Alteon Switched Firewall

Transcription

1 Alteon Switched SECURED BY Firewall Buyer s Guide A quick-reference aid to selecting the Alteon firewall that best meets a customer s needs When it comes to ensuring the safety of your network, one size never fits all. IT managers and network administrators need firewalls with different capacities to guard against threats to their network infrastructure. Recognizing this, has developed the Alteon line of best-of-breed firewall solutions that seamlessly integrate into an enterprise s layered security strategy and enable them to realize greater return on their infrastructure investment. The solution: Alteon Switched Firewall System (ASFS) with its unique switch-accelerated architecture offers unmatched flexibility by offering a broad range of security options at different price points, tailored to the requirements of large enterprise customers and service providers. The latest Alteon Switched Firewall products augment the strength of the Alteon solution by providing additional configuration options for high-performance security. The Alteon Switched Firewall is a multi-component solution, managed as a single system. It is a tight integration of two key components an Alteon Switched Firewall Accelerator, plus up to six Alteon Switched Firewall Directors. Using Check Point's Secure XL technology and Open Security Architecture, Firewall Directors communicate with the Firewall Accelerator to setup and teardown firewall sessions in real-time. Product update: The Alteon Switched Firewall 6414 and 5106 are the newest members of the ASF product family. Representing the evolution of leading-edge switch-accelerated firewalls, the ASF 6414 features an Accelerator platform based on the Alteon Application Switch. It offers integrated Layer 4-7 content filtering, comprehensive DoS protection, and IDS load balancing within the Accelerator OS, along with the Layer 2-7 security provided by the Check Point NG with Application Intelligence stateful inspection engine. The ASF 5106 is a platform refresh for the 5105 model and provides better performance at the same price. Along with the other 5100 series firewalls, the ASF 5106 complements the accelerated Alteon product family and broadens the range of deployment options available to customers at very competitive price points.

2 New ASF 6414 Part number: EB Accelerator Director 5014 Accelerator-based content filtering, DoS protection, and IDS load balancing High performance: 4.2 Gbps throughput and up to 500,000 concurrent accelerated sessions, (1M total sessions) Switched-based session acceleration ensures minimal latency and network jitter when deploying VoIP and streaming services High port density for DMZs (24 10/100 ports, four GBICs) in 2RU box Hosters, service providers, and large enterprises concerned with protecting against flash crowds Enterprises looking to consolidate firewall security onto fewer devices Where support for secure voice and streaming applications is needed Where network growth and increasing demand for applications is expected $44,490 Ability to offload CPU-intensive/NAT functions to the Switched Firewall Accelerator Plug-n-play provisioning eliminates Incorporating the latest capabilities in application switching technology, the ASF 6414 is wellsuited to address the challenge of today s heightened corporate threat environment. The new platform offers improved port density and the processing power to perform application-layer inspection while ensuring firewall performance never impacts network throughput, even under the most demanding conditions, e.g., processing traffic with small packet sizes. Customers: Large enterprises and service providers needing to secure high-bandwidth traffic against increasingly sophisticated attacks. Applications: Ensuring jitter-free traffic and low latency for enterprise VoIP, VOD (video on demand), and other streaming services 2

3 ASF 5714 Accelerator Director 5014 High performance: 4.2 Gbps throughput and up to 500,000 concurrent accelerated sessions (1M total sessions) Hosters, service providers, and large enterprises concerned with protecting against flash crowds $51,990 Part number: EB High bandwidth via 9 gigabit ports Plug-n-Play provisioning eliminates Where support for large number of virtual LANs to segment the corporate intranet is needed Where network growth and increasing demand for application security is expected The ASF 5714 is our top-of-the-line gigabit Alteon firewall solution, with the processing power, memory, and throughput to achieve maximum performance levels from the switch-accelerated firewall architecture and the integration of the Alteon Web switching platform, Check Point FW-1 NG, and Secure XL technology. With built-in firewall load balancing, health checking, and scalability. Customers: Large enterprises needing to provide and account for high bandwidth and differentiated client service. Applications: Enterprise Intranet Virtual LANS, hosting, VoIP, VOD (video on demand) and other multimedia services. ASF 5614 Part number: EB Accelerator Director 5014 High throughput: 4.2 Gbps Up to 170K accelerated concurrent sessions, 1M total High bandwidth via gigabit connectivity 9 GbE ports Plug-n-play provisioning eliminates Large enterprises, supporting VLAN-segmented networks Throughput is important, but not typically associated with a very high number of simultaneous users Where network growth and increasing demand for application security is expected $43,990 The ASF 5614 is a high-performance accelerated solution, with the ability to support high-bandwidth applications and a large number of simultaneous users. With built-in firewall load balancing, health checking, and scalability. Customers: Enterprise intranets/data centers interested in segmenting the corporate network into virtual domains, with specific policies applied to different groups, departments, etc. Applications: VoIP, with a focus on ensuring minimal latency for jitter-sensitive traffic. 3

4 ASF 5409 Part number: EB Accelerator Director 5009 Up to 600 Mbps throughput Up to 170K accelerated, concurrent sessions, 500K total Fast Ethernet connectivity eight FE ports, one 10/100/1000 Mbps port Enterprise environment where maximum throughput via gigabit connectivity is not an issue $23,990 Plug-n-play provisioning eliminates The ASF 5409 is an ideal perimeter security solution for medium-size enterprises or medium-size sites within a large enterprise. With built-in firewall load balancing, health checking, and scalability. Customer: Enterprise call centers, looking for good throughput, with support for more simultaneous connections than the ASF Applications: Call center clients, plus online interactive communications, e.g., VoIP, with a focus on minimal latency for jitter-sensitive traffic. With reasonable throughput, it is ideally suited to protecting IP PBXs in medium-sized enterprise networks. ASF 5114 Part number: EB Alteon Firewall 5114 Multi-gigabit stand-alone firewall appliance running Check Point NG Pentium 4 processor, running at 2.8 Ghz; 1.6 Gbps throughput Up to 8K session conns/second Up to 500K non-accelerated concurrent sessions VSX 2.0 support for virtual firewalls Quad gigabit connectivity, with dual fiber and dual copper ports Outstanding price/performance value, compared to competition Medium- to large-size enterprises or service providers Customers sold on the ASF architecture and value proposition, but for whom a stand-alone solution that can exceed 1 Gbps is sufficient to address throughput requirements for specific segments of their network $15,995 The ASF 5114 is the top-of-the-line ASF starter kit, enabling customers to deploy a single Alteon stand-alone firewall and achieve multi-gigabit throughput and connectivity; with two 1000SX and two 10/100/1000 Mbps interface ports. Running Check Point FW-1 VSX 2.0, up to 250 virtual firewalls can be discretely configured to segregate customers or create separate domains within the corporate LAN. Customer: Enterprises and service providers who have a need for a single high-performance firewall that can be flexibly deployed to protect one or multiple segments of their internal network. Also ideally suited to provide firewall protection at the perimeter, if the expected session load does not typically exceed 5,000 sessions/second under heavy traffic conditions. Applications: High-performance complementary solution to the accelerated product offerings, providing high throughput and connectivity, coupled with Check Point VSX 2.0 virtual firewall capabilities. 4

5 ASF 5109 Part number: EB Alteon Firewall 5109 High-throughput stand-alone Medium-size enterprises $11,995 Check Point solution Price-sensitive customers already Pentium 4 processor, running sold on the ASF 2.8 Ghz; 1 Gbps throughput and value proposition, but who Up to 8K session conns/second need a lower-cost alternative for specific segments of their network Up to 350K non-accelerated concurrent sessions Great ROI, based on throughput High bandwidth: gigabit connectivity 2 10/100/1000 ports Dual FE ports for DMZ connectivity Competitive price point The Alteon Firewall 5109, with a Pentium 4 processor running at 2.8 Ghz, provides robust high-performance throughput and deployment flexibility for the low-to-mid-range market. The 5109 is a stand-alone security appliance with a Check Point stateful inspection engine, offered at a very competitive price point. Customer: Enterprise CIO/IT administrators who understand the value proposition of the ASF architecture, perhaps having deployed an accelerated ASF solution at the Internet gateway, and want to deploy a costeffective stand-alone solution with great performance in branch or regional offices to protect internal resources and assets. Applications: Ideally suited to complement the higher-end product offerings, providing firewall deployment flexibility and scalability, coupled with Check Point s FW-1 NG security protection and features. New ASF 5106 Part number: EB Alteon Firewall 5106 Non-accelerated Check Point solution Up to 300 Mbps throughput Up to 250K non-accelerated concurrent sessions Quad FE ports for DMZ connectivity Small- to medium-size enterprises or branch offices in larger enterprises Price-sensitive customers who need a low-cost Check Point firewall for specific segments of their network $5,495 Lowest ASF price point The Alteon Switched Firewall 5106 is a platform refresh for the ASF 5105, with better performance at the same price. The Alteon Firewall 5106 is the lowest priced ASF solution, ideal for small enterprises, branch offices, or to protect network segments within a larger enterprise. The existing 5105 platform will be manufacture discontinued in Q204. Customer: Enterprise CIO/IT administrators who appreciate the scalability inherent in the ASF architecture, but who need a very low-cost Check Point firewall solution in regional offices to protect internal resources and assets. Applications: Ideally suited to complement the higher-end product offerings, providing firewall deployment flexibility, coupled with Check Point s FW-1 NG security protection and features. 5

6 In the United States: 35 Davis Drive Research Triangle Park, NC USA In Canada: 8200 Dixie Road, Suite 100 Brampton, Ontario L6T 5P6 Canada In Caribbean and Latin America: 1500 Concorde Terrace Sunrise, FL USA In Europe: Maidenhead Office Park Westacott Way Maidenhead Berkshire SL6 3QH UK In Asia: Asia 6/F Cityplaza 4, Taikooshing, 12 Taikoo Wan Road, Hong Kong is an industry leader and innovator focused on transforming how the world communicates and exchanges information. The Company is supplying its service provider and enterprise customers with communications technology and infrastructure to enable valueadded IP data, voice and multimedia services spanning Wireless Networks, Wireline Networks, Enterprise Networks, and Optical Networks. As a global company, does business in more than 150 countries. More information about can be found on the Web at: For more information, contact your representative, or call NORTEL or from anywhere in North America. GSA Schedule GS-35F-0140L GSA-NTEL *, the logo, the globemark design, and Alteon are trademarks of. All other trademarks are the property of their owners. Copyright All rights reserved. Information in this document is subject to change without notice. assumes no responsibility for any errors that may appear in this document. NN