Network Security Protective and Dependable With the growth of the Internet threats, network security becomes the fundamental concerns of family network and enterprise network. To enhance your business network protection, PLANET Technology offers a total network security solution to effectively defend your network against attacks at the forefront. The PLANET Security Router family has, VPN Router, Multi-homing Gateway, UTM (Unified Threat Management) Content Security Gateway, SSL VPN Gateway, Internet Monitor, Bandwidth Management Gateway, and Server Load Balance. The PLANET UTM (Unified Threat Management) Content Security Gateway, a special designed of security gateway, can adopt Heuristics Analysis to filter spam and virus mail, and the auto-training system can rise identify rate of spam. The Anti-virus application has double virus scan engines - Clam and Sophos which can detect viruses, worms and other threats from transferring E-mail and Internet network. The IDP and firewall functions can defense hackers and blaster attacks from the Internet or Intranet. Moreover, QoS function can be classified based on IP address, IP subnet and TCP/UDP port number and give guarantee and maximum bandwidth with three levels of priority. The maximum controlled bandwidth is 100Mbps. 52 Network Security
PLANET Network Security Gateway Solution PLANET is specially designed security gateway with Vendor Branch Office virus and spam filtering features. As the gatekeeper of corporate security network, it prevents corporate intranet from being infected by virus and its network resource occupied by useless spam mails. Further- Access Point more, IDP, User Authentication and Content Filter features of the security gateway offer the corporate intranet highly secure protection. The UTM Content Security Gateway also provides the IPSec, PPTP, and SSL VPN solutions that the data can be securely delivered via VPN tunnel. Internet Headquarters Attack Spam Access Point Firewall Firewall DMZ Finance-Server Web-Server Mail-Server Home SPI Firewall Stateful Packet Inspection (SPI) is a firewall that keeps track of the state of network connections traveling across it. The firewall is programmed to distinguish legitimate packets for different types of connections. Only packets matching a known connection state will be allowed by the firewall. Anti- are computer programs that attempt to identify, neutralize or eliminate malicious software. Most modern antivirus software is now designed to combat a wide range of threats, including worms, phishing attacks, rootkits, Trojans, often described collectively as malware. SSL VPN Secure Sockets Layer (SSL), is cryptographic protocol that provide security and data integrity for communications over TCP/IP networks such as the Internet. Several versions of the protocols are in wide-spread use in applications like web browsing, electronic mail, Internet faxing, instant messaging and voice-over-ip (VoIP). Anti-Spam To prevent e-mail spam. Some of these techniques have been embedded in products, services and software to ease the burden on users and administrators. IDP Intrusion Detection and Prevention (IDP) products offer the latest capabilities in in-line network Intrusion Prevention System (IPS) functionality to protect the network from a wide range of attacks. Using industry-recognized stateful detection and prevention techniques, IDP provides protection against worms, trojans, spyware, keyloggers and other malware from penetrating the network or spreading from already infected users. IPSec VPN Internet Protocol Security (IPSec) is a suite of protocols for securing Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a data stream. IPSec also includes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session. Network Security 53
Anti-virus and Anti-Spam for mail security support Spam mail learning system IDP IPSec and PPTP VPN 200 IPSec tunnels Outbound Load Balancing Anti-virus and Anti-Spam for mail security support Spam mail learning system IDP IPSec, PPTP, SSL VPN 1000 IPSec tunnels Outbound and Inbound Load Balancing Multi-Homing Security Gateway Multi-Homing Security Gateway WAN Load Balance and Fail-over Multiple NAT IPSec and PPTP VPN 200 IPSec tunnels with DoS protection Authentication by Local User, RADIUS Server, and POP3 Server VPN Security Gateway SG-500 Web and IPSec VPN Security Gateway SSL and IPSec VPN 5 SSL tunnels Virtual Server and IP mapping Hacker Alert and Anomaly Flow Detection SG-1000 Web, IPSec, and PPTP VPN Security Gateway SSL, IPSec, and PPTP VPN 50 SSL tunnels VPN Trunk Virtual Server and IP mapping Hacker Alert and Anomaly Flow Detection SG-500 SG-1000 54 Network Security
Bandwidth Management Gateway BM-525 Bandwidth Management Gateway Traffic classification based on IP, IP range/subnet, and TCP/ UDP port range Guaranteed and Maximum bandwidth with three levels of priorities Professional Monitor function includes Log, Accounting Report, Statistics, and Status MRTG-like Traffic Statistics, easy to trace and analyze Maximum Controlled Bandwidth 25 Mbps Content Filter includes URL, Script, P2P, IM, and Download blocking BM-2101 Bandwidth Management Gateway Traffic classification based on IP, IP range/subnet, and TCP/ UDP port range Guaranteed and Maximum bandwidth with three levels of priorities Professional Monitor function includes Log, Accounting Report, Statistics, and Status MRTG-like Traffic Statistics, easy to trace and analyze Quota per Session and Quota per Day Outbound load-balancing function Maximum Controlled Bandwidth 100 Mbps Content Filter includes URL, Script, P2P, IM, and Download blocking BM-525 BM-2101 Service Distribution Chart Policy/Outgoing: QoS Max. Bandwidth per Source IP (Kbps) Max. Concurrent Sessions per IP and Total Sessions Quota per Session (KB) Quota per Day (MB) VPN VRT-311S VPN Multiple DMZ support DDNS Virtual Server IPSec and PPTP 10 IPSec tunnels VRT-401 VPN Multiple DMZ support DDNS Virtual Server IPSec and PPTP 100 IPSec tunnels VRT-311S VRT-401 Network Security 55
Hotspot Wireless WSG-404 Wireless Subscriber Gateway Ideal Hot Spot Solution Zero Configuration (Plug-n-Play) Internet Access Built-in Proprietary AAA Mechanism and Billing System RADIUS AAA Support Built-in 64/128-bit WEP Encryption Virtual Server and DMZ Capability WSG-ACG4 Account Generator Ticket Printer for WSG-404 Feed Paper Button Function Selection Button Zero Configuration (Plug-n-Play) WSG-404 WSG-ACG4 XRT-501 Gigabit All Gigabit Ports for 1 WAN and 4 LAN ports VPN Pass Through Content and URL Filters DMZ, DDNS, and Virtual Server support Stateful Packet Inspection firewall for DoS (Denial of Service) attacks. XRT-501 XRT-401D Virtual Server and DMZ DHCP Server Remote Management UPnP support URL Filtering and Access Control XRT-401E Virtual Server and DMZ DHCP Server Remote Management UPnP support URL Filtering and Access Control XRT-401D XRT-401E 56 Network Security