High Assurance 2000 Gateway

The SafeNet HighAssurance™ 2000 Gateway offers performance and manageability features that drive down the total cost of ownership of network security.

Built to meet the scalable demands of today's medium to large office networks, it provides key security and data management features including IPSec VPN tunneling and Network Address Translation while operating at 100 Mbps full-duplex. The HighAssurance 2000 Gateway supports up to 10,000 IPSec tunnels and a maximum of 100,000 simultaneous secure connections using DES or Triple DES encryption.

The HighAssurance 2000 Gateway is a dedicated, stand-alone, IPSec solution for site-to-site and remote access virtual private networks (VPNs). It maximizes cost and time savings by optimizing security, performance, interoperability, and manageability. The HighAssurance 2000 Gateway also enables companies to move their business communications to the Internet, reducing costs, increasing business opportunities and securely communicating and transacting with employees, business partners and customers. Encryption and security functions are separated from those of other networking devices because the HighAssurance 2000 Gateway device is a dedicated security device - critical when designing the most secure meshed and hub-and-spoke network architectures.

Like all SafeNet security appliances, the HighAssurance 2000 Gateway is managed by the SafeEnterprise Security Management Center, a robust, Java™-based policy management software application with secure, flexible, and transparent SNMP-based control and monitoring capabilities. The SMC defines integrated security policies that can be distributed across multiple devices and HighAssurance Remote VPN clients.

Key Features

• 100 Mbps, full-duplex performance with DES or Triple DES encryption
• IPSec standards-based encryption, authentication, digital certificates, and key management
• Expandable to 10,000 IPSec tunnels and 100,000 simultaneous secure connections
• Flexible and scalable network design with static and dynamic NAT, Port Address Translation, VLAN support, and secure multicasting
• Remote Access Services using RADIUS, RADIUS based policy, DN-based access control, XAUTH, NAT Traversal, and Mode Config
• High Availability and network integrity with Failover, PMTU Discovery, and Load Sharing
• High security with enhanced IKE commands, Perfect Forward Secrecy (PFS), and Certificate Revocation Lists (CRLs)
• Easy installation in existing network environments with 10/100 Mbps LANs, DHCP, and Multicast pass-through traffic support
• Ideal for meshed, hub-and-spoke, and nested networks
• Centralized GUI, certificate-based policy, and security management through Security Management Center