Huawei Eudemon1000E-X series Firewall. Eudemon 1000E-X Series Firewall. Huawei Technologies Co., Ltd.

Transcription

1 Eudemon 1000E-X Series Firewall Huawei Technologies Co., Ltd.

2 Product Overview With the dramatic increase in threats to networks, users are become ever more concerned by application- and service-based network security problems. As security threats such as malicious intrusions, phishing Web sites, Trojan horse programs, and P2P applications proliferate, the efficiency of enterprise networks is reduced and their security threatened. Huawei Technologies Co., Ltd. (hereafter referred to as Huawei) is dedicated to providing comprehensive network security solutions for users. Huawei organizes an industry-leading network protocol analysis team and possesses the industry s most comprehensive protocol library. These unique resources allow Huawei to offer in-depth analysis of network threats aimed at different protocols, and provides users with technical support to combat a wide range of network security problems. Developed by Huawei, the Eudemon 1000E-X series is a new-generation multi-function firewall. Delivering comprehensive advanced security functions such as Firewall,NAT,VPN, IM Control P2P Control IPS, anti-virus, URL filtering and Anti-Spam, it provides all-around security protection to safeguard the efficient running of network systems. Product Portfolio Product Feature Perfect Firewall Functions Advanced Architecture and Platform Adopting an advanced multi-core hardware architecture and multi-thread concurrent processing, the Eudemon 1000E-X series optimizes the security service processing flow, especially the processing of header packets. All these features equip the Eudemon 1000E-X series with an industry-leading firewall indicator the number of new connections per second enabling it to easily deal with mass network traffic. Moreover, the Eudemon 1000E-X series separates data decapsulation and in-depth detection, and concurrently implements multiple types of in-depth detection, considerably promoting the performance of its in-depth detection state. With ten years of successful commercial application, the mature VRP software platform furnishes the Eudemon 1000E-X series with a robust, reliable security operating system. Industry-leading Performance

3 Multi-core concurrent processing technology substantially enhances the Eudemon 1000E-X s performance allowing it to concurrently process dozens of threads. With three industry-leading performance indexes, the Eudemon 1000E-X provides an exceptional performance experience for customers. New connections per second, the key firewall performance indicator, can comfortably reach 200,000, setting a clear lead for the industry. Quickly setting up a large number of connections for network access, the Eudemon 1000E-X provides high-speed forwarding rates and low delay. And the maximum performance can up to 15Gbps.This performance advantage also enables the Eudemon 1000E-X to effectively process burst and attack traffic fully meeting customer demand for high-speed bandwidth increase. Advanced IPv6 technology Nowadays, 32-bit IPv4 addresses can no longer keep pace with the rapid development of the Internet; worse still, IPv4 itself is of low security, calling the birth of IPv6. The network transformation, however, is a gradual process. The replacement of IPv4 by IPv6 cannot be achieved in a day, and the two protocols will definitely coexist for a long time. Subsequently, the communications between IPv4 regions and IPv6 regions become an urgent challenge. Considering the current network situation, Huawei launches the Eudemon 1000E-X series firewall. This series not only supports IPv6, but also skillfully settles the coexistence of IPv4 and IPv6, which realizes the seamless communications between IPv4 regions and IPv6 regions. Super-Capacity VPN As an organization extends its service, the number of branches and employees on business trips increases, imposing more demands for encrypted data transmission. Supporting L2TP, GRE, MPLS,SSL and IPSec VPN functions, the Eudemon 1000E-X series facilitates flexible selection and configuration. Its advanced hardware architecture allows for high VPN performance and VPN tunnels, freeing users from worries about the security of encrypted data transmission. The data of various network applications, including heavy-traffic video and audio applications, can be transmitted at high speed in the encrypted tunnel, enabling users to enjoy Gbps-level encrypted data transmission. Note: The IPSec/SSL VPN function is optional. Customers can purchase related license to apply this function. Powerful DDoS Defense Protecting key network services against DDoS attacks is a vital security problem for organization-level users. With the huge number of new connections per second, the Eudemon 1000E-X series defends against DDoS attacks at speeds of up to millions of packets per second, providing effective DDoS defense for users' service systems. Based on its powerful protocol analysis capability, the Eudemon 1000E-X series accurately identifies and controls many DDoS attacks such as SYN, UDP, ICMP, and DNS floods, and CC attacks. It also identifies and defends against worm-infected traffic. By integrating Huawei s proprietary ICA, the Eudemon 1000E-X series precisely identifies DDoS traffic without affecting users' access, providing genuine security protection on complicated networks. All these confirm that the Eudemon 1000E-X series is the

4 industry s leading DDoS defense solution. Accurate P2P Control P2P traffic is a broadband killer. Disrupting service applications, it is a key concern for most organizations. In practice, controlling P2P traffic is extremely difficult due to protocol flexibility. Utilizing Huawei s powerful network protocol analysis capability, the Eudemon 1000E-X series precisely identifies up to 50 types of P2P traffic. It supports library upgrades and with each upgrade, the number of protocols that can be identified increases. In so doing, the Eudemon 1000E-X series controls the P2P traffic of abundant protocols at Kbps-level speeds. Moreover, the Eudemon 1000E-X series controls different modes of P2P traffic such as single user-based, group-based, and global control, effectively safeguarding bandwidth resources. By helping users plan network traffic, it dramatically enhances a network s application value. Leading UTM Functions IPS Intrusion Detection Using Symantec's advanced IPS detection engine, the IPS Intrusion Detection function efficiently and accurately scans network packets. Any IPS evasion and deception techniques are also accurately identified. With advanced software and hardware platforms, and a rich signature library, the Eudemon 1000E-X series unified security gateway rapidly and accurately identifies any application layer attacks mixed in with normal traffic. Symantec's global deployment of honeypot systems catches the latest attacks, worms, Trojans and other threats, instantly extracting their signatures and providing timely updates. The Eudemon 1000E-X series unified security gateway offers zero-attack defense capability. Anti-Virus Anti-Virus Using Symantec's advanced virus detection engine, an Anti-Virus function efficiently and accurately detects viruses hidden in network traffic. Advanced software and hardware platforms, and a rich Accessible Virus library provide the Eudemon 1000E-X series with unique antivirus capabilities allowing it to identify compression shelling and other techniques to evade detection. Symantec's global distribution network of analysis virus monitoring, and professional team of the virus, Eudemon 1000E-X series of unified security gateways can obtain the latest virus signatures and the latest anti-virus engines timely. Eudemon 1000E-X series unified security gateway can keep high efficiency and precise antivirus ability. URL Filtering Using an advanced matching engine, the URL filtering function greatly shortens URL match times and makes URL filtering more efficient. A huge URL classification database and powerful URL classification capabilities allow for accurate URL filtering. A flexible security policy allows

5 the URL filtering function to apply to most scenarios. Friendly, easy configuration greatly improves the URL filtering function's usability. Thanks to all these features, the Eudemon 1000E-X series unified security gateway offers powerful functionality together with ease of operation and maintenance.

6 Typical Application Typical networking diagram of the Eudemon 1000E-X Series

7 Product Specification Eudemon 1000E-X3 Eudemon 1000E-X5 Eudemon 1000E-X6 Maximum Throughput 6 Gbps 10Gbps 15 Gbps Number of New connections per Second Number of concurrent connections 100K 150K 200K 200M 300M 400M Number of Policies 30K 30K 30K L2TP/GRE/SSL/IPSec VPN Support Support Support IPSec VPN Performance 4 Gbps 5 Gbps 7 Gbps Number of IPSec VPN Tunnels Number of SSL VPN concurrent users 15K 15K 15K MPLS VPN Support Support Support Number of GTP Tunnels 200K 200K 200K IPv6 Support Support Support Number fo virtual firewalls IPS Support Support Support Anti-Virus Support Support Support URL Filtering Support Support Support Anti-Spam Support Support Support Number of Fixed Interfaces 4GE(electric) +4GE Combo 4GE(electric)+4GE Combo Number of Expansion solts 2*FIC solts 2*FIC solts 4GE(electric)+8GE(optical) +4GE Combo 2*MIC solts 6*FIC solts Dimensions (W x D x H) 1U: mm 1U: mm 3U: mm Weight 8.9KG 8.9KG 18KG Rated Voltage AC:100~240V 50/60Hz AC:100~240V 50/60Hz AC:100~240V 50/60Hz DC:-48~-60V DC:-48~-60V DC:-48~-60V Maximum Power 100 W 100W 300W MTBF years years years Ordering Information MODEL NUMBER Base System SU5M001UAH00 SU5M001UDH00 SU5M001UAH01 SU5M001UDH01 SU5M003UAH00 DESCRIPTION Eudemon 1000E X3 Standard Configuration 8GE AC Host Eudemon 1000E X3 Standard Configuration 8GE DC Host Eudemon 1000E X5 Standard Configuration 8GE AC Host Eudemon 1000E X5 Standard Configuration 8GE DC Host Eudemon 1000E X6 Standard Configuration 16GE AC Host

8 SU5M003UDH00 Eudemon 1000E X6 Standard Configuration 16GE DC Host E1000E-X Interface Modules FIC-8GE 8GE Electric Ports Interface Card SU5D0E8GFF00 8GE Optical Ports FIC Interface Card FIC-2SFP+ 2*10GE Optical Ports FIC Interface Card FIC-2SFP+&8GE 2*10GE Optical Ports+8GE Electric Ports Interface Card FIC-4GE-BYPASS 4GE Electric Ports Bypass Card SU5DF2BY Link LC/UPC Singlemode Optical Interface Bypass Protect Card SU5DF2BY Link LC/UPC Multimode Optical Interface Bypass Protect Card DMIC-2SFP+ 2*10GE Optical Ports DMIC Interface Card E1000E-X License FWES00GTPF01 GTP Function FWES005VFW01 Quantity of Virtual Firewall(5 Vsys) FWES010VFW01 Quantity of Virtual Firewall(10 Vsys) FWES025VFW01 Quantity of Virtual Firewall(25 Vsys) FWES050VFW01 Quantity of Virtual Firewall(50 Vsys) FWES100VFW01 Quantity of Virtual Firewall(100 Vsys) FWCS010VPN01 Quantity of VPN Tunnels(10 Tunnels) FWCS100VPN01 Quantity of VPN Tunnels(100 Tunnels) FWCS500VPN01 Quantity of VPN Tunnels(500 Tunnels) FWCS01KVPN01 Quantity of VPN Tunnels(1000 Tunnels) FWCS02KVPN01 Quantity of VPN Tunnels(2000 Tunnels) FWCS05KVPN01 Quantity of VPN Tunnels(5000 Tunnels) FWCS10KVPN01 Quantity of VPN Tunnels(10000 Tunnels) FWES010SSL00 Quantity of SSL VPN Conncurrent Users(10 Users) FWES020SSL00 Quantity of SSL VPN Conncurrent Users(20 Users) FWES050SSL00 Quantity of SSL VPN Conncurrent Users(50 Users) FWES100SSL00 Quantity of SSL VPN Conncurrent Users(100 Users) FWES150SSL00 Quantity of SSL VPN Conncurrent Users(150 Users) FWES200SSL00 Quantity of SSL VPN Conncurrent Users(200 Users) SU5S012IPS00 Eudemon1000E X3 IPS Update Service Subscribe 12 Months SU5S036IPS00 Eudemon1000E X3 IPS Update Service Subscribe 36 Months SU5S0012AV00 Eudemon1000E X3 Anti-Virus Update Service Subscribe 12 Months SU5S0036AV00 Eudemon1000E X3 Anti-Virus Update Service Subscribe 36 Months SU5S012UFM00 Eudemon1000E X3 URL Filtering Update Service Subscribe 12 Months SU5S036UFM00 Eudemon1000E X3 URL Filtering Update Service Subscribe 36 Months SU5S12MAIL00 Eudemon1000E X3 Anti-Spam Update Service Subscribe 12 Months SU5S36MAIL00 Eudemon1000E X3 Anti-Spam Update Service Subscribe 36 Months SU5S12UTMG00 Eudemon1000E X3 IPS/AV/URL/AS Function Group Subscribe 12 Months SU5S36UTMG00 Eudemon1000E X3 IPS/AV/URL/AS Function Group Subscribe 36 Months SU5S012IPS01 Eudemon1000E X5 IPS Update Service Subscribe 12 Months SU5S036IPS01 Eudemon1000E X5 IPS Update Service Subscribe 36 Months SU5S0012AV01 Eudemon1000E X5 Anti-Virus Update Service Subscribe 12 Months

9 SU5S0036AV01 SU5S012UFM01 SU5S036UFM01 SU5S12MAIL01 SU5S36MAIL01 SU5S12UTMG01 SU5S36UTMG01 SU5S012IPS02 SU5S036IPS02 SU5S0012AV02 SU5S0036AV02 SU5S012UFM02 SU5S036UFM02 SU5S12MAIL02 SU5S36MAIL02 SU5S12UTMG02 SU5S36UTMG02 Eudemon1000E X5 Anti-Virus Update Service Subscribe 36 Months Eudemon1000E X5 URL Filtering Update Service Subscribe 12 Months Eudemon1000E X5 URL Filtering Update Service Subscribe 36 Months Eudemon1000E X5 Anti-Spam Update Service Subscribe 12 Months Eudemon1000E X5 Anti-Spam Update Service Subscribe 36 Months Eudemon1000E X5 IPS/AV/URL/AS Function Group Subscribe 12 Months Eudemon1000E X5 IPS/AV/URL/AS Function Group Subscribe 36 Months Eudemon1000E X6 Anti-Virus Update Service Subscribe 12 Months Eudemon1000E X6 Anti-Virus Update Service Subscribe 36 Months Eudemon1000E X6 URL Filtering Update Service Subscribe 12 Months Eudemon1000E X6 URL Filtering Update Service Subscribe 36 Months Eudemon1000E X6 Anti-Spam Update Service Subscribe 12 Months Eudemon1000E X6 Anti-Spam Update Service Subscribe 36 Months Eudemon1000E X6 IPS/AV/URL/AS Function Group Subscribe 12 Months Eudemon1000E X6 IPS/AV/URL/AS Function Group Subscribe 36 Months Eudemon1000E X6 Anti-Virus Update Service Subscribe 12 Months Eudemon1000E X6 Anti-Virus Update Service Subscribe 36 Months Copyright Huawei Technologies Co., Ltd All rights reserved. The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute the warranty of any kind, express or implied.