I-DCFW-1800 uthotho lwe-firewall elandelayo

I-DCN elandelayo Generation Firewall (i-NGFW) ibonelela ngokubonakalayo okugcweleyo kunye nembumba kunye nokulawulwa kwezicelo. Ingachonga kwaye ithintele izoyikiso ezinokubakho ezinxulunyaniswa nokusetyenziswa komngcipheko omkhulu ngelixa ibonelela ngolawulo olusekwe kumgaqo-nkqubo kwizicelo, abasebenzisi, kunye namaqela abasebenzisi. Imigaqo-nkqubo inokuchazwa ukuba isiqinisekiso somda we-bandwidth kwizicelo ezibaluleke kakhulu ngelixa kuthintela okanye kuthintela usetyenziso olungagunyaziswanga okanye olubi. I-DCN NGFW ibandakanya ukhuseleko olubanzi lwenethiwekhi kunye neempawu eziphambili zomlilo, ibonelela ngokusebenza okuphezulu, ukusebenza ngokugqwesileyo kwamandla, kunye nokukwazi ukuthintela ukoyikisa.

Iimpawu eziphambili kunye nezoPhambili

Ukuchongwa kwesicelo seGranular kunye noLawulo

I-DCFW-1800E NGFW ibonelela ngolawulo olucocekileyo lokusetyenziswa kwewebhu ngaphandle kokubheka, umthetho olandelwayo, okanye isenzo sokuphepha. Ingachonga kwaye ithintele izoyikiso ezinokubakho ezinxulunyaniswa nokusetyenziswa komngcipheko omkhulu ngelixa ibonelela ngolawulo olusekwe kumgaqo-nkqubo kwizicelo, abasebenzisi, kunye namaqela abasebenzisi.Ukhuseleko Imigaqo-nkqubo inokuchazwa ukuba isiqinisekiso somda we-bandwidth kwizicelo ezibaluleke kakhulu ngelixa kuthintela okanye kuthintela usetyenziso olungagunyaziswanga okanye olubi.

Lawula ukuKhangela okuKhuselekileyo kunye nokuThintela

I-DCFW-1800E NGFW ibonelela ngokhuseleko lwexesha lokwenyani kwizicelo ezivela kuhlaselo lwenethiwekhi kubandakanya ii-virus, i-spyware, iintshulube, i-botnets, i-ARP spoofing, i-DoS / DDoS, iTrojans, i-buffer overflows, kunye ne-SQL injections. Ibandakanya injini yokubumbana eyoyikisayo eyoyikekayo ekwabelana ngeenkcukacha zepakethi ngeenjini ezininzi zokukhusela (i-AD, i-IPS, ukuhluza i-URL, iAnti-Virus, njl.

Iinkonzo zenethiwekhi

• Ukuhamba ngamandla (OSPF, BGP, RIPv2)
• Ukuhamba ngokuqinileyo kunye noMgaqo-nkqubo
• Indlela elawulwa sisicelo
• I-DHCP eyakhelwe-ngaphakathi, i-NTP, iserver ye-DNS, kunye nommeli we-DNS
• Imowudi yempompo-idibanisa kwizibuko le-SPAN
• Iindlela zonxibelelwano: isniffer, izibuko elihlanganisiweyo, ukubuyela umva, i-VLANS (802.1Q kunye neTrunking)
• Ukutshintsha kwe-L2 / L3 kunye nokuhamba
• Ucingo lwenyani (uLaleko 1) ukuthunyelwa ngokucacileyo emgceni

I-firewall

• Iindlela zokusebenza: I-NAT / indlela, elubala (ibhulorho), kunye nemowudi edibeneyo
• Izinto zomgaqo-nkqubo: zichazwe kwangaphambili, isiko, kunye namaqela ezinto
• Umgaqo-nkqubo wokhuselo osekwe kwisicelo, indima, kunye nendawo ekuyo
• Inqanaba lesicelo seendlela kunye nenkxaso yeseshoni: MSRCP, PPTP, RAS, RSH, SIP, FTP, TFTP, HTTP, DCE / RPC, DNS-TCP, DNS-UDP, H. 245 0, H.
• Inkxaso ye-NAT kunye ne-ALG: NAT46, NAT64, NAT444, SNAT, DNAT, PAT, Cone NAT, STUN
• Ukucwangciswa kwe-NAT: umgaqo-nkqubo ngamnye kunye netafile ye-NAT esembindini
• I-VoIP: I-SIP / H.323 / i-SCCP NAT enqamlezileyo, i-RTP pin holing
• Umbono wolawulo lomgaqo-nkqubo wehlabathi
• Umgaqo-nkqubo wokhuselo wokuhlolwa kwemfuno
• Iishedyuli: ixesha elinye kunye nokuphindaphinda

Ukuthintela ukungenelela

Iprotocol yokufumanisa okungalunganga, ukufunyanwa okusekwe kumgangatho, ukusayinwa kwesiko, incwadana, ukutyhala okuzenzekelayo okanye ukutsala uhlaziyo lomsayino, intyilalwazi edibeneyo

• Izenzo ze-IPS: okungagqibekanga, ukubeka iliso, ukuvimba, ukusetha kwakhona (abahlaseli be-IP okanye i-IP yexhoba, i-interface engenayo) kunye nexesha lokuphela
• Ukukhethwa kokungena kwepakethi
• Isihluzi esisekwe ekukhetheni: ubungqongqo, ithagethi, i-OS, usetyenziso okanye umthetho olandelwayo
• Ukuxolelwa kwi-IP kwizityikityo ezithile ze-IPS
• Imowudi ye-IDS sniffer
• I-IPv4 kunye ne-IPv6 esekwe kumgangatho okhuselweyo we-DoS ngokukhuselwa komqobo ngokuchasene ne-TCP Syn Flood, TCP / UDP / SCTP port scan, ICMP sweep, TCP / UDP / SCIP / ICMP flood flood (source / destination)
• Ukudlula okusebenzayo ngokudlula kwindawo yokudibana
• Ukumiselwa kwangaphambili kokuthintela

Intsholongwane

Isikhokelo, ukutyhala okuzenzekelayo okanye ukutsala uhlaziyo lomsayino

I-Antivirus esekwe kumlambo: Iiprotokholi zibandakanya i-HTTP, i-SMTP, i-POP3, i-IMAP, i-FTP / i-SFTP

• Ukucofa intsholongwane kwifayile

Uhlaselo loKhuselo

• Inkqubo yokuzikhusela engaqhelekanga

I-Anti-DoS / DDoS, kubandakanya ne-SYN Flood, kunye ne-DNS Query Flood defense

• Ukuzikhusela kuhlaselo lwe-ARP

Ukucoca i-URL

Uvavanyo lokucoca kwiwebhu olusekwe kumanzi

Ukucoca ngesandla ukucoca okusekwe kwi-URL, umxholo wewebhu kunye nesihloko se-MIME

Ukucoca i-Dynamic yewebhu ngesiseko sedatha esisekwe kwilifu lokwenyani: ngaphezulu kwe-140 yezigidi ze-URL ezineendidi ezingama-64 (ezisi-8 zazo zinxulumene nokhuseleko)

Izinto ezongezelelweyo zokucoca kwiwebhu:

-Coca i-Java Applet, i-ActiveX, okanye ikuki

-Bhloka iposti yeHTTP

-Log yokukhangela amagama aphambili

-Ukukhululwa ukuskena unxibelelwano olufihliweyo kwiindidi ezithile zabucala

Ukucoca iprofayile yeWebhu: kuvumela umlawuli ukuba abele okwethutyana iiprofayile kumsebenzisi / kwiqela / kwi-IP

Isihluzi seWebhu siziindidi zengingqi kunye nenqanaba lokudlula ngaphezulu

Udumo lwe-IP

Umncedisi we-IP webnetnet uvimba ngeenkcukacha ze-IP zehlabathi jikelele

Ukuchithwa kwe-SSL

• Ukuchongwa kwesicelo se-SSL efihliweyo

• Uncedo lwe-IPS ye-SSL efihliweyo yezithuthi

• Uncedo lwe-AV lwendlela efihliweyo ye-SSL

Isihluzi se-URL soguqulelo oluntsonkothileyo lwe-SSL

• I-SSL egunyazisiweyo yokugcwala kwezithuthi

• Imowudi yokhuphelo lwommeleli we-SSL

Isazisi sokugqibela

• Inkxaso yokuchonga indawo yokuphela ye-IP, ubuninzi bokuphela, ixesha elikwi-intanethi, ixesha elingaphandle komgca, kunye nexesha elikwi-intanethi

• Xhasa iinkqubo zokusebenza ezi-2

Umbuzo wenkxaso esekwe kubungakanani be-IP kunye nendawo yokuphela

Ulawulo lokuGqithisela iFayile

• Ulawulo lokuhambisa ifayile ngokusekwe kwigama lefayile, uhlobo, kunye nobungakanani

Ukuchongwa komgaqo wefayile, kubandakanya i-HTTP, i-HTTPS, i-FTP, i-SMTP, i-POP3, kunye neenkqubo ze-SMB

• Ukutyikitywa kwefayile kunye nokuchongwa kwesimamva kwiifayile ezingaphezu kwe-100

Ulawulo lwesicelo

• Ngaphezulu kwe-3,000 yezicelo ezinokuhluzwa ngegama, udidi, icandelo, iteknoloji, kunye nomngcipheko

Isicelo ngasinye siqulathe inkcazo, izinto ezinobungozi, ukuxhomekeka, amazibuko aqhelekileyo asetyenzisiweyo, kunye nee-URLs zesalathiso esongezelelweyo

• Iintshukumo: ibhlokhi, seta kwakhona iseshoni, ukubeka iliso, ukubumba kwezithuthi

• Chonga kwaye ulawule usetyenziso lwamafu kwilifu

• Ukubonelela ngokubekwa kweliso okunemilinganiselo emininzi kunye neenkcukacha zamanani ngokusetyenziswa kwelifu, kubandakanya icandelo lomngcipheko kunye neempawu

Umgangatho weNkonzo (QoS)

• Amanqwanqwa aphezulu e-bandwidth okanye i-IP / yomsebenzisi

Ulwabiwo lwetonela olusekwe kwindawo yokhuseleko, ujongano, idilesi, iqela lomsebenzisi / lomsebenzisi, iqela leserver / leseva, iqela lesicelo / leapp, i-TOS, i-VLAN

Ibhendi eyabelwe ixesha, ukubaluleka, okanye ulwabiwo olulinganayo lomda wendlela

Uhlobo lweNkonzo (i-TOS) kunye neNkxaso yeeNkonzo ezahlukeneyo (iDigServ) inkxaso

• Ulwabiwo olubekwe phambili kububanzi bebhendi eshiyekileyo

• Ubuninzi bonxibelelwano ngaxeshanye nge-IP nganye

Ukulinganisa umthwalo weServer

• I-hashing enobunzima, ubunzima bomdibaniso obuncinci, kunye nomlinganiso weerobin

• Ukukhuselwa kweseshoni, ukuqhubeka kweseshoni, kunye nokubeka esweni imeko yeseshoni

• Ukuhlolwa kwempilo yeServer, ukubeka esweni iseshoni, kunye nokukhuselwa kweseshoni

Ikhonkco yokuLungelelanisa umthwalo

• Ikhonkco elinamacala amabini okulinganisa umthwalo

Ukulinganisa umthwalo wokunxibelelana nokuphuma kubandakanya ukuhanjiswa komgaqo-nkqubo, i-ECMP kunye nobunzima, umzila we-ISP kunye nokuchongwa okunamandla

• Ukulinganisa umthwalo wokungena kwikhonkco kuxhasa Smart DNS kunye nokuchongwa okunamandla

Ukutshintsha kwekhonkco ngokuzenzekelayo kususelwa kububanzi bebhendi, i-latency, i-jitter, unxibelelwano, usetyenziso, njl.

• Qhagamshela ukuhlolwa kwezempilo kunye ne-ARP, i-PING ne-DNS

I-VPN

• IPSec VPN

Imo ye-IPSEC yesiGaba soku-1: indlela enobundlongondlongo kunye nokukhuselwa kwe-ID

Ukhetho lokwamkelwa koontanga: nasiphi na isazisi, isazisi esithile, isazisi kwiqela lokucofa lomsebenzisi

-Kuxhasa i-IKEv1 kunye ne-IKEv2 (RFC 4306)

Indlela yokuNgqinisisa: isatifikethi kunye nesitshixo sokwabelana kwangaphambili

-Imowudi yenkxaso yemowudi ye-IKE (njengeseva okanye umxhasi)

-I-DHCP ngaphezulu kwe-IPSEC

-Ukucwangciswa kokuphela kwesitshixo sokufihla i-IKE, Ukuphela kokuhamba rhoqo kwe-NAT

-Isigaba 1 / Isigaba 2 Isindululo sokubethela: DES, 3DES, AES128, AES192, AES256

Isigaba soku-1 / Isigaba sesi-2 sokuqinisekiswa kwesindululo: MD5, SHA1, SHA256, SHA384, SHA512

-Isigaba 1 / Isigaba 2 Inkxaso ye-Diffie-Hellman: 1,2,5

-XAuth njengemowudi yeseva kunye nabasebenzisi bokucofa

Ukufunyanwa koontanga abafileyo

Ukudlala kwakhona

-Ukuzigcina uphila ngokwesiGaba 2 SA

• Inkxaso ye-IPSEC VPN yommandla: ivumela ukungena kwe-SSL yesiko elininzi elinxulumene namaqela abasebenzisi (iindlela ze-URL, uyilo)

• I-IPSEC VPN iinketho zoqwalaselo: indlela esekwe kwindlela okanye esekwe kumgaqo-nkqubo

Iindlela ze-IPSEC ze-VPN zokuhambisa: isango elingena kwisango, i-mesh epheleleyo, i-hub-and-spoke, itonela engafunekiyo, ukupheliswa kweVPN kwimowudi ebonakalayo

Ukungena ngexesha elinye kuthintela ukungena ngokufanayo ngegama elifanayo

• SSL portal concurrent abasebenzisi ngaxeshanye umda

Imodyuli yokudlulisa i-SSL ye-VPN ibethela idatha yomthengi kwaye ithumele idatha kwiserver yesicelo

• Ixhasa abathengi abasebenzisa i-iOS, i-Android, kunye neWindows XP / Vista kubandakanya ii-64-bit zeWindows OS

Ukujonga ingqibelelo yomamkeli kunye nokujonga i-OS ngaphambi konxibelelwano lwe-SSL

Ukutshekishwa komgcini we-MAC kwisango ngalinye

Inketho yokucoca i-cache ngaphambi kokuphela kweseshoni ye-SSL VPN

Umxhasi we-L2TP kunye nemowudi yeseva, i-L2TP ngaphezulu kwe-IPSEC, kunye ne-GRE ngaphezulu kwe-IPSEC

• Jonga ulawule i-IPSEC kunye ne-SSL uqhagamshelo lwe-VPN

• IPNPVPN

IPv6

• Ulawulo lwe-IPv6, IPv6 yokungena, kunye ne-HA

• IPv6 tunneling, DNS64 / NAT64, njl

Inkqubo ye-IPv6 yendlela, indlela emileyo, indlela yomgaqo-nkqubo, i-ISIS, i-RIPng, i-OSPFv3, kunye ne-BGP4 +

• I-IPS, ukuchongwa kwesicelo, ulawulo lokufikelela, ukukhuselwa kokuhlaselwa kwe-ND

VSYS

• Ulwabiwo lwezixhobo zenkqubo kwi-VSYS nganye

• Ukubonwa kweCPU

• I-VSYS engeyiyo ingcambu exhasa i-firewall, i-IPSec VPN, i-SSL VPN, i-IPS, ucoco lwe-URL

• Ukujonga i-VSYS kunye neenkcukacha manani

Ukufumaneka okuphezulu

• Iindawo eziphakathi ezingafunekiyo zokubetha kwentliziyo

• Iyasebenza / Iyasebenza kwaye Iyasebenza / Iphasiphothi

Ungqamaniso lweseshoni ezimeleyo

• HA ujongano lolawulo olugciniweyo

• Ifailover:

-Ubeko, ukujonga ilinki yendawo kunye nokude

-Ifailover yelizwe

- Isefaver yesibini-yesibini

-Isaziso sokusilela

• Iinketho zokuhambisa:

- HA ngokudibanisa ikhonkco

- Umnatha opheleleyo we-HA

-Ukuhlakazeka ngokwendawo

Isazisi soMsebenzisi nesiXhobo

• Iziko ledatha labasebenzisi bengingqi

Ukuqinisekiswa komsebenzisi okude: TACACS +, LDAP, Radius, Active

Ukutyikitya okukodwa: Windows AD

Ukuqinisekiswa kwezinto ezi-2: Inkxaso yomntu wesithathu, umncedisi wethokheni ehlanganisiweyo kunye nomzimba kunye neSMS

• Imigaqo-nkqubo esekwe kubasebenzisi nakwizixhobo

Ungqamaniso lweqela lomsebenzisi ngokusekwe kwi-AD nakwi-LDAP

Inkxaso ye-802.1X, iProxy Proxy

Ulawulo

Ukufikelela kulawulo: HTTP / HTTPS, SSH, umnxeba, ikhonsoli

• Abaphathi abaphambili: UMphathi woKhuseleko weDCN, ii-API zenkonzo yewebhu

Uhlanganiso lwenkqubo: SNMP, Syslog, intsebenziswano yomanyano

Ukuhanjiswa ngokukhawuleza: Ukufakwa ngokuzenzekelayo kwe-USB, ukwenziwa kwesikripthi sasekhaya nakwindawo ekude

Imeko yeDashboard yexesha langempela elinamandla kunye nokujongwa kokujongwa kwewijethi

• Inkxaso kulwimi: isiNgesi

Izigodo kunye neNgxelo

• Izixhobo zokuloga: imemori yendawo kunye nokugcinwa (ukuba kukho), iiseva ezininzi zeSyslog

• Ukuloga ngokufihlakeleyo kunye nokulayishwa kwebatch okucwangcisiweyo

Ukuloga okuthembekileyo usebenzisa ukhetho lwe-TCP (RFC 3195)

• Iinkcukacha zendlela ezikhutshiweyo: ukuhanjiswa, ukuphulwa kweseshoni, ukugcwala kwabantu, iipakethi ezingasebenziyo, i-URL, njl.

• Iigodo ezibanzi zomsitho: inkqubo kunye nophicotho-zincwadi zomsebenzi wolawulo, ukuhambisa kunye nenethiwekhi, iVPN, ukungqinisisa komsebenzisi

• I-IP kunye nenketho yokusombulula igama lezibuko

• Ifomathi yelog emfutshane

• Iingxelo ezintathu ezichazwe kwangaphambili: Ukhuseleko, ukuhamba, kunye nenethiwekhi

Ingxelo echazwe ngumsebenzisi

• Iingxelo zingathunyelwa ngaphandle ngePDF nge-imeyile kunye ne-FTP

Ukucaciswa

Isicelo esiqhelekileyo
Kumashishini kunye nabanikezeli beenkonzo, i-DCFW-1800E NGFW inokulawula yonke imingcipheko yokhuseleko kunye ne-IPS yohlobo olugqwesileyo, ukuhlolwa kwe-SSL, kunye nokhuselo lokhuselo. Uchungechunge lweDCFW-1800E lunokusasazwa kumda weshishini, kwiziko ledatha elihlanganisiweyo, nakumacandelo angaphakathi. Unxibelelwano olunesantya esiphezulu ezininzi, uxinano oluphezulu lwezibuko, ukusebenza ngokukuko kokhuseleko, kunye nokuhamba okuphezulu kolu ngcelele kugcina inethiwekhi yakho ixhunyiwe kwaye ikhuselekile.

Ulwazi loMyalelo