network security

8
Build Your Total Safety Network Network Security UTM Content Security Gateway VPN Security Gateway Bandwidth Management Gateway Multi-Homing Security Gateway Broadband VPN Router www.keybps.com Business Process Solutions

Upload: key-business-process-solutions-sa-de-cv

Post on 10-Mar-2016

212 views

Category:

Documents


0 download

DESCRIPTION

Network Security

TRANSCRIPT

Page 1: Network Security

Build Your Total Safety Network

Network Security

UTM Content Security Gateway

VPN Security Gateway

Bandwidth Management Gateway

Multi-Homing Security Gateway

Broadband VPN Routerwww.keybps.com

Business Process Solutions

Page 2: Network Security

02 Network Security www.keybps.com

PLANET Network Security Solution

Comprehensive and Total Solution

WhyWith the growth of the Internet threats, network security becomes the fundamental concerns of home and enterprise network. To enhance your business network protection, PLANET Technology offers a total network security solution to effectively defend your network against attacks at the forefront.

Comprising the basic firewall function and the advanced security features including VPN, IDP, Anti-Virus, Anti-Spam and Content Filtering, PLANET security solution not only improves enterprise productivity safely but also advances the business network advantage. Firewall protects your network from unauthorized access. VPN ensures the data privacy, integrity and strong authentication to remote users. IDP/IPS helps home and business network detect and prevent external intrusion as well as virus spread internally. Anti-Virus/Anti-Spam eliminates the risk of virus infection and resources occupied from e-mails. Furthermore, Content Filtering applies for Internet application (IM, P2P/Web) to free your network from the risk of malicious attacks.

PLANET’s security solutions range from Broadband VPN router, Multi-Homing Security Gateway to Content Security Gateway for various business applications such as VPN communications, VoIP, or secure file sharing. The product portfolio fits to any network size from SoHo to SME and Enterprises.

Internet

Firewall

Virus

PC PC PC

Virus

Virus

Virus

Robust Integration of Security Functions

Reducing the Risk of Potential Shutdown

Low Operational Cost

PLANET security solutions integrate a wide array of security features to provide network a cost-effective and easy deployment of security protection.

PLANET presents Multi-Homing Security Gateway which is built-in with two WAN ports, to ensure business network continuous connection if one of the Internet connection shall fail.

A user-friendly web GUI interface is implemented in PLANET security gateway products for centralized configuring, monitoring, logging and troubleshooting. It frees users from complicated security management and reduces the technical support cost related to user authentication problems.

02 Network Security

Page 3: Network Security

03Pioneer of IP Innovation t +[52] [55] 24.87.30.00 f +[52] [55] 53.70.97.90 m [email protected]

New model of PLANET’s VPN Security Gateway, SG-1000, a special designed VPN security gateway provides mid-sized to large enterprises enhanced and secure network protection with its SSL, IPSec, and PPTP VPN tunneling technologies. The SSL VPN function supports up to 50 SSL VPN connection tunnels.

The IPSec VPN feature provides IPSec VPN Trunk and IKE, SHA-1, and MD5 Authentication. The PPTP VPN function supports PPTP server and client. The SG-1000 also offers Content Blocking feature to block specific URL, Script, IM, P2P, and download file. Furthermore, its built-in Anomaly Flow IP function supports Hacker and Blaster Alerts for administrator easily watches and tracks an attacker.

Enterprise VPN Solution

Network Security ApplicationNetwork Security is the top priority for governmental organizations in the high-tech environment. PLANET UTM Content Security Gateway acts as the gatekeeper of government security network, prevents government intranet from being infected by virus and its network resource occupied by useless spam mails. Furthermore, the IDP, User Authentication and Content Filter features of the security gateway offer the government intranet highly secure protection. The CS-2000 also provides the IPSec, SSL VPN, and PPTP VPN solutions for the data being securely delivered via VPN tunnel.

Government Solution

VP

N T

un

nel

VP

N T

un

nel

Main O�ce

O�ce

Home

O�ce

Internet

Finance-Server

CS-1000MH-2001

CS-2000

Web-Server Mail-Server

Firewall Attack Virus Spam

001101010

Modem

001101010

ModemAccess Point

Firewall

Access Point

DMZ

001101010

Modem

VPN Tunnels

100Base-TX UTP

1000Base-T UTP

100Base-TX UTP

IAS Server File Server Firewall

Remote Access Clients

PC

Laptop

PDA

Internet

Web Server Certificate Server

SG-1000

VPN Tunnel

03

Page 4: Network Security

04 Network Security

Network Security Applications

PLANET’s Multi-Homing Security Gateway, the MH-2001, integrates with cutting-edge technology including Load Balancing, QoS, VPN, Authentication, and Firewall functions for central sites establishing office network and connecting with branch offices as well as remote access users. It is designed for required application-based network solution of business with low investment and a perfect service to the security needs of SoHo and small business. No more complex connections and settings by integrating different security products on the network are required.

SMB Solution

ADSL

ADSL

ADSL 2/2+ADSL

100Base-TX UTP

MH-2001

DMZ

LAN

Multi-HomingSecurity Gateway

ADW-4401

ADN-4000

XDSL / CableModem

XDSL / CableModem

WAN Load Balancing

Firewall

VPN

Content Filter

QoS

Internet

Win Vista Win 2003 Win XP MAC RADIUS Server

Web / FTPServer

SOHO Bandwidth Management SolutionThe PLANET BM-525 is specifically designed for SOHO networks. For bandwidth management, packets can be classified based on IP address, IP subnet, and TCP/UDP port number. The device has more than 40 of the most common protocols such as H.323, Oracle, HTTP, FTP, and so on for easy definition. The administrator can then define policies to ensure committed and maximum bandwidth levels for inbound and outbound traffic in each class. The administrator can also define three priority levels for each policy to ensure high priority packets receive the maximum available bandwidth. In addition, each policy can have a schedule defined for when the policy is activated or inactivated in increments of 30 minutes.

BM-525NAT + Bandwidth Management

VoIPGatewwayV

Switch

Oracle

XDSL/CableModem

001101010

Internet

www.keybps.com

Page 5: Network Security

05

VPN Broadband Router / Multi-Homing Security GatewayProduct Series Model VRT-311S VRT-401 MH-2001

Product Image

Dimension Desktop Size Desktop Size Desktop Size

Networking Interface 1 x WAN, 3 x LAN, 1 x DMZ 1 x WAN, 4 x LAN, 1 x DMZ 2 x WAN, 1 x LAN, 1 x DMZ

Maximum Concurrent Session 2,600 2,600 45,000

Management Management Web Web Web

Security SPI Firewall

DoS / DDoS Prevention

P2P, IM Blocking - -

Download/Upload Blocking - -

Authentication User: Built-in Database

- - 200 entries

RADIUS Authentication - -

POP3 Authentication - -

Content Filtering

URL Filtering

ACL

VPN VPN Tunnels 10 100 200

IPSec VPN (DES, 3DES, AES)

PPTP Server / Client

Others Outbound Load Balancing - -

Bandwidth Management - -

Transparent

Multiple Subnet - -

Server Load Balancing - - 4 groups

Broadband RouterProduct Series Model XRT-401D XRT-401E XRT-501

Product Image

NetworkingInterface 1 x WAN, 4 x LAN 1 x WAN, 4 x LAN

1 x WAN, 4 x LAN (All Gigabit Ports)

Security SPI Firewall

Content Filtering - -

ACL

URL Filter

Others DMZ

DDNS

Virtual Server

QoS - -

VPN Pass Through

IGMP Snooping - -

Packet Capture - -

Diagnostics - -

t +[52] [55] 24.87.30.00 f +[52] [55] 53.70.97.90 m [email protected]

Page 6: Network Security

06 Network Security

Product Series Model SG-500 SG-1000

Product Image

Dimension Desktop 19” Rack Mount

Networking Interface 1 x WAN, 1 x LAN, 1 x DMZ 2 x WAN, 1 x LAN, 1 x DMZ

Maximum Concurrent Session 20,000 110,000

Security Firewall

Authentication User

RADIUS Authentication

Content Blocking

URL Filtering

Hacker Alert

DoS, DDoS Protections

VPN VPN Tunnel 100/200 100/200

VPN Performance 10 Mbps 17 Mbps

Encryption DES, 3DES, AES DES, 3DES, AES

IPSec Authentication SHA-1, MD5 SHA-1, MD5

SSL VPN

SSL VPN Tunnel 5 50

Others WAN Load Balancing -

QoS

DMZ Transparent

Static Route

NAT, PAT

H/W Watch-Dog

VPN Security Gateway

Product Series Model BM-525

Product Image

Networking Interface 1 x WAN, 1 x LAN, 1 x DMZ

Maximum Concurrent Session 20,000

Management Operating Mode NAT, Transparent

Management Web

Bandwidth Bandwidth Management Guarantee and Maximum Bandwidth

Maximum BandwidthNAT: 25Mbps

NAT + logging + statistics: 9Mbps

Security Policy-based Firewall

URL Filter

Virtual Server/DMZ

Anomaly Flow Detection

P2P Blocking

IM Blocking

Download/Upload Blocking

User Authentication by Built-in Database

Others Server Load Balancing Up to 4 virtual IPs

Target Market SOHO

Bandwidth Management Gateway

www.keybps.com

Page 7: Network Security

07

Product Series Model CS-1000 CS-2000

Product Image

NetworkingInterface 2 x WAN, 1 x LAN, 1 x DMZ

2 x WAN, 1 x LAN, 1 x DMZ (DMZ can switch to WAN3,

All Gigabit Ports)

Maximum Concurrent Session 110,000 1,000,000

New Sessions / Second 10,000 20,000

Performance Firewall Performance 100Mbps 300Mbps

3DES Performance 17Mbps 30Mbps

VPN VPN Tunnel 100/200 200/1000

SSL VPN Tunnel - 200

Security IDP

IDP Report -

Email Filtering POP3, SMTP POP3, SMTP

User Authentication Local Database, RADIUS, POP3 Local Database, RADIUS, POP3, LDAP

Anti-Virus Engine 1(Clam) 2(Clam & Sophos)

Action of Virus MailForward and Store in quarantine

Virus Mail Retrieved / Search -

FTP/HTTP Outbound Anti-Virus

Alert by Email

Action of Spam MailForward and Store in quarantine

Spam Mail Retrieved / Search -

Mail Report -

Spam or Ham Mail Training System

Others QoS Max. Bandwidth 50 100

WAN Load Balancing Outbound Outbound / Inbound

Mail Account -

Mail Notice -

High Availability -

Event Log and Alarm

Syslog Server Support

Accounting Report

Statistic WAN & Policy WAN & Policy

UTM Content Security Gateway

t +[52] [55] 24.87.30.00 f +[52] [55] 53.70.97.90 m [email protected]

Page 8: Network Security

Business Process Solutions

key Business Process Solutions S.A. de C.V.Cerro de las Campanas No. 3, Int. 520Col. San Andrés Atenco, Tlalnepantla Estado de México, C.P. 54040+[52] [55] 24.87.30.00+[52] [55] 53.70.97.90www.keybps.com

d

tfw