployable, high-speed tape media protection appliance that compresses, encrypts and digitally signs data as it goes to the tape media - without disrupting backup processes. CryptoStor dynamically intercepts backup/restore communications between hosts and tape libraries—centrally managing and fully off-loading tape media security functions. It seamlessly integrates with widely used backup applications and incorporates CryptoTape technology for strong key management and data recovery with the appliance or with a software-only utility.

CryptoStor for Tape applies strong data encryption down to the tape storage media. Simply. Reliably. Securely. Operating as an inline appliance, CryptoStor readily integrates with leading backup solutions and is platform transparent for seamless operation. Multiple backup privacy policies can be centrally and remotely managed that employ user defined rules to support shared, distributed, unattended, and vaulted tape applications.

If you store and / or transport sensitive, trusted or regulated data on open systems tapes, CryptoStor for Tape can eliminate the risk of data theft within legacy backup applications, onsite / offsite vaulting services, managed service providers, and bulk data transfer. It's the only flexible, scalable and manageable solution for cost effective tape media confidentiality.

Key features include:

1U rack mounted, inline appliance placed in front of tape subsystem
FC Fabric or Direct Attached systems (both FC and SCSI configurations)
Policy based 3DES and AES encryption for unique, pooled or shared media
Dynamic compression prior to encryption (preserves compression rates
Media integrity authentication and secure distributed recovery
Transparent compatibility with Veritas, Legato, HP, CA and TAR.
Secure key and data management with Smartcard support
FIPS-140 level 2 protection / management compliance

CryptoStor SAN VPN
High-Performance Storage VPN Appliance
NeoScale CryptoStor SAN VPN enables companies to securely run real-time storage applications (e.g., synchronous mirroring, SAN to SAN inter-connect) between sites in a Metropolitan Area Network (MAN). SAN VPN is the first appliance to provide wire-speed Fibre Channel link encryption and compression in order to secure SAN extension applications without any change to the storage application or devices. SAN VPN also enables customers to extend their SANs across long distances (up to 460km / 286 miles) without performance degradation by providing buffer credits.

MAN Network Exposures
To achieve greater flexibility for business continuity and disaster recovery, enterprises are networking SANs across MANs to connect geographically dispersed storage across data centers. MAN technologies consist of SONET,WDM, and dark fiber technologies which deliver the necessary throughput with minimal latency delays to support real-time requirements of the storage applications. However, MAN edge devices offer no security for Fibre Channel connections, so a network breach could expose sensitive information.

MAN Network Distance Challenges
Most Fibre Channel switches and devices were designed to operate in a data center environment where latency delays were negligible. When these devices attempt to communicate across a MAN environment, the extra distance adds latency delay (approximately 5 microseconds per kilometer) which means that an acknowledgement is not immediately received. In order to deliver native performance across longer distances, buffer credits are required to fill the MAN with traffic before receiving an acknowledgement. Since most existing Fibre Channel switches and devices typically support few buffer credits, performance is limited without a MAN edge device which can support more buffer credits.

VPN Security Built for Storage
Until now, data-in-flight encryption in a SAN required encapsulation or conversion to IP. This method provided security but at the cost of performance and latency. Operating as a fully pass-through (not proxy), in-line storage appliance, CryptoStor SAN VPN provides strong encryption at multi-gigabit rates. The CryptoStor SAN VPN appliance achieves full fabric throughput with nominal latency. Since CryptoStor operates invisibly, it is flexibly deployed to complement backup, replication, virtualization and storage management applications. It is the most robust, scalable, and manageable solution for cost-effective SAN data confidentiality. CryptoStor SAN VPN also supports buffer credits which enable customers to extend their SANs across long distances (230km at 2Gbps and 460km at 1Gbps) without performance degradation. Longer distances are supported but will cause some performance impact.

Policy-based Storage Protection

Seamless Encryption drops in to existing configurations to provide strong security for SAN extension across metropolitan and wide area networks
Reliable True line rate throughput with low latency, fabric invisible operation, and failover support ensure uninterrupted, scalable data protection in flight over Fibre Channel.
Secure Strong AES256 data-in-flight encryption with Fibre Channel key exchange.The appliance invisibly encrypts data-in-flight with near zero performance impact.

Key Applications

Business Continuity and Disaster Recovery
(Protect classes of data and shield administrative access)
Remote Backup
(Secure backup and recovery data traversing Metropolitan Area Networks)
Managed Storage Resources
(Extend protection beyond zoning, masking, and virtualization, Alleviate shared public network trust issues)
Remote Data Replication (Extend data protection beyond client-server without performance or application impact)

Product Specifications

Security

Industry-proven certified cryptographic processing engine
Strong AES 256 encryption
2-Factor Smartcard authenticated access and key export
Protected key management
M of N key recovery for secure key escrow
Strong tamper-proofing security with key zeroization
Designed for FIPS 140-2 Level 3 Compliance (certification in progress)

Fibre Channel Links

Two 2Gbps auto-negotiating FC ports
Invisible operation, low latency
LZS™ compression
Line rate full duplex encryption performance
FC Interface (2 Ports), 1 ethernet management port, 1console port
Total Fibre Channel transparency with FC MIB support
Over 230 buffer to buffer credits

Management

In-line, redundant deployment
Automated Fibre Channel key exchange
Intuitive web GUI, CLI, and LCD display
Authenticated user SSL/SSH remote access
Secure key and configuration export
Filtered logging, secure audit log, and full alerting
Role-based users: administrator, security officer, recovery officer

Physical

2U, 27 lb, 19", rack mountable (17"x23"x3.4")
Redundant, hot-swappable power supplies/fans
100/240 VAC, 50/60Hz, 200W

Get 24-hour Quote
Product
Name
Phone
Email
Company Name
Company Address
City	State Zip
Requirements
Confidential Privacy Policy