Alcatel Security Management Server (SMS) Release 9.4 Manual de usuario Pagina 2

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 6
  • Tabla de contenidos
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 1
Alcatel-Lucent VPN Firewall Brick 1200 Security Appliance | Data Sheet2
Benefits
• Higher performance – Delivers an
enhanced user experience with up
to 5.9 Gb/s clear text and 1.8 Gb/s
3DES and AES IPSec VPN throughput,
combined with best-in-class
bandwidth management that
implements customer-level, user-level
and server-level QoS control
Low price/performance Outstanding
security and throughput for less than
the per-Mb/s price of major competitors
• Low cost of ownership – One
configuration supports multiple
IP services with no additional or
recurring licensing fees
• Flexible deployment – Options
include premises or network-based
services with shared or dedicated
hardware environments
• Economical growth path – Seamless
migration to advanced, VoIP, QoS
and VPN security services with no
added infrastructure investments
• Plug-and-play interoperability –
Eliminates the need for costly network
reconfigurations or on-site support
• Assured cost-effective business
continuity – Take advantage of
low-priced encryption performance
and native high availability while
maintaining carrier-class reliability
for today’s data-heavy business
applications
• Centralized, scalable, carrier-class
management – Centrally manage up
to 20,000 VPN Firewall Brick security
appliances and 500,000 Alcatel-Lucent
IPSec Client users (or third-party
IPSec clients) with Alcatel-Lucent
SMS Release 9.2 or later
Applications
• Advanced security services
• VPN services for site-to-site and
remote access
• Bandwidth management capabilities
• VoIP security
• Secure data center Web and
application hosting
• Storage network security
• Mobile data security
• Packet data gateway and packet
data interworking functions for
fixed-mobile convergence, Wi-Fi
®
VPN and VoIP/data security
• Managed security services
• Unlicensed mobile access (UMA)
and IP multimedia subsystem (IMS)
security
Technical specifications
Processor/memory
3 GHz processor with 2 GB
of RAM for VPN Firewall Brick
1200 HS AC and DC models
2.2 GHz processor with 2 GB
of RAM for VPN Firewall Brick
1200 AC Model
LAN/VPN interfaces
VPN Firewall Brick 1200 HS AC
and DC models
14 10/100/1000 copper ports
6 GigE mini-GBIC SFP ports
VPN EAC
VPN Firewall Brick 1200 basic model
8 10/100/1000 copper ports
2 GigE mini-GBIC SFP ports
VPN EAC
Other ports
SVGA video, DB9 RS-232 serial
console, 4 X USB
Performance
VPN Firewall Brick 1200 HS AC
or HS DC
Concurrent sessions – 4,657,000
New sessions/second – 45,000
Rules30,000 (shared among all
virtual firewalls)
Maximum clear text throughput –
5.9 Gb/s (1460-byte UDP packets)
Maximum clear text throughput –
2,190,000 pps (78-byte UDP
packets)
Maximum 3DES and AES 256
throughput with hardware
encryption acceleration – 1.8 Gb/s
(1460-byte UDP packets)
Maximum 3DES and AES 256
throughput with hardware
encryption acceleration –
580,000 pps (78-byte UDP
packets)
VPN Firewall Brick 1200 basic
Concurrent sessions – 2,616,000
New sessions/second – 30,000
Rules – 30,000 (shared among all
virtual firewalls)
Maximum clear text throughput –
4.5 Gb/s (1460-byte UDP packets)
Maximum clear text throughput –
2,016,000 pps (78-byte UDP
packets)
Maximum 3DES and AES 256
throughput with hardware
encryption – 1.5 Gb/s
(1460-byte UDP packets)
Maximum 3DES and AES 256
throughput with hardware
encryption – 406,000 pps
(78-byte UDP packets)
Virtualization
Maximum number of virtual
firewalls – 1100 (VPN Firewall
Brick 1200 HS AC or DC)
Maximum number of virtual
firewalls – 500 (VPN Firewall
Brick 1200 basic)
Number of VLANs supported 4094
VLAN domains – up to 16 per
VLAN trunk
VPN Firewall Brick 1200 parti-
tions – allows for virtualization
of customer IP address range,
including support for overlapping
IP addresses
Modes of operation
Bridging and/or routing on
all interfaces
All features supported with bridging
IP routing with static routes
802.1Q VLAN tagging supported
inbound and outbound on any
combination of ports
Layer-2 VLAN bridging
Network address translation (NAT)
Port address translation (PAT)
Policy-based NAT and PAT (per rule)
Supports virtual IP addresses for
both address translation and VPN
tunnel endpoints
Point-to-point Protocol over
Ethernet (PPPoE) and Dynamic
Host Configuration Protocol
(DHCP)-assignable interface/VLAN
addresses
Redundant DHCP relay capabilities
Dynamic registration of mobile
VPN Firewall Brick 1200 security
appliance address for centralized
remote management
Vista de pagina 1
1 2 3 4 5 6

Comentarios a estos manuales

Sin comentarios