Solution Profile. Branch in a Box

(1)

Branch in a Box

Solution |

Profile

(2)

• Single Device Converged Connectivity-DATA, VIDEO & VOICE

• Stateful Inspection Firewall • HTTP/SMTP Proxy Services • Load Balancing Services

• VPN Concentration Services with MS XP VPN Client Support

• Hardware DES, 3DES Encryptions • Time, Date, Weekday, Weekend-based

Network Dynamism • Built-in Email Alerts

• Resource Pooling and Availability Triggers

• On-Demand Back-up to Ethernet WAN Media

• Web GUI-based Configuration, Management & Troubleshooting • IPv6 Ready

Executive Overview

Today’s networks have evolved from mere data connectivity sources to business enablers supporting mission critical applications which form an integral part of business itself. As the need to share and consolidate information spans across Intranets to Extranets, the dependency on networking infrastructures increases multifold.

Business continuance, low cost of ownership as well as ease of operations are becoming core elements of any business enabling infrastructure, with a growing need to look for solutions beyond the traditionally available infrastructure components. Allied Telesyn recognises this need and is working towards evolving concepts like Functional Consolidation as one of the alternate methodologies.

This methodology revolves around building next generation networking infrastructure with elements which offer more functionality per equipment than traditional elements with the same level of performance as the traditional sources; yet exceeding the feature sets.

Branch-in-a-Box infrastructure solution revolves around consolidating various traditional branch office networking elements like routing, switching, HTTP/SMTP proxies, firewalls, encr yptors, VPN concentrators, load balancers as well as VoIP

(3)

Traditional Branch Ofﬁce

Connectivity

gateways in a single device, streamlining operations, reducing cost of ownership and maintenance. Functional Consolidation is a reality today and a business enabler for tomorrow’s mission critical networks.

Application Overview

The Branch-in-a-Box solution profile is engineered using functional consolidation elements from Allied Telesyn’s product family.

Traditional Solutions

Prevailing branch ofﬁce solutions use distributed and independent elements to provide the function of routing, switching, ﬁrewalling, proxy and packet voice respectively.

As more and more business applications like ERP, mailing solutions, CRS, data warehousing, content hosting and management etc. are becoming centralised, failure of any of these isolated components contributes to failure of the business application itself. Further, as business expands across geographical locations, networks spread to have a wide area of coverage with multiple branch offices connected through various media to the central or corporate office. With each branch office having all the above listed elements, it becomes a challenge maintaining the infrastructure elements with perfect harmony to provide a highly availability environment for business applications.

Corporate WAN On Demand Backup Link Primary Link Router

eg AT-AR410 _{Optional Proxy} Server Optional VPN Concentrator eg AT-AR450S Layer 2/3 Switch eg AT-8624M Voice Gateway eg AT-RG213 Client Client Telephone Telephone

(4)

Fur ther, lack of local IT competence at each and ever y branch office adds to the challenge for the MIS team to keep pace with increasing infrastructure up-time requirements.

Allied Telesyn Advantage

Allied Telesyn’s Branch-in-a-Box appliance streamlines the branch office infrastructure through functionally consolidating routing, switching, firewalling, encryption, load balancing, proxy and VoIP gateway elements into a single device.

This approach eliminates probable failures of these components individually, while cutting down the total cost of ownership as well as maintenance of the branch office infrastructure. This would also cut down the man hours required to suppor t the installation as well as the cost of spare inventor y and other investments in outsourced third-par ty ser vices to ensure business continuance.

Ofﬁ ce Connectivity

with Functional

Consolidated Appliance

Corporate WAN On Demand Backup Link Primary Link Telephone Telephone Client Client

Branch-in-a-Box Appliance (eg AT-RP24i) with (a) Stateful Firewall

(b) HTTP/SMTP Proxy (c) VPN Services (d) Hardware Encryption

(5)

Value Propostion

Apart from the standard advantages functional consolidation brings to the table, Allied Telesyn’s Branch-in-a-Box equipment extend further value in terms of these additional features:

Converged Services

Branch-in-a-Box appliances are engineered with enough QoS and functionality to consolidate IP-based data, voice as well as video on to a single device while still treating each of these applications with the required sensitivity and intelligence so as to maintain end-to-end quality.

Network Dynamism

These appliances provide scripting functions which can be configured to enable network dynamism to reconfigure the appliance automatically based on Change of Date, Time, Weekday, Weekend or any event happening on the equipment.

Functions like automatic failovers, application availability and priority during business hours, on-demand circuits, activity schedulers etc. harness this inherent capability of the appliances.

Load Balancing

With bare minimum incremental cost, these Branch-in-a-Box appliances can be upgraded to provide WAN Load balancer, TCP Virtual Balancer, HTTP Virtual Balancer as well as SSL Load Balancer in software.

VPN Services

For connectivity over public networks, these appliances support IPSec, GRE or L2TP based site-to-site VPN services with DES or 3DES encryption levels in hardware.

To support mobile or roaming users, the same appliances can support client-to-site VPNs with support for MS XP VPN client.

ICSA-certiﬁed Stateful

Inspection Firewall

Allied Telesyn’s state-of-the-art Stateful Inspection Firewall ships by default with most of the Branch-in-a-Box appliances, protecting networks by monitoring both packet content and session status. The firewall defends against a wide range of Denial of Service (DoS) attacks including Ping of Death, SYN/FIN flooding, Smurf attacks, port scans, fragment attacks, and IP Spoofing.

The ﬁrewall also triggers email alerts when such attacks are detected. These appliances create a comprehensive security audit trail of event triggers, firewall event-logging, and accounting information.

Proxy Services

With the Firewall Feature Set loaded on these devices, HTTP as well as SMTP proxy services can also be conﬁgured on the same appliance with basic URL ﬁltering support to restrict web content according to organisational security policies.

(6)

Alerts & Notiﬁcation

All Branch-in-a-Box appliances come with a built-in email client that can generate custom email alerts lest any abnormality arise on the network like change in interface status, CPU and memory utilization, WAN link utilization, module failures etc or any set threshold is reached.

This feature requires no network management tools to be deployed.

Backup to Ethernet as WAN Media

With the Providers’ migration from traditional TDM based infrastructures to Metro Ethernet, more and more bandwidth provisioning will happen on Ethernet as the media in time to come. Traditionally, backup to Ethernet media as last mile bandwidth provisioning source is very challenging; however, as Allied Telesyn’s Branch-in-a-Box appliance suppor ts resource pooling and availability, these devices can trigger any on-demand circuit of any media type once the defined resources are not available over the primary Ethernet media.

About Allied Telesyn

Allied Telesyn has been an innovator in the development and manufacturing of high-quality, low-cost networking solutions since 1987. The company’s diverse portfolio of solutions, scales to optimize networks for any distance, speed, security or legacy integration. Allied Telesyn’s core to edge technologies range from simple Ethernet adapters, media conver ters to robust multi layer Gigabit Ethernet switches; from network management, wireless and security solutions to Carrier Class solutions that deliver real time multimedia. Allied Telesyn’s flexible service and support programmes are tailored to meet a wide range of customer needs and are designed to protect customers’ Allied Telesyn investments well into the future.

For more information, please visit

(7)

Focus Products

Products LAN Interface No. of WAN Slots Routed Switched

WAN Modules Supported _FirewallStateful _ServicesVPN _InterfacesVoice

FXS FXO HTTP/ SMPT Proxy Hardware Encrption

Sync Async_E1/T1Ch. PRI BRI ADSL

Rapier 24i 24 ports 10/100BaseTX _{+2 expansion slots} 4 Yes Yes Yes Yes Yes No Optional Optional Optional Optional Yes Yes

Rapier 16ﬁ 16 ports 100BaseFX MMF +2

expansion slots 4 Yes Yes Yes Yes Yes No Optional Optional Optional Optional Yes Yes AT-AR750S 1 port 1 port 2 Yes Yes Yes Yes Yes No Built-in Built-in Built-in Built-in No No

AT-AR410 1 port 4 port 1 Yes Yes Yes Yes Yes No Optional Optional Optional Optional Yes Yes

AT-AR410S 1 port 4 port 1 Yes Yes Yes Yes Yes No Built-in Built-in Built-in Built-in Yes Yes AT-AR440S 1 port 5 port 1 Yes Yes Yes Yes Yes Yes Built-in Built-in Built-in Built-in Yes Yes

(8)

Asia-Pacific Headquarters | 11 Tai Seng Link | Singapore | 534182 | T: +65 6383 3832 | F: +65 6383 3830

www.alliedtelesyn.com