Huawei Remote Access Security Solution for Enterprise Networks. -Secure and Stable Platforms for Network Interconnection and Data Interaction

Transcription

1 Huawei Remote Access Security Solution for Enterprise Networks -Secure and Stable Platforms for Network Interconnection and Data Interaction HUAWEI TECHNOLOGIES CO., LTD.

2 Huawei Remote Access Security Solution for Enterprise Networks

3 1 As a professional security solution provider, Huawei provides a comprehensive VPN solution to build secure and stable platforms for network interconnection and data interaction. The Huawei VPN solution helps enhance information capabilities and enable real-time information sharing to increase the enterprise operation efficiency. Introduction The Huawei VPN solution adopts tunneling and encryption technologies to build virtual private networks that are associated to the Internet. This solution is cost-effective and features secure interconnection. Therefore, it is widely accepted among enterprises. The Huawei VPN solution integrates a series of mature security gateways and VPN modules, such as the VPN Client and VPN Manager, to provide advanced remote access solutions to large and medium enterprises, operators, and financial institutions. Figure 1-1 Networking for the solution Huawei Remote Access Solution Large branches Headquarters R E200E-X IPSec VPN Headquarters MPLS Carrier BGP VPN/VPLS/VLL Branches SSL VPN Internet E1000E-X PE PE Partners PE GRE over IPSec xdsl / GPON 3G upstream SSL VPN AR R Medium branches Mobile office users Branches in remote area Provides enterprise VPN by means of carriers or private networks (connecting vertical industries and medium and large branches). Provides network security isolation among different services. Ensures high quality enterprise services and provides various forms of QOS. Deploys enterprise VPN by means of the Internet (connecting mobile users and small and medium branches). IPSec provides data encryption for branches. SSL VPN provides mobile office users with access authentication and data encryption.

4 2 Highlights: Comprehensive VPN Network Construction Solutions. Huawei provides a complete set of VPN gateways, from desktop gateways for small offices/home offices (SOHOs) to large-capacity gateways for distributed offices. The gateways have been certified by UL, CE, FCC, and Security Specification in China, Europe, Australia and some other countries and regions. The Eudemon200E-X series gateways support various access modes: E1, ce1, SA, ADSL, and 3G. The VPN Client, professional client software, which provides friendly GUIs and strict but flexible security policies, is used to ensure easy and secure access to VPN networks. The VPN Manager, which provides friendly GUIs and powerful deployment and management functions, is used to ensure unified deployment and management and reduce deployment and maintenance costs. Effective SSL VPN Authentication to Guarantee Secure Access Supports remote access to applications in the enterprise intranet by means of SSL VPN. Supports the What You See Is What You Get (WYSIWYG) function for remote access to the Web through terminals. Supports security access to Web servers, shared files, and internal applications. Supports access to all services by means of VPN tunnels. Supports user authentication by user name and password. Supports mainstream authentication methods such as Radius, LDAP, SecurID, X.509 digital certificate and USBKEY + digital certificate. Provides system logs, administrator logs, and user access logs. Rich Functions to Satisfy Various Networking Requirements Provides various IP VPN access modes such as L2TP, IPSec, GRE, MPLS and SSL. Supports multiple encryption algorithms such as DES, 3DES, and AES. Integrates IPSec VPN with MPLS VPN to provide flexible and secure networks. Provides simple SSL VPN access. By means of APs, a user can use a standard Web browser to access the enterprise's intranet. Provides end-to-end hierarchical protection such as powerful authentication, fine-grained access control to the intranet resources, and encryption algorithms like DES, 3DES and AES. Virtualizes a physical gateway into multiple logical ones that have the same functions of the physical gateway and support private network address overlap and preserve independent VPN routes and forwarding entries to ensure service security isolation.

5 3 VPN Products Products SVN 3000 Eudemon 200E-B/C/F 200E-X Quantity of L2TP Tunnels Quantity of IPSec Tunnels Quantity of SSL Tunnels IPSec Encryption/ Decryption Performance SVN3000 / Mbit/s Eudemon 200E-B Mbit/s Eudemon 200E-C Mbit/s Eudemon 200E-F Mbit/s Eudemon 200E-X1/X1W Mbit/s Eudemon 200E-X2/X2W Mbit/s Eudemon 200E-X Mbit/s Eudemon 200E-X Mbit/s Eudemon 200E-X Gbit/s Eudemon 200E-X Gbit/s Eudemon 1000E-U / 2 Gbit/s Eudemon 1000E-U / 4 Gbit/s Eudemon 1000E-U / 5 Gbit/s Eudemon 1000E-U / 6 Gbit/s Eudemon 1000E-X3 / Gbit/s Eudemon 1000E-X5 / Gbit/s Eudemon 1000E-X7 / Gbit/s Eudemon 8080E Single board: Integrated device: * 4 boards / 6.5 Gbit/s * 4 boards Eudemon 8160E Single board: VPN Gateways Eudemon 1000E-U 1000E-X Integrated device: * 8 boards / 6.5 Gbit/s * 8 boards Eudemon 8000E

6 4 Success Stories Ma Anshan China Mobile Business Hall Jiang Su Provincial Administration of Radio, Film and Television IBM Wu XI Cloud Computing Center Data System in some Olympic Cooperative Cities Tianjin Nankai University

7 5

8