High Performance Security Solution Providing Seamless Integration

The SafeNet SONET Encryptor is a high performancededicated security solution to protect 10 Gbps and below SONET/SDH networks.  It integrates easily and transparently into SONET/SDH networks and performs at wire-speed throughput, encrypting user data with the AES-256 algorithm.

Extremely low latency makes it ideal for even the most demanding real-time, latency-sensitive network applications.


Supports Path and Line SONET/SDH Encryption

The SONET Encryptor supports both path and line SONET/SDH encryption at various rates and at distances up to 40 kilometers/24.9 miles (OC48/STM16 Encryptor) or 80 kilometers/47.9 miles (OC192/STM64 Encryptor).

For added security, each encrypted circuit uses an independent encryption key pair. In addition, section, line, and path overhead bytes can be selectively encrypted, zeroized, regenerated, or bypassed.


Centralized Management or Multiple Remote Capabilities

SONET Encryptor can be managed by SafeNet's Security Management Center (SMC) via an ethernet port or in-band on the SONET/SDH network. The SONET Encryptor can also be centrally controlled or managed across multiple remote stations with CypherManager7 using SNMPv3.

CN3000 SONET Encryptor

Providing maximum security within modern telecommunications networks. The system is configured for operation at a speed of 9.9522 Gbps (OC-192), and supports both Line and Path mode topologies. SONET frame size is fixed, but varies based on line speed.

  • Full duplex line-rate encryption at 9.952 Gbps
  • Latency of 20 microseconds max
  • Supports Line and Path connections
  • Independent multiplexed path encryption
  • Network connections via pluggable XFP interfaces
  • Dual redundant hot swappable AC or DC power supplies
  • Supported Networks: SONET OC-192 SDH STM-64 Line mode Path mode
  • Size: 482 mm/19" (19"), 133 mm/5.2" (3U), m380 mm/15" (WxHxD)
  • Weight: 9 kg/19.8 lbs
  • 0 to 50°C/32 to 122°F operating temperature
  • 0 to 80% RH at 40°C/104°F operating
  • Power requirements: 90–240 VAC / 47–63 Hertz 105 Watts and/or 48 VDC 

CN1000 SONET Encryptor

The CN1000 SONET Encryptor system can be configured at speeds of 155 Mbps (OC-3) to 2488.32 Mbps (OC-48), and supports both Line and Path mode topologies.

  • Full duplex line-rate encryption at up to 2488.32 Mbps
  • Latency of 20 microseconds max.
  • Latency for an OC-48 link is 10 microseconds per unit
  • Supports Line and Path connections
  • Independent multiplexed Path encryption
  • Provides standards-based certificates and key management
  • Supported Networks: SONET OC-3 to OC-48, SDH STM-0 to STM-16, Line mode, Path mode
  • Network connections via pluggable SFP interfaces
  • Size: 435 mm/17.1" (17"), 42 mm/1.6" (1U), 380 mm/15" (WxHxD)
  • Weight: 6 kg/13.2 lbs
  • 0°  to 50°C/32 to 122°F operating temperature
  • 0 to 80% RH at 50°C/122°F operating
  • Power requirements: 100- 240VAC, 0.6 A, 50/60 Hertz 37 watts (typical)


  • Full-duplex speeds up to 10 Gbps  
  • First commercially-available OC48/STM16 and OC192/STM64 SONET encryptors  
  • Configurable as a path or line encryptor  
  • Employs federally-endorsed, highly secure AES algorithm  
  • Fully automated key management using X.509 certificates for authentication  
  • OC3 (STM1), OC12 (STM4), OC48 (STM16), and OC192 (STM64) interface options  
  • In-band management using SNMPv3  
  • Designed to international security standards 
  • FIPS 140-2 L3 and Common Criteria certified*

*Specific models

CN and CS Series SONET Encryptors At-a-Glance: 


*Specific models

  • Proven performance and dependability
  • Up to 10 Gbps
  • Interoperable
  • Protocols: SONET/SDH, Ethernet
  • Certifications: FIPS 140-2 Level 3, Common Criteria EAL4+, CAPS Baseline*


*Specific models

  • Proven performance and dependability
  • Up to 1 Gbps
  • Interoperable
  • Protocols: SONET/SDH, Ethernet, Fibre Channel, ATM, E1/T1
  • Certifications: FIPS 140-2 Level 3, Common Criteria EAL4+, CAPS Baseline*