giai phap bao mat - thiet bi ly tuong cho mang lan

Download Giai phap bao mat - Thiet bi ly tuong cho mang LAN

If you can't read please download the document

Upload: tran-thanh-song

Post on 19-Jun-2015

168 views

Category:

Technology


5 download

DESCRIPTION

Nếu bạn cho rằng một máy tính cài phần mềm chống virus bản quyền được update liên tục bởi công nghệ đám mây gì đó là an toàn thì vẫn chưa đủ bởi Antivirus chỉ tìm và diệt được khi nó đã có mẫu. Điều gì xảy ra khi một sâu máy tính mới hoặc Attacker/Hacker xâm nhập vào máy tính của bạn rồi lặng lẽ nhân bản sang toàn bộ máy trong mạng LAN của công ty ??? Hiện chúng ta đã có công nghệ bảo mật đủ mạnh cho phòng chống tấn công từ ngoài nhưng chúng ta đang để lỗ hổng rất lớn là không có giải pháp bảo mật, phòng chống tấn xông xâm nhập từ bên trong. Tài liệu Brochure này giới thiệu về thiết bị Switch bảo mật của HDN, một Cty tiên phong thế giới về giải pháp bảo mật cho Access Layer. Nếu bạn cần thêm thông tin vui lòng email tới [email protected] hoặc điện thoại 0903212322, tôi sẽ hỗ trợ và cung cấp cho bạn.

TRANSCRIPT

  • 1. HanDreamnet Co., Ltd.www.handream.netThe World 1 st Security SwitchIntegrated Management System of IP Resource Control / Access Control Visual Node ManagerL2/L3 Security SwitchVisual Node ManagerVisual IP ManagerShould you have any inquiries, feel free to contact us. We will respond as soon as possible. Product and sales inquiry : [email protected] / www.handream.netThe World 1st Security Switch HanDreamnet acquired the world first L2 security switch patent with HanDreamnet's own technologies and will help to build more safe network.SG Security Switch Series Detect / block malicious traffic caused by virus such as DoS/DDoS, Flooding or Scanning in IPv4/IPv6 environment Prevent information leaking with blocking ARP spoofing and block internal information hacking Guarantee network continuity with Self Loop Detect function Provide the network stability through patented MDS engine (ASIC) Supply integrated network management software (VNM) IPv6 Ready LogoHanDreamnet Co., Ltd.#1209 MarioTower, 28, Digitalro-30-gil, Guro-Gu, Seoul 152-741 Korea TEL : 82-2-890-6650 FAX : 82-2-890-6654 www.handream.net E-mail : [email protected]

2. L2/L3 Security SwitchVisual Node Managerwww.handream.netVisual IP ManagerNetwork Topology for Security SwitchThe world 1stSecurity SwitchSG Security SwitchSG Security Switch SeriesInternet UTM (Firewall, VPN, IPS)SG8800SG8800Visua lNodeManagerNo.1 in L2 security switch market shareTraditional L2 SwitchVIPM IP Resource & Access ControlSG202 4SG202 4L2 Security SwitchSG202 4 420 2GSL3 Security SwitchL2 Security SwitchSG202 4 420 2GS420 2GSSG Security switch blocks malicious traffic in real time such as DoS/DDoS, Flooding, Scanning and Spoofing through packet analysis up to layer 4. SG Security switch blocks virus infection including Zero-Day attack. SG security series are essential to construct safe network environment.VNM Integrated Network Management420 2GSSG Security Switch SeriesPrevent trouble in advance by blocking malicious traffic like worm and virus in access level It detects and blocks malicious traffic by worm and virus to prevent network speed reduction and down in advance. The network administrator enables to carry out 'without service interruption.IP Management (Unauthorized PC detection)Block Zero-Day Attack (DoS/DDoS/Scanning/Flooding)Block ARP Spoofing (Tapping and leaking personal information)Protect confidential and financial information of individual / company / public institution from ARP Spoofing attack Increasing IP phone tapping, financial information and ID/Password hacking cause a huge damage to privacy and banking. SG security switch series detect and block ARP Spoofing in real time and protect users confidential information.L2 PoE Security Switch Comparison SG2124GXPoESimultaneously detect / block malicious traffic in IPv4 and IPv6 networkTraditional PoE SwitchSG security switch acquired IPv6 ready logo. SG security switch supports secure and stable network in IPv4 and IPv6 network.PerformanceUp to 32K MAC address support 144G Switching Capacity 131Mpps ThroughputUp to 8K MAC address support 176G Switching Capacity 42Mpps ThroughputFull wire speed with security functionPoESupport internal power supply redundancy 802.3af = 24port 802.3at = 24portSupport external power supply redundancy 802.3af = 24port 802.3at = 12portTypes of Blocking Malicious TrafficIPv4/IPv6 network (Static IP & Dynamic IP) - Stable network by installing a patented MDS security engine - Real-time blocking malicious traffic such as DoS / DDoS, Flooding, Scanning - Secure network continuity by blocking selective malicious traffic - Prevent information leaking with blocking ARP spoofing - Easy management for malicious trafficIPv4/IPv6 network (Static IP & Dynamic IP) - Security engine not supported - Real-time blocking unavailable (only support storm control) - Malicious traffic blocking not supported - ARP spoofing blocking with static IP address not supported - Takes time to figure out cause of problem and trouble shootingDetect & Block LoopingReal-time detect and block cable loop Guarantee network continuityUnable to control cable loop Network downtime by cable loop availableIntegrated Network Management(VNM) - GUI based integrated network management system - Log and report output at integrated management system screen - Available to check IP, MAC and Network bandwidth in useExtra network management system requiredManagement SystemMDS(Multi Dimension Security) engine is ASIC based hardware chip and carries out security function by analyzing traffic. MDS engine guarantees the full wire-speed while providing security features.Smart protection (Block only malicious traffic) By blocking virus infected packet or service port only, it provides work continuity like web service, e-mail and groupware.It enables to monitor/control whole network status and condition on a screen. It helps to figure out attacking history, detection/blocking log and history in a table which can be used as internal report.Reliability and stability are proven by large security references in Korea & Overseas market. 3. L2/L3 Security SwitchVisual Node Managerwww.handream.netVisual IP ManagerProduct FeatureProduct FeatureSG security switch makes possible to build more safe network by checking various network attacks in access level through behavior based blocking.Implementation of SG security switch helps IT administrator to have secure and reliable network.Stable network through embedded MDS security engineSecure and reliable IPv6 networkMDS developed by HanDreamnet adopts behavior based blocking method which does not require signature file update like other pattern matching(IPS/IDS) products. It blocks only malicious traffic through analyzing traffic up to layer 4 in real-time, so guarantees the safe and reliable network.SG security switch acquired IPv6 ready logo. It can block and detect malicious traffic in IPv6 as well as IPv4 network. It supports various IPv6 routing protocol such as RIPng, OSPFv3, BGP4+ and supports various IPv6 management features.Point!!Point !! Real-time detect / block malicious traffic in IPv4/IPv6 network Full wire speed in all ports with security functionBlocking only malicious traffic through smart protectionStrong privacy networkIt secures work continuity without service interruption by blocking malicious traffic only in PC, smart phone, and IP phone.It helps to get rid of hacking hazard by allowing communication between designated uplink port and terminal only in hotel and apartment. It blocks file sharing with NetBIOS.InternetPoint!! Secure service continuity of normal traffic by blocking malicious traffic only Smart protection in security switch vs IP/Port blocking in other traditional switchPoint!! Room1Room2Room3Room4Normal traffic Malicious trafficReal-time detection and blocking of malicious traffic such as DoS/DDoS, Flooding and Scanning MDS security engine blocks worm spread so that it prevents secondary damage. SG security switch blocks malicious packet under each stacks in real-time to keep network safety. It is good for financial institutions and ISP that have to carry out guaranteed traffic.Point!! Real-time block malicious traffic Prevent network overload caused by malicious trafficRing topology support SG security switch supports ERP(Ethernet Ring Protection) protocol for ring topology. So, it can extend its value to carrier or metro ethernet area with powerful security feature.SG21 24GX PoESG21 24GX PoESG21 24GX PoEPoint!! Primary (Forwarding)SG21 24GX PoESecondary (Blocking) 4. L2/L3 Security SwitchVisual Node Managerwww.handream.netVisual IP ManagerProduct FeatureProduct FeatureSG security switch detects and blocks the network problems in advance to provide reliable network service.Implementation of SG security switch can support an optimal IPT network.Network continuity with Self Loop Detect functionEffective IPT network with LLDP-MEDThe entire network service is often down by users mistake during the operation. SG security switch detects and blocks cable loop so provides the reliable network.SG security switch supports Voice VLAN and Auto QoS feature with LLDP-MED for IPT network. So regardless of network congestion, it can guarantee voice quality.Point!! Point !!IPT Wizzard helps to build IPT network Easy configuration of Voice VLAN based on LLDP-MEDPrevent entire network downtime by cable loop Provide real-time log in case of cable loopRedundancy feature802.3af/at support with maximum 740W PoE power budget SG2124GXPoESG security switch provides various redundancy feature. It prevents network suspension due to cable trouble, port trouble, and switch trouble.SG2124GXPoEMasterSlaveSG security switch supports built-in dual power supply in 1U size. So it supports 15.4W to all 48 ports, and 30W to all 24 ports.SG security switch power supplySSRPoint!!SPRPoint!! Internal power supply redundancy for reliability Support sufficient PoE/PoE+SSR: Smart Switch Redundancy SPR: Smart Port Redundancy2 Power supplyInternal power supply redundancyPrevent information leaking with blocking ARP SpoofingGreen IT network environment by reducing power consumptionSG security switch detects and blocks attacks using internal information. It prevents users to steal personal information in advance.Power for unused port is reduced to cut off power consumption significantly. And SG2100/3100 series can support EEE(Energy Efficient Ethernet). It enables to make green IT network through CO2 reduction.SG2 124G X PoESG2 124G X PoESG2 124G X PoESG2 124G X PoESG2 124G X PoEPoint!!Point!!Prevent IPT/UC tapping Prevent personal information and company confidential resources to be leaked by hackingSave power consumption up to 50% Minimize port power according to port connectionEnergy Efficient Ethernet1 Power supply 5. L2/L3 Security SwitchVisual Node Managerwww.handream.netVisual IP ManagerProduct FeatureProduct FeatureSG security switch detects/blocks malicious traffic, and blocks unauthorized users to access the network, and also support user notification function.SG security switch provides various management feature for administrator convenience.Blocks unauthorized users to access the internal networkManagement enhancementsSG security switch supports powerful authentication function with embedded RADIUS server and external VIPM server. It blocks an unauthorized users and support user access control.By supporting Multi OS and USB interface, the administrator easily manages switch firmware. Also, it supports sFlow and IPv6 management feature for the purpose of management convenience.RADIUS Server / VIPMPoint !!Firmware UpgradeUSBPoint!! ID Passhdn123 *********Mac Address F4:1C:XX:12:XXIP Address 192.168.0.254Powerful IPv4/IPv6 management Firmware upgrade support with USB interfaceMac Address + IP Address + PortUser notification for malicious traffic (MDS Web Alert)TFM(Traffic Flow Monitoring)It sends alert pop-up message to the user through web browser in case of malicious traffic. So users can do self-check for virus and windows update.FTP, SFTP Firmware UpgradeSG security switch provides N:N monitoring capabilities instead of expensive extra TAP. With TFM, it supports improved monitoring feature.Internet SG8800Point!!SG8800Point!! Improved monitoring feature 1:N, N:N monitoring capabilities support with TFMIntrusion DetectionLoop PreventionIntegrated ManagementUser Access ControlNetwork SecurityAnti VirusNetwork Traffic Analysis Tool 6. L2/L3 Security SwitchVisual Node Managerwww.handream.netVisual IP ManagerProduct Feature Integrated Network Management SoftWareGroup PolicySwitch Auto ConfigVNM (Visual Node Manager) VNM, integrated network management software is provided as a bundle. It helps to monitor switch and traffic status.Network status analysisNetwork TopologyVNM applies the policy to the individual switch or group.VNM with auto config feature can set IP address, gateway and SNMP community to the new security switch without console access.Switch Configuration BackupSwitch Firmware UpgradeVisu al NodeVNM supports network status analysis, traffic usage, IP usage and malicious traffic tracking.Real time malicious traffic monitoringSwitches and 3rd party products can be configured in the topology map. The administrator can monitor individual devices or groups in topology map.Real time user status monitoringVNM can save up to 10 configuration files per switch. With this feature when a failure occurs, you can easily recover the switch configuration.ManagerVNM supports firmware upgrade without additional program.Special ReportVNM server installation Minimum requirements Recommended requirements (Under 50 devices) (More than 50 devices) Window XP 32Bit (SP2/3)CPU Memory HDDVNM supports malicious traffic monitoring in many security switches.VNM supports real-time monitoring about IP address/ MAC address/Port information of users. Additional information such as department and name can be added.VNM provides network status & malicious traffic status to operator based on daily/weekly/monthly. It also supports the feature of scheduling report.Window 7 32Bit higherWindow 7 32Bit higher2003 Server, VistaOSWindow XP 32Bit (SP2/3) 2003 Server, VistaIntel Dual Core 2GHz higherIntel Core i7 higher2GB higher4GB higher200GB higher500GB higherShould open TCP 8085~8087 and UDP 161~162 service port in firewall. 7. L2/L3 Security SwitchVisual Node Managerwww.handream.netVisual IP ManagerProduct Feature IP resource managementIntegrated Network ManagementPowerful authentication featureVIPM (Visual IP Manager) VIPM in conjunction with SG security switch, supports IP resource control, NMS, authentica-- Monitor and control IP/MAC condition- Network access control with IP/MAC/Porttion system and network access control capabilities.VIPM enables to monitor IP/MAC status at a look and prevents IP change, tapping or collision.Network access control with IP/MAC/PortThe network which you manage... How many resources are accessed?Are there malicious traffic inside network?Integrated Access M Management rated at ated Ma SSH VIPM accessInternetSG8800Who, when and where accessed?Are there any information leaking or hacking by internal user?How many traffic does it have?Are there any network troubles by IP resources?IP resource authorized?Is batch upgrade of switch firmware available?Network status analysisMalicious traffic and device monitoringSpecial ReportSG8800AdministratorTelnet/SSH direct access is restrictedSG2024GSG2024GSG2024GTelnet/SSH access is allowed through VIPM- Powerful security feature by restricting direct access VIPM can allow access to the device through VIPM and restrict direct access to device. VIPM supports powerful management by assigning banned words, and tracking command history.VIPM Redundancy feature- Periodically report VIPM supports a special report for network status and malicious traffic monitoring. Scheduling report and finding features are also supported.Product Configuration:VRRP Dedicated Appliance Only for VIPM- Real-time monitoring of whole network status- Real-time monitoring of switch status- Reliable IP resource managementVIPM monitors network status in real-time such as network topology, IP address usage status, and malicious traffic detect/block status.VIPM monitors current status of switch including IP usage, traffic usage and malicious traffic detect/block status per each port.VIPM supports redundancy feature for entire hardware, and power supply to ensure IP resource management.- Max 50,000 users - Raid 1 support (option) - Dual power supply (option)SG2000 Series S i SG2100 Series SG3000 Series SG3100 Series 8. L2/L3 Security Switch Product SpecificationVisual Node Managerwww.handream.netVisual IP Manager Product SpecificationL2 Security Switch SG2000 SeriesNon PoE Switch Physical FeaturesNon PoE Switch Physical FeaturesSG2024 Switching Capacity (Gbps) Performance Throughput (Mpps) MAC Capacity (k)SG2024GSG2048GSG2024GFSG2008G28.848.0192.048.020.013.1DRAM (MB) Basic Flash-Max Flash (MB)71.471.4142.929.883232321611+11+11+1256256256256256SG2124 Switching Capacity (Gbps) Performance Throughput (Mpps) MAC Capacity (k)1Power Supply HardwareL2 Security Switch SG2100 SeriesPower Supply HardwareDRAM (MB) Basic Flash-Max Flash (MB)SG2148SG2124G28.857.696.0SG2124GX SG2124GXF SG2148GX 144.0144.0288.019.026.271.4131.0131.0202.41616323232321+11+11+11+11+11+151251251251251251264 (256)64 (256)64 (256)64 (256)64 (256)64 (256) N/A64 (256)64 (256)64 (256)64 (256)24N/AN/AN/AN/A10/100 Base-T2448N/AN/AN/A10/100/1000 Base-T2244812 (Combo)1010/100/1000 Base-T22242412 (Combo)482 (Combo)4 (Combo)4 (Combo)242 (Combo)1000 Base-X224 (Combo)4 (Combo)242 (Combo)Power usage (W)34.764.898.867.725.310GN/AN/AN/A222Width (mm)440440440440265Power usage (W)30.341.259.670.266.588.7Height (mm)4444444438Width (mm)440440440440440440Depth (mm)Interface16 (32)10/100 Base-T220350350350190Height (mm)444444444444Depth (mm)3503503503503503604.3 (4.6)4.4 (4.7)4.7 (5.2)4.7 (5.3)4.8 (5.4)5.1 (5.6)1000 Base-XMaterialsWeight (kg) (Single/Dual)4.7 (5.2)3.04.8 (5.4)4.8 (5.5)InterfaceMaterials1.8Weight (kg) (Single/Dual)PoE Switch Physical FeaturesPoE Switch Physical Features SG2124PoESG2024PSG2024GPoESG2048GPoESG2008GPoE28.848.0192.020.013.171.4142.929.88323216MAC Capacity (k)Power Supply1+11+11+11Power SupplyDRAM (MB)256256256256DRAM (MB)Switching Capacity (Gbps) Performance Throughput (Mpps) MAC Capacity (k) HardwareBasic Flash-Max Flash (MB)Switching Capacity (Gbps) Performance Throughput (Mpps)HardwareSG2148PoE28.857.6SG2124GPoE SG2124GXPoE SG2148GXPoE 96.0144.0288.019.026.271.4131.0202.416163232321+121+11+1251251251251251264 (256)64 (256)64 (256)64 (256)64 (256) N/A64 (256)64 (256)64 (256)24N/AN/AN/A10/100 Base-T2448N/AN/A10/100/1000 Base-T224481010/100/1000 Base-T222424482 (Combo)4 (Combo)4 (Combo)2 (Combo)1000 Base-X224 (Combo)4 (Combo)2 (Combo)Total PoE power budget (W)740740740124N/AN/AN/A22PoE/PoE+PoEPoEPoEPoEPower usage (W)65.274.7143.136.0Width (mm)Interface16 (32)10/100 Base-T440440440265Height (mm)44444444Depth (mm)4104284282656.5 (7.9)6.8 (8.6)7.3 (9.2)2.81000 Base-X PoEMaterialsWeight (kg) (Single/Dual)Basic Flash-Max Flash (MB)Interface10G Total PoE power budget (W)740740740740PoE/PoE+PoE/PoE+PoE/PoE+PoE/PoE+65.2102.974.081.5138.6Width (mm) Materials740 PoE/PoE+Power usage (W)PoE440440440440440PoE/PoE+Height (mm)4444444444Depth (mm)4284284384384386.8 (8.6)8.87.1 (8.9)7.2 (8.9)9.2Weight (kg) (Single/Dual) 9. L2/L3 Security Switch Product SpecificationVisual Node Managerwww.handream.netVisual IP Manager Product SpecificationL3 Security Switch SG3000 SeriesNon PoE Switch Physical FeaturesNon PoE Switch Physical Features SG3024SG3024GSG3048G28.848.0192.013.171.4142.971.4832323211+11+11+1256256256256Performance Throughput (Mpps) MAC Capacity (k) Power Supply HardwareDRAM (MB)SG3024GF16 (32)64 (256)64 (256)24N/AN/A2244812 (Combo)2 (Combo)4 (Combo)4 (Combo)Power usage (W)34.764.898.8440440440Height (mm)444444350350350Weight (kg) (Single/Dual)4.8 (5.5)4.7 (5.2)3.0SG3024GPoE 48.071.4131.0131.016323232321+11+11+11+11+11+1DRAM (MB)51251251251251251264 (256)64 (256)64 (256)64 (256)64 (256)64 (256)2448N/AN/AN/AN/A10/100/1000 Base-T22242412 (Combo)48224 (Combo)4 (Combo)242 (Combo)10GN/AN/AN/A222Power usage (W)30.341.259.670.266.588.7Width (mm) Materials440440440440440440Height (mm)4444444444443503503503503503604.3 (4.6)4.4 (4.7)4.7 (5.2)4.7 (5.3)4.8 (5.4)5.1 (5.6)Depth (mm)13.171.4142.9832321+11+1DRAM (MB)25625625616 (32)64 (256)24N/A 24 4 (Combo)4 (Combo)740740PoEPoEPoEPower usage (W)65.274.7143.1Width (mm)MaterialsPoE/PoE+4404404444HardwareInterfaceWeight (kg) (Single/Dual)4104284286.5 (7.9)6.8 (8.6)7.3 (9.2)288.0131.0202.4 321616323221+11+12DRAM (MB)51251251251251264 (256)64 (256)64 (256)64 (256)64 (256)2448N/AN/AN/A222424481000 Base-X224 (Combo)4 (Combo)2 (Combo)N/AN/AN/A2210G Total PoE power budget (W)Materials740740740740740PoE/PoE+PoE/PoE+PoE/PoE+PoE/PoE+65.2102.974.081.5138.6Width (mm)PoEPoE/PoE+Power usage (W)44Depth (mm)144.071.41+1Basic Flash-Max Flash (MB)440Height (mm)96.026.210/100/1000 Base-T740Total PoE power budget (W)57.619.010/100 Base-T482 (Combo)SG3148PoE SG3124GPoE SG3124GXPoE SG3148GXPoE28.8Power SupplyN/A2Performance Throughput (Mpps) MAC Capacity (k)64 (256)10/100/1000 Base-TSwitching Capacity (Gbps)1+11000 Base-XPoESG3124PoE192.010/100 Base-TInterface202.426.2SG3048GPoE28.8Power Supply Basic Flash-Max Flash (MB)288.0PoE Switch Physical Features SG3024PHardware144.01000 Base-XInterface4.8 (5.4)PoE Switch Physical FeaturesPerformance Throughput (Mpps) MAC Capacity (k)144.016Weight (kg) (Single/Dual)Switching Capacity (Gbps)SG3124GX SG3124GXF SG3148GX19.0Basic Flash-Max Flash (MB)4422096.010/100 Base-T440Depth (mm)MaterialsHardware67.7Width (mm)SG3124G57.6Power Supply241000 Base-XSG314828.8MAC Capacity (k)Performance Throughput (Mpps)N/A10/100/1000 Base-TSwitching Capacity (Gbps)64 (256)10/100 Base-TBasic Flash-Max Flash (MB) InterfaceSG312448.0Switching Capacity (Gbps)L3 Security Switch SG3100 Series440440440440440PoE/PoE+Height (mm)4444444444Depth (mm)4284284384384386.8 (8.6)8.87.1 (8.9)7.2 (8.9)9.2Weight (kg) (Single/Dual) 10. L2/L3 Security Switch Product SpecificationFeaturesVLANResiliencyLink AggregationMonitoringL2 MulticastQoSPoEManagementVisual Node Managerwww.handream.netVisual IP ManagerSG Security Switch Features Description 4K VLAN ID 802.1Q Port based VLAN Protocol/IP Subnet/MAC based VLAN Shared VLAN Hybrid VLAN Voice VLAN 802.1ad VLAN stacking (QinQ) STP/RSTP/MSTP PVSTP ERP (Ethernet Ring Protection) Self Loop Protection SPR (Smart Port Redundancy) SSR (Smart Switch Redundancy) UDLD IEEE 802.3ad Trunk groups (12, 24) Memebers per group - 8 ports Port Mirroring 1:1, N:1, 1:N, N:N TFM (Traffic Flow Monitoring) IPv4 IGMP Snooping (v1/v2/v3) IPv6 MLD Snooping (v1/v2) 8 queue per port Rate Limit (Ingress/Egress) Diffserv Auto QoS SP, WRR, DRR IPv6 QoS Max 740W PoE Power Budget 802.3af / 802.3at Power off per PoE Port LLDP, LLDP-MED RMON (Group 1,2,3,9) Local/Remote Syslog USB Interface Support Multi OS VNM(Visual Node Manager) IPv4/IPv6 Telnet / SSH Software Download: FTP, SFTP, TFTP, USB DHCP Server/Relay IPv4/IPv6 SNMPv1/v2/v3 IPv4/IPv6 sFlow IPv4/IPv6 NTP/SNTP Power Saving 802.3az EEEFeaturesL3 FeatureSecurityDescription IPv4 Static Routing RIPv1/v2, OSPF, BGP ECMP VRRP PIM-SM/SSM IPv6 Static Routing RIPng, OSPFv3, BGP4+ IPv4/IPv6 Dual Stack 6 to 4 Tunneling and ISATAP Security Engine DHCP Snooping Port Security IP Source Guard IPv4/IPv6 ACL - L2/L3/L4 ACL - Time Base ACL - VLAN ACL - Ingress/Egress ACL - CPU-ACL IPv4/IPv6 DHCP/NetBIOS Filtering Storm Control Embedded RADIUS Feature IP, MAC, IP+MAC Based Authentication AAA Authentication - Local, RADIUS, TACACS+ Authentication 802.1x - Multiuser, MAC Bypass, Web-Auth, Guest-VLAN IPv4/IPv6 Blocking Selective Malicious Traffic - Attack block: DoS/DDoS Attack, DHCP Attack, ICMP Attack, ARP Attack - Flooding block: TCP Syn Flooding, UDP Flooding, MAC Flooding - Spoofing block: ARP Spoofing, IP Spoofing - Scanning block Host Scanning, Port Scanning - IPv6 DAD Attack block Automatically detect/block/QoS/Rate limit and release User notification for malicious trafficSome features can be limited per switch seriesSG Security Switch Solution Guide L2 Security SwitchSG2000 Series Fast EthernetGiga EthernetSG2100 Series Fast EthernetGiga EthernetSG2008G/SG2008GPoESG2124/SG2124PoESG2124G/SG2124GPoESG2024G/SG2024GPoESG2024/SG2024PSG2148/SG2148PoESG2124GX/SG2124GXPoESG2048G/SG2084GPoESG2024GFImproved hardware performance 10G(SFP+) uplink support 802.3at(PoE+) support USB interface support 802.3az(EEE) supportSG2148GX/SG2148GXPoESG2124GXFL3 Security Switch (Support IPv4/IPv6 Routing)SG3000 Series Fast EthernetSG3024/SG3024PGiga EthernetSG3100 Series Fast EthernetGiga EthernetSG3024G/SG3024GPoESG3124/SG3124PoESG3124G/SG3124GPoESG3048G/SG3084GPoESG3148/SG3148PoESG3124GX/SG3124GXPoESG3024GFImproved hardware performance 10G(SFP+) uplink support 802.3at(PoE+) support USB interface support 802.3az(EEE) supportSG3148GX/SG3148GXPoESG3124GXF