Virtual Security Gateway Serie

Transcription

1 Produktinformationen Virtual Security Gateway Serie Haben Sie Fragen oder wünschen eine Beratung, eine kostenlose Teststellung oder weitere Informationen? Tel.: Mobil: XNC GmbH Auf der Kaiserbitz 3 D Köln Amtsgericht Köln HRB Geschäftsführer Frank Bergknecht

2 Clavister Virtual Security Gateway Series Product Sheet Protect Virtual Servers Runs within the Virtual Environments Secure Inter-Communication Achieve Auditing and Regulatory Compliance No Security Policy Compromises for Virtual Environments Highly Scalable Lower CAPEX Simplified Administration and Maintenance Green IT Highly Resource Optimized Optimized for the Unique Conditions found only in Virtual Environments Introducing Clavister Virtual Security Gateway More and more organizations are focusing on virtualization and reaping the benefits of cost reduction, higher utilization of hardware, less power consumption and an optimized environment, not to mentioned benefits such as ease of deployment and improved service availability. But there is one thing that does not come for free with virtualization and that is security. Virtualization puts new and demanding requirements on security, and therefore requires a virtualized security solution especially designed for virtual environments Clavister is proud to introduce a leading virtual security solution for Data Centers/Hosting Providers, Telecom Operators and leading organizations. The Clavister Virtual Security Gateway Series joins the rank of the award-winning Clavister Security Gateway Series offering the same powerful Unified Treat Management (UTM) services as its hardware appliance sibling. However, the main difference is that the Clavister Virtual Security Gateway Series runs inside the virtual environment as an integrated part and can therefore be managed as any other virtualized applications. Security in virtualized environments must be easy to configure, maintain and deploy and requires special considerations regarding resource utilization and cater for the exceptional dynamic nature of virtualized environments where virtual machines are routinely moved around. This is especially true for Managed Security Service Providers (MSSP) and Data Centers who need an effective way to provision new services to customers. Virtualization Market The virtualization market has experience a strong growth rate in the last couple of years. Yankee Group stated in August 2007 that 9 of 10 enterprises have virtualization by 2007 and Gartner predicted in April 2008 that virtualization would be part of nearly every aspect of IT by This scenario shows a clear trend; more and more organizations move to virtualized environments. This creates new and challenging security threats in the virtualized environment that needs to be addressed. So far, the virtualization market has focused its effort on deployment, maintenance and provisioning of virtual servers. With the introduction of Clavister Virtual Security Gateway, network security professionals now have the right solution to provision security in a virtual environment, without sacrificing any functionality. we are network security

3 Management Options Clavister offers you a wide range of management options to manage your Clavister Virtual Security Gateway Series. Regardless if you choose a centralized management solution or use the built-in web-based management solution, all Clavister Security Gateways Series products and services are managed in the same way. Clavister InControl Clavister InControl offers a comprehensive centralized management solution that will assist and help you perform daily tasks faster, easier and more streamlined. Its intuitive user interface and support for task-driven workflow management will guide you through complex and repetitive tasks, thus alleviating the burden of managing large installations. Challenges in Virtualized Network Security Traditional network security relies on physical segmentation of networks and servers, where physical firewalls or security gateways form effective filters between different servers and applications. In a virtual environment, however, a large amount of servers may be deployed within the boundaries of a virtual infrastructure. As a result, communication between servers does not necessarily need to leave the virtual infrastructure and pass through the external physical security systems. Using traditional, non-virtualized security solutions in conjunction with a virtualized environment in many ways defeats the benefits with virtualization, such as cost-savings and ease of administration. It is clear that organizations need to adopt a virtualized security solution especially designed for virtual infrastructures, especially since the virtual environment is a very dynamic environment, where servers are added, removed and change place frequently. This means that the traditional security solution cannot offer the same level of security as security solutions which operate within the virtual environment. Clavister Web Management Clavister Web Management is an easy to use Web-based administration interface, which greatly simplifies product deployment. Command-Line Interface All Clavister Security Gateway Series products also support a comprehensive command-line interface. It is a powerful tool for anyone who wants to build custom administration interfaces. This new release allows us to add state-of-the-art virtual security appliance offerings to our product portfolio. Kurt Glazemakers, VP Engineering European Business Unit, Terremark Worldwide, Inc. Virtualization, as with any emerging technology, will be the target of new security threats. Neil MacDonald, Vice President and Gartner Fellow Clavister offers one of the most compelling virtual security solutions for virtualized environments. Jorina van Rensburg, CEO Condyn, South Africa Security in virtualized environments must be easy to configure, maintain and deploy and requires special considerations regarding resource utilization. Given the dynamic nature of the virtualized environment, where virtualized applications can be restarted and moved, it is mandatory that the virtualized security solution operates within the virtualized environment. This is also a requirement for enabling protection between virtualized servers. Without securing the inter-communication between virtualized applications, it is not possible to achieve regulatory compliance, which is often a requirement for many solutions. This is especially true for Managed Security Service Providers (MSSP) and Data Centers who need an effective way to provision new services to customers. Clavister, as a VMware Technology Alliance Partner, has worked hard to ensure that the Clavister Virtual Security Gateway Series is uniquely positioned as being very efficient on resource utilization and easy to manage in a virtual environment. Resource Management Virtualization is about managing your resources more efficiently. Dedicated servers may not utilize all its resource the most optimal way, whereas it is possible to consolidate many servers in a virtual environment and get the best possible resource utilization. The requirement for a virtual network security product must therefore be very efficient and require a minimum of resource, such as small footprint and memory requirement without sacrificing the level of security provided. Copyright Clavister AB. All rights reserved.

4 Clavister Security Gateway Clavister Virtual Security Gateway Series comes with all the features of the Clavister Security Gateway Series, including: Stateful Firewall Supports both IPv4 and IPv6 Deep Packet Inspection IPsec and SSL VPN Intrusion Detection & Prevention (IDP) Web Content Filtering Anti-Virus Anti-Spam SIP/VoIP Support Virtualization Technologies Gigabit Traffic Management User Authentication Server Load Balancing Route Load Balancing High Availability Clustering For more information about Clavister Security Gateway, please visit: Clavister Virtual Security Gateway - Resource Efficient Clavister Virtual Security Gateway requires just 64 Megabyte of RAM and less than 32 Megabyte of hard disk space, which makes it one of the most efficient virtual network security products on the market and the ideal choice for Data Centers and Managed Security Service Providers (MSSP) who wish to provide security services to hundreds or thousands of customers. Green IT The promise of a greener IT environment and a huge reduction in energy cost can be achieved with right-sizing your IT environment and dynamic management of computer capacity across a pool of servers. Energy costs saving by 80 percent is not uncommon in virtualized environments. This makes the Clavister Virtual Security the obvious choice for customers who want to save energy and the environment. VMware Technology Alliance Partner Clavister is a VMware Technology Alliance Partner and we are working closely with VMware to ensure the highest possible technology match for Clavister Virtual Security Gateway. Clavister Virtual Security Gateway The new Clavister Virtual Security Gateway Series requires Clavister CorePlus 9.10 or higher and VMware ESXi 3 or higher. "Clavister was the sole Security Gateway provider flexible enough to deal with our diverse IT environment. Furthermore, they met our extremely high reliability standards." Uwe Fischer, CIO E.ON C&R Features and Benefits Protect Virtual Servers. You can easily separate virtual machines from each other to eliminate the possibility of an intruder gaining easy access to several machines. Secure Inter-Communication. Utilize VPN encryption to secure communication between virtual machines. Achieve Auditing and Regulatory Compliance. Since the Clavister Virtual Security Gateway is inside the virtual environment, security auditing can be achieved and thereby meeting regulatory compliance requirements. No Security Policy Compromises for Virtual Environments. Share your standard set of policies among your hardware appliances and virtual appliances. This makes it much easier to enforce a cohesive security policy across all your Clavister network security gateways. Scalability. Administrators can now extend security by simply deploying new Clavister Virtual Security Gateways as they go. This could be done simply by drag-and-drop or scripted using the built-in Command-Line Interface (CLI). Lower CAPEX. Virtualization enables new business models where CAPEX is minimized. Simplified Administration and Maintenance. Security components inherit all manageability features from the virtual environment, such as fail-over, provisioning, etc. This gives the solution a much easier administration and maintenance. Minimized Downtime. Less hardware combined with highly efficient disaster recovery and redundancy tools, such as VMmotion from VMware, reduces downtime and improves the overall service performance of the security solution. Copyright Clavister AB. All rights reserved.

5 Clavister Virtual Security Gateway Series Specifications Performance Clavister VSG Clavister VSG Pro Firewall Performance (Mbps)* 1,000 10,000 VPN Performance (Mbps)* 1,000 4,000 Concurrent Connections* 64,000 1,000,000 Concurrent VPN Tunnels (SSL/IPsec)* 500/500 2,000/2,000 Ethernet Interfaces Up to 3 Up to 10 Virtual Interfaces (VLAN) Virtual Routers Form Factor Supported Virtual Platform Features Mode of operations Routing Application Layer Gateways User Authentication Firewall High Availability Virtual Private Network (IPsec) IPv6 Support IP Address Assignment Log Monitoring Traffic Management Intrusion Detection and Prevention Virtual VMware ESXi Layer 2 Mode (Transparent/Route Mode) Policy-Based NAT/PAT Policy-Based Server Load Balancing Virtual IP Static Routing/Source-Based Routing Policy-Based Routing (PBR) OSPF/OSPF over VPN Multicast IGMP GRE FTP/TFTP SIP/H.323 with NAT/SAT Support HTTP SMTP/POP3 LDAP Authentication (Multiple) External RADIUS Database servers RADIUS Accounting CHAP PAP Web-Based Authentication Configurable HTTP/HTTPS Front-End xauth VPN Authentication MAC Address Authentication Stateful Firewall Deep Packet Inspection Network Attack Detection/Prevention DoS and DDoS Detection/Prevention TCP Reassembly Firewall and VPN State Synchronization Device Failure Detection Dead Link Gateway and Interface Detection Route/Interface Failover Average Failover Time (< 800 ms) Encryption (AES, 3DES, DES, Blowfish, CAST-128) Authentication (SHA-1, MD5) IKE Modes (Main, Aggressive) Perfect Forward Secrecy/DH Groups (1, 2, 5) X.509 Certificates Pre-Shared Keys Self-Signed Certificates IPsec NAT Traversal (NAT-T) IPsec Tunnel Keep-Alive L2TP Client L2TP Server (LNS) PPTP Client PPTP Server (PNS) VPN Policy Selection Through (Firewall Rule Set, Routing, PBR) Ethernet and VLAN interfaces (Static IPv6 Address Assignment) IP Rules (ALLOW, DROP and REJECT) Neighbor Discovery IPv6 Routing/Policy-Based Routing ICMPv6 Static DHCP Client (Server & Relay) Proxy ARP PPPoE Syslog Support Log Export (CSV) 1 Real-Time Performance Monitoring SNMP Policy-Based Bandwidth Management Guaranteed Maximum Bandwidth Dynamic Bandwidth Balancing Priority Levels Stateful Pattern Matching Protocol/Rate Anomaly Insertion/Evasion Protection Dynamic IP Blacklisting Automatic Signature Updates Stateful Signatures Component-Based Signatures Application Blocking Security Management Clavister InControl Support 1 Clavister Web Management Local Console (RS232/SSH) Command-Line Remote Management Remote Fail-Safe Operations Virtual Private Network (TLS/SSL VPN) Content Security Warranty One-Time Client Installation Browser Independent VPN Policy Selection Through Firewall Rule Set Routing PBR Web Content Filtering - Audit/Blocking Mode Classification Categories (32) URL Whitelisting/Blacklisting Anti-Virus - Stream-Based Signatures Automated Signature Updates Per Devices Signature Service Anti-Spam - DNS Blacklisting The Clavister VSG Series come with ninety (90) days Software maintenance covering all major and minor software releases counting from the earlier date of Product registration or ninety (90) days following shipment. * Specification is hardware (host) dependent. NOTE: Within the virtual environment, Clavister VSG does not put any restriction on performance. The performance numbers given reflects the performance at interface level only. About Clavister For over a decade, Clavister has been delivering leading network security solutions, providing commercial advantage to businesses worldwide. The Clavister family of Carrier Telecom Security Systems, unified threat management (UTM) appliances and remote access solutions provide innovative and flexible network security with world-class management and control. Clavister is a recognized pioneer in virtualization and cloud security. This compliments its portfolio of hardware appliances delivering customers the ultimate choice of network security products. Clavister products are backed by Clavister s award-winning support, maintenance and training program. To learn more, visit Where to buy? Sales Offices CID: clavister-dts-clavister-vsg-series (2011/11) we are network security Clavister AB, Sjögatan 6 J, SE Örnsköldsvik, Sweden Phone: +46 (0) Fax: +46 (0) Web: Copyright Clavister AB. All rights reserved. The Clavister logo and all Clavister product names and slogans are trademarks or registered trademarks of Clavister AB. Other product names and/or slogans mentioned herein may be trademarks or registered trademarks of their respective companies. Information in this document is subject to change without prior notification.