Network Security. Protective and Dependable. 52 Network Security. UTM Content Security Gateway CS-2000

(1)

52 Network Security

Network Security

Protective and Dependable

With the growth of the Internet threats, network security becomes the fundamental concerns of family network and enterprise network. To enhance your business network protection, PLANET Technology offers a total network security solution to effectively defend your network against attacks at the forefront.

The PLANET Security Router family has Broadband Router, VPN Router, Multi-homing Gateway, UTM (Unified Threat Management) Content Security Gateway, SSL VPN Gateway, Internet Monitor, Bandwidth Management Gateway, and Server Load Balance.

The PLANET UTM (Unified Threat Management) Content Security Gateway, a special designed of security gateway, can adopt Heuristics Analysis to filter spam and virus mail, and the auto-training system can rise identify rate of spam. The Anti-virus application has double virus scan engines - Clam and Sophos which can detect viruses, worms and other threats from transferring E-mail and Internet network. The IDP and firewall functions can defense hackers and blaster attacks from the Internet or Intranet. Moreover, QoS function can be classified based on IP address, IP subnet and TCP/UDP port number and give guarantee and maximum bandwidth with three levels of priority. The maximum controlled bandwidth is 100Mbps.

UTM Content Security Gateway

(2)

PLANET Network Security Gateway Solution

PLANET UTM Content Security Gateway is specially designed security gateway with virus and spam filtering features. As the gatekeeper of corporate security network, it prevents corporate intranet from being infected by virus and its network resource occupied by useless spam mails. Further-more, IDP, User Authentication and Con-tent Filter features of the security gateway offer the corporate intranet highly secure protection. The UTM Content Security Gateway also provides the IPSec, PPTP, and SSL VPN solutions that the data can

be securely delivered via VPN tunnel. CS-2000

CS-1000

Access Point _Firewall _Firewall

Modem Modem DMZ Web-Server Finance-Server Mail-Server Modem 001101010 VPN Tunnel VPN Tunnel VPN Tunnel Virus Virus Virus Virus Attack _Spam MH-2001 Home Internet 001101010 001101010 Headquarters Branch Office Vendor Access Point

Stateful Packet Inspection (SPI) is a firewall that keeps track of the state of network connections traveling across it. The firewall is programmed to distinguish legitimate packets for different types of connections. Only packets matching a known connection state will be allowed by the firewall.

SPI Firewall

To prevent e-mail spam. Some of these techniques have been embedded in products, services and software to ease the burden on users and administrators.

Anti-Spam

are computer programs that attempt to identify, neutralize or eliminate malicious software. Most modern antivirus software is now designed to combat a wide range of threats, including worms, phishing attacks, rootkits, Trojans, often described collectively as malware.

Anti-Virus

Intrusion Detection and Prevention (IDP) products offer the latest capabilities in in-line network Intrusion Prevention System (IPS) functionality to protect the network from a wide range of attacks. Using industry-recognized stateful detection and prevention techniques, IDP provides protection against worms, trojans, spyware, keyloggers and other malware from penetrating the network or spreading from already infected users.

IDP

Secure Sockets Layer (SSL), is cryptographic protocol that provide security and data integrity for communications over TCP/IP networks such as the Internet. Several versions of the protocols are in wide-spread use in applications like web

SSL VPN

Internet Protocol Security (IPSec) is a suite of protocols for securing Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a data stream. IPSec also includes protocols for establishing mutual

(3)

54 Network Security

MH-2001

Multi-Homing Security Gateway

• WAN Load Balance and Fail-over

• Multiple NAT

• Content Filtering

• IPSec and PPTP VPN

• 200 IPSec tunnels

• SPI Firewall with DoS protection

Multi-Homing Security Gateway

MH-2001

CS-1000

CS-2000

UTM Content Security Gateway UTM Content Security Gateway

• Anti-virus and Anti-Spam for mail security support

• Spam mail learning system

• IDP

• SPI Firewall

• IPSec and PPTP VPN

• QoS

• Outbound Load Balancing

• Anti-virus and Anti-Spam for mail security support

• Spam mail learning system

• IDP

• IPSec, PPTP, SSL VPN

• QoS

• Outbound and Inbound Load Balancing

UTM Content Security Gateway

CS-1000 CS-2000

SG-1000

SG-500

SG-1000

Web and IPSec VPN Security Gateway Web, IPSec, and PPTP VPN Security Gateway

• SSL and IPSec VPN

• 5 SSL tunnels

• Virtual Server and IP mapping

• Hacker Alert and Anomaly Flow Detection

• SSL, IPSec, and PPTP VPN

• 50 SSL tunnels

• VPN Trunk

• Virtual Server and IP mapping

• Hacker Alert and Anomaly Flow Detection

VPN Security Gateway

SG-500

(4)

BM-525

BM-2101

Bandwidth Management Gateway Bandwidth Management Gateway

• Traffic classification based on IP, IP range/subnet, and TCP/

UDP port range

• Guaranteed and Maximum bandwidth with three levels of

priorities

• Professional Monitor function includes Log, Accounting Report,

Statistics, and Status

• MRTG-like Traffic Statistics, easy to trace and analyze

• Maximum Controlled Bandwidth 25 Mbps

• Content Filter includes URL, Script, P2P, IM, and Download

blocking

• Traffic classification based on IP, IP range/subnet, and TCP/

UDP port range

• Guaranteed and Maximum bandwidth with three levels of

pri-orities

• Professional Monitor function includes Log, Accounting Report,

Statistics, and Status

• MRTG-like Traffic Statistics, easy to trace and analyze

• QoS Quota per Session and Quota per Day

• Outbound load-balancing function

• Maximum Controlled Bandwidth 100 Mbps

• Content Filter includes URL, Script, P2P, IM, and Download

blocking

Bandwidth Management Gateway

BM-2101

VRT-311S

VRT-401

VPN Broadband Router VPN Broadband Router

• Multiple DMZ support

• DDNS

• Virtual Server

• IPSec and PPTP

• Stateful Packet Inspection firewall for DoS attacks

• Multiple DMZ support

• DDNS

• Virtual Server

• IPSec and PPTP

VPN Broadband Router

VRT-401 BM-525

Service Distribution Chart Policy/Outgoing:

 QoS

 Max. Bandwidth per Source IP (Kbps)

 Max. Concurrent Sessions per IP and Total Sessions

 Quota per Session (KB)

(5)

56 Network Security

Hotspot Wireless Broadband Router

WSG-404

WSG-404

Wireless Subscriber Gateway

• Ideal Hot Spot Solution

• Zero Configuration (Plug-n-Play) Internet Access

• Built-in Proprietary AAA Mechanism and Billing System

• RADIUS AAA Support

• Built-in 64/128-bit WEP Encryption

• Virtual Server and DMZ Capability

XRT-501

XRT-501

Gigabit Broadband Router

• All Gigabit Ports for 1 WAN and 4 LAN ports

• VPN Pass Through

• QoS

• Content and URL Filters

• DMZ, DDNS, and Virtual Server support

XRT-401D

Broadband Router

XRT-401D

Broadband Router

• Virtual Server and DMZ

• DHCP Server

• Remote Management

• UPnP support

• URL Filtering and Access Control

XRT-401E

Broadband Router

• Virtual Server and DMZ

• DHCP Server

• Remote Management

• UPnP support

• URL Filtering and Access Control

XRT-401E

WSG-ACG4

Account Generator

• Ticket Printer for WSG-404

• Feed Paper Button

• Function Selection Button

• Zero Configuration (Plug-n-Play)

WSG-ACG4