NeoScale CryptoStor SAN VPN enables companies to securely run real-time storage applications (e.g., synchronous mirroring, SAN to SAN inter-connect) between sites in a Metropolitan Area Network (MAN).
SAN VPN is the first appliance to provide wire-speed Fibre Channel link encryption and compression in order to secure SAN extension applications without any change to the storage application or devices. SAN VPN also enables customers to extend their SANs across long distances (up to 460km / 286 miles) without performance degradation by providing buffer credits.
| 
CryptoStor® SAN VPN |
MAN Network Exposures
To achieve greater flexibility for business continuity and disaster recovery, enterprises are networking SANs across MANs to connect geographically dispersed storage across data centers. MAN technologies consist of SONET, WDM, and dark fiber technologies which deliver the necessary throughput with minimal latency delays to support real-time requirements of the storage applications. However, MAN edge devices offer no security for Fibre Channel connections, so a network breach could expose sensitive information.
MAN Network Distance Challenges
Most Fibre Channel switches and devices were designed to operate in a data center environment where latency delays were negligible. When these devices attempt to communicate across a MAN environment, the extra distance adds latency delay (approximately 5 microseconds per kilometer) which means that an acknowledgement is not immediately received. In order to deliver native performance across longer distances, buffer credits are required to fill the MAN with traffic before receiving an acknowledgement. Since most existing Fibre Channel switches and devices typically support few buffer credits, performance is limited without a MAN edge device which can support more buffer credits.
VPN Security Built for Storage
Until now, data-in-flight encryption in a SAN required encapsulation or conversion to IP. This method provided security but at the cost of performance and latency. Operating as a fully pass-through (not proxy), in-line storage appliance, CryptoStor SAN VPN provides strong encryption at multi-gigabit rates. The CryptoStor SAN VPN appliance achieves full fabric throughput with nominal latency. Since CryptoStor operates invisibly, it is flexibly deployed to complement backup, replication, virtualization and storage management applications. It is the most robust, scalable, and manageable solution for cost-effective SAN data confidentiality. CryptoStor SAN VPN also supports buffer credits which enable customers to extend their SANs across long distances (230km at 2Gbps and 460km at 1Gbps) without performance degradation. Longer distances are supported but will cause some performance impact.
|
About NeoScale Systems 
NeoScale Systems, Inc. is a leading provider of enterprise-class security solutions for data storage. The company provides a suite of products designed to add scalable, high-performance, strong encryption and authentication services that enable organizations to readily achieve storage data confidentiality in a variety of online, nearline and offline storage environments. The resulting solution lowers the cost of protecting highly accessible, distributed storage infrastructures, while also enabling greater efficiencies for the management of storage capacity, consolidation, continuity and compliance.
|
