ChipK - The fibre is managed by a 3rd party, we only have control up to the wall-ports, and requirement is due to the possibility of interception of inter-switch traffic.
Datacryptor 2000's gigabit platform has been floated, but from what I can see this works at layer 3 only, so will therefore...