Encryption as a Service (EaaS)

Ascent DataGuard, powered by TrustNet Manager from Certes Networks, is a web-based management platform that simplifies security management while preserving network performance and functionality. It provides a browser-based user interface for managing policies and devices and a back end server for distributing group encryption keys. Ascent DataGuard offers simplified encryption management without requiring costly changes to your existing network infrastructure.

Ascent DataGuard allows you to:

• Manage network encryption from anywhere using a web-based interface
• Define and distribute security policies with simple drag-and-drop simplicity
• Separate security management from network management
• Review and audit system events to simplify regulatory compliance
• Automatically validate changes before deployment

Solutions Architecture

Group Encryption Policy and Key Updates

Ascent DataGuard reliably distributes the group encryption policies and keys to Certes Enforcement Points (CEPs) throughout the network and it periodically sends key updates (rekeys). Key updates minimize the risk of a brute-force attack on the encrypted data by reducing the amount of information encrypted with the same key.

With Ascent DataGuard's fail-safe rekey feature, group keys are updated only when all of the group members are ready to receive the new key. This avoids network outages that occur when some group members receive a new key while other group members continue to use the old key.

Role-Based Access Control

Using role-based access control, Ascent DataGuard provides separate roles for security control and network management. This allows the security team to outsource network management without losing control of the security policies and keys. Ascent DataGuard also provides powerful logging and auditing capabilities to establish, maintain and prove regulatory compliance.

Group Encryption Management for Policies, Keys and Devices

Industry Compliance Standards

Ascent DataGuard takes the pain, complexity and expense out of complying with industry and government data protection requirements. Whether you are subject to PCI DSS, HIPAA, HITECH, NERC CIP Standards, Sarbanes-Oxley or any data privacy/protection mandate, our network encryption solutions allow you to secure your network, achieve regulatory compliance, and reduce the cost of deploying, managing and maintaining the encrypted network.

The Ascent DataGuard Difference

TrustNet is an innovative security policy and encryption key management solution providing scalable network-wide encryption. By providing global control of the generation of policies and dynamic distribution of keys, TrustNet enables organizations to encrypt data transmissions over any type of network without compromising application or network performance.