SECURING FIBRE CHANNEL FABRICS - Brocade

Brocade Data EncryptionProducts11Brocade has been offering data encryption functionality since theintroduction of the Brocade 7500 Extension Switch, which supportedIPSec for encryption of data transported over an FCIP tunnel. In September2008, Brocade introduced a hardware platform for encryptionof data-at-rest for both disk and tape media, which offers unprecedentedencryption processing from a single device. This encryptionsolution is actually based on a switch platform and not a single-purposeappliance. It functions in the same way as a conventional Layer 2FC switch but with the additional hardware required to support linespeedencryption and compression functionality.Brocade Encryption for Data-At-RestData-at-rest refers to all data that is no longer in motion and has beenrecorded on storage media such as a disk drive or a tape cartridge.The Brocade encryption solution is available in two form factors thatshare the same internal hardware. The solution is available as a standaloneFC switch, the Brocade Encryption Switch, and as a blade for theBrocade DCX 8510 and DCX family of backbone products, the FS8-18Encryption Blade. The term “encryption device” is used throughout thischapter and refers to either the encryption switch or the encryptionblade. The Brocade encryption solution includes the Brocade encryptiondevice, along with all other components required for a productionenvironment, such as the key vault.Securing Fibre Channel Fabrics 173