A superior alternative to poorly performing VPN solutions - InfoGuard launches in Switzerland Ethernet layer 2 multipoint encryption

Published 14th January 2009

InfoGuard launches in Switzerland Ethernet layer 2 multipoint encryption...

InfoGuard AG, the Swiss expert in high-performance encryption solutions, has launched the world’s

first multipoint encryptor for layer 2 transmission of data in Ethernet networks. InfoGuard EGM sends sensitive data without delay, offering a high-performance alternative to layer 3 VPN gateways, known to produce large data overhead that reduces performance. The new equipment family is intended for companies and public administrative agencies with large branch networks requiring full protection for even the smallest branches or replacing their existing layer 1 links with a flexible and cost-efficient layer 2 Ethernet services.

The encryption solution is available in two different product versions. InfoGuard EGM covers transmission rates of 20 to 100 megabits per second while InfoGuard EGM1 protects networks with a data throughput ranging from 200 megabits to one gigabit per second. Almost no maintenance and configuration effort is required for the hardware, which is designed for high availability operation. Both models offer flexible, low-cost and interception proof communications for connecting different locations via Ethernet service networks to the corporate headquarters. Encryption solutions can make use of the wide variety of Ethernet connections such as point-to-point, point-to-multipoint or multipoint-to-multipoint to match operational requirements.

Thomas Meier, CEO of InfoGuard: “Many organisations usually use VPN gateways to connect multiple branches to the main network. However, these solutions really eat up much of the available performance, especially when processing smaller packets, and cause enormous throughput losses and latency problems. Moreover, the installation of a layer 3 security solution is highly complex and elaborate. With the InfoGuard encryption approach, organisations have a solution for Ethernet services networks that is simple to install and operate and involves no loss of performance.

Operating on layer 2 is the fastest method

InfoGuard EGM encrypts the data packets that networks exchange on layer 2 of the OSI model, allowing data transmission that is virtually free of losses. This is a more elegant implementation than VPN gateway solutions, which involve elaborate computing operations for the encryption and tunnelling of the individual packets and thereby reduce the bandwidth actually available by as much as 50%. The new encryption solution can also be utilised to replace the existing layer 1 links. Along with the advantages of layer 2 encryption mentioned above, customers also benefit from the flexibility of modern Ethernet services. InfoGuard EGM/EGM1 encrypts real-time data in microseconds over Ethernet Private Line (EPL), Ethernet Virtual Private Line (EVPL), Ethernet Private Local Area Network (EPLAN) and Ethernet Virtual Private Local Area Network (EVPLAN). The units can be integrated seamlessly for adaptation to the customer’s specific technical requirements and support unicast, multicast and broadcast traffic with QoS (quality of service) utilising VLAN IDs or 802.1q Priority Bits.

The InfoGuard security architecture complies with the most stringent requirements for sensitive environments. Data is encrypted using the public Advanced Encryption Standard (AES) with a key length of up to 256 bits. The session keys are changed automatically with no interruption in the connections or loss of performance. InfoGuard units can be administered and configured locally over an integrated user interface or a graphical PC user interface or remotely over a protected SSH access point.

Growth in the InfoGuard product family

The new security products for Ethernet layer 2 multipoint encryption expand the InfoGuard product family designed for protecting time-critical applications and heavily loaded links. Based in Switzerland, the company is a global market leader in data encryption in layer 2 networks offers point-to-point encryption solutions over Ethernet, Fibre Channel/FICON and SONET/SDH networks with data throughput rates as high as ten gigabits per second. To ensure the transparent operation of the network, InfoGuard focuses on performance criteria such as minimal delay and maximum data rates while delivering reliable hardware encryption solutions featuring professional security. As a Swiss company, InfoGuard guarantees top quality and absolute independence in its implementation of all security functions. All security modules are developed by the company’s own technical specialists and produced in its own factories in Switzerland.