DCFW-1800 Series Firewall ea Moloko o latelang

DCN Next Generation Firewall (NGFW) e fana ka ponahalo e felletseng le e nang le granular le taolo ea lits'ebetso. E ka supa le ho thibela litšokelo tse ka bang teng tse amanang le lits'ebetso tse kotsi ha e ntse e fana ka taolo e thehiloeng ho leano ho lits'ebetso, basebelisi le lihlopha tsa basebelisi. Maano a ka hlalosoa a netefatsa bandwidth ho lits'ebetso tse hlokolosi tsa thomo ha o ntse o thibela kapa o thibela lits'ebetso tse sa lumelloang kapa tse mpe. DCN NGFW e kenyelletsa ts'ireletso e felletseng ea marang-rang le likarolo tse tsoetseng pele tsa firewall, e fana ka ts'ebetso e phahameng, ts'ebeliso e ntle ea matla, le bokhoni bo felletseng ba thibelo ea ts'okelo.

Lintlha tsa Bohlokoa le Lintlha-kholo

Boitsebiso ba Taolo ea Granular le Taolo

DCFW-1800E NGFW e fana ka taolo e hlakileng ea lits'ebeliso tsa webo ho sa tsotelehe boema-kepe, protocol, kapa ketso ea ho qoba. E ka supa le ho thibela litšokelo tse ka bang teng tse amanang le lits'ebetso tse kotsi ha e ntse e fana ka taolo e thehiloeng ho leano ho lits'ebetso, basebelisi le lihlopha tsa basebelisi.Tshireletso Maano a ka hlalosoa a netefatsa bandwidth ho lits'ebetso tse hlokolosi tsa thomo ha o ntse o thibela kapa o thibela lits'ebetso tse sa lumelloang kapa tse mpe.

Laola Tlhatlhobo le Thibelo e Kotsi e Felletseng

DCFW-1800E NGFW e fana ka ts'ireletso ea nako ea 'nete bakeng sa lits'ebetso ho tsoa litlhaselong tsa marang-rang ho kenyelletsa livaerase, spyware, liboko, botnets, ARP spoofing, DoS / DDoS, Trojans, buffer overflows le SQL liente. E kenyelletsa enjene e kopaneng ea ts'oaetso ea ts'okelo e arolelanang lintlha tsa lipakete le lienjineri tse ngata tsa ts'ireletso (AD, IPS, URL filtering, Anti-Virus, jj.), E matlafatsang ts'ebetso ea ts'ireletso le ho fokotsa marang-rang a marang-rang.

Litšebeletso tsa Marangrang

• Tsela e matla (OSPF, BGP, RIPv2)
• Tsamaiso ea Static le Policy
• Tsela e laoloang ke ts'ebeliso
• A haha-ka DHCP, NTP, DNS Server, 'me DNS vouta
• Tlanya mode - e hokela ho port ea SPAN
• Mekhoa ea sebopeho: sniffer, boema-kepe bo bokelletsoeng, loopback, VLANS (802.1Q le Trunking)
• L2 / L3 ho fetoha le ho tsamaisa
• Mohala oa Virtual (Layer 1) ponaletso e kenelletseng kahare

Pula Tsa Lehlohonolo

• Mekhoa e sebetsang: NAT / tsela, ponaletso (borokho), le mefuta e tsoakiloeng
• Lintho tsa maano: se boletsoeng esale pele, moetlo le sehlopha sa lintho
• Leano la ts'ireletso le ipapisitse le ts'ebeliso, karolo le sebaka sa sebaka
• Litsela tsa Kopo ea Lits'ebeletso le tšehetso ea seboka: MSRCP, PPTP, RAS, RSH, SIP, FTP, TFTP, HTTP, DCE / RPC, DNS-TCP, DNS-UDP, H. 245 0, H.245 1, H.323
• Ts'ehetso ea NAT le ALG: NAT46, NAT64, NAT444, SNAT, DNAT, PAT, Cone NAT e Felletseng, STUN
• Tlhophiso ea NAT: leano le tafoleng e bohareng ea NAT
• VoIP: SIP / H.323 / SCCP NAT e haola, RTP pin holing
• Pono ea taolo ea leano la lefatše
• Ts'ebetso ea ts'ireletso ea pholisi ea ts'ireletso
• Mananeo: a sebetsa hanngoe ebile a ipheta

Thibelo ea ho kenella

l Phumano e fosahetseng ea Protocol, phumano e ipapisitseng le sekhahla, lipontšo tsa moetlo, bukana, ho sututsa kapa ho hula liapdeite tsa signature, encyclopedia e kopaneng

• Liketso tsa IPS: default, monitor, block, reset (bahlaseli ba IP kapa IP ea lehlasoa, interface e kenang) ka nako ea ho felloa ke nako
• Khetho ea ho rema lipakete
• Khetho e thehiloeng ho Filter: matla, sepheo, OS, ts'ebeliso kapa protocol
• Ho lokolloa ha IP lipontšong tse itseng tsa IPS
• Mokhoa oa sniffer oa IDS
• Ts'ireletso ea IPv4 le IPv6 e ipapisitse le sekhahla sa ts'ireletso khahlanong le likhohola tsa TCP Syn, TCP / UDP / SCTP port scan, ICMP e fiela, TCP / UDP / SCIP / ICMP likhohola (mohloli / sebaka)
• Sebetsa kgaoleditse le likarolo kgaoleditse
• Kemiso e boletsoeng esale pele ea thibelo

-Ba khahlanong le kokoana-hloko

• Buka ea matsoho, e sutumetsang kapa e hula lintlha tsa ho saena

• Antivirus e tsamaeang ka phallo: melaoana e kenyelletsa HTTP, SMTP, POP3, IMAP, FTP / SFTP

• Ho hatelloa ha vaerase ea faele

Tlhaselo ea Ts'ireletso

• Tšireletso e sa tloaelehang ea protocol

Anti-DoS / DDoS, ho kenyeletsoa SYN Flood, Ts'ireletso ea DNS Query ea ts'ireletso

• Tšireletso ea tlhaselo ea ARP

Ho Hlahisa URL

• Tlhahlobo ea tlhahlobo ea marang-rang e thehiloeng ka bongata

• Ho hlatsoe ka marang-rang ho latela URL, litaba tsa webo le hlooho ea MIME

• Ho sefa ka matla webosaeteng e nang le database ea nako ea nnete ea maru: li-URL tse fetang limilione tse 140 tse nang le mekhahlelo e 64 (tse 8 tsa tsona li amana le ts'ireletso)

• Lisebelisoa tse ling tsa ho sefa webosaete:

Filter Java Applet, ActiveX, kapa cookie

Thibela Post ea HTTP

- Log search keywords

- Tlohela ho lekola likhokelo tse patiloeng ka mekhahlelo e meng bakeng sa lekunutu

• Ho hatisa boemo ba marang-rang ho lumella molaoli ho fana ka lifaele tse fapaneng ho mosebelisi / sehlopha / IP ka nakoana

• Mefuta ea lehae ea sefahla sa webo le lintlha tsa mekhahlelo li feta

Botumo ba IP

• Botnet server IP e nang le database ea lefatše ea botumo ba IP

Tlhaloso ea SSL

• Kopo ea kopo ea sephethephethe se patiloeng sa SSL

• Thuso ea IPS bakeng sa sephethephethe se patiloeng sa SSL

• Matlafatso a AV bakeng sa sephethephethe se patiloeng sa SSL

• Sefe ea URL ea sephethephethe se patiloeng sa SSL

• Lethathamo la SSL la sephethephethe le patiloeng

• Mokhoa oa ho laolla proxy oa SSL

Boitsebiso ba Qetellong

• Ts'ehetso ho khetholla IP ea pheletsong, bongata ba ntlha ea ho qetela, nako ea inthaneteng, nako ea marang-rang le nako ea inthanete

• Ts'ehetsa lits'ebetso tse 2 tsa ts'ebetso

• Potso ea tšehetso e ipapisitse le bongata ba palo ea IP le bofelo

Taolo ea phetiso ea faele

• Taolo ea phetiso ea faele e ipapisitse le lebitso la faele, mofuta, le boholo

• Ho khetholla file protocol, ho kenyeletsoa le li-protocols tsa HTTP, HTTPS, FTP, SMTP, POP3, le SMB

• Ho saena faele le boitsebiso bo lekanang mefuta ea lifaele tse fetang 100

Taolo ea Kopo

• Likopo tse fetang 3,000 tse ka tlhotloang ka mabitso, sehlopha, sehlopha se tlase, theknoloji le kotsi

• Ts'ebeliso e ngoe le e ngoe e na le tlhaloso, mabaka a kotsi, ho its'etleha, likou tse tloaelehileng tse sebelisitsoeng, le li-URL bakeng sa ts'upiso e eketsehileng

• Liketso: thibela, sethala sa bocha, ho beha leihlo, ho bopa sephethe-phethe

• Hlwaya le ho laola ditshebediso tsa leru ka hara leru

• Fana ka boalosi ba mahlakore a mangata le lipalo-palo bakeng sa ts'ebeliso ea leru, ho kenyeletsoa karolo ea kotsi le litšobotsi

Boleng ba Ts'ebeletso (QoS)

• Likotopo tsa bandwidth tse phahameng / tse netefalitsoeng kapa motheo oa IP / mosebelisi

Kabo ea kotopo e ipapisitse le sebaka sa ts'ireletso, sebopeho, aterese, sehlopha sa basebelisi / basebelisi, sehlopha sa seva / seva, sehlopha sa ts'ebeliso / sesebelisoa, TOS, VLAN

• Bandwidth e fanoeng ka nako, bohlokoa, kapa kabelo e lekanang ea bandwidth

• Mofuta oa Tšebeletso (TOS) le Ts'ehetso ea lits'ebeletso tse fapaneng (DiffServ)

• Kabo ea mantlha ea bandwidth e setseng

• Likhokahano tse phahameng ka ho fetesisa ka IP

Ho lekanya mojaro oa seva

• Boima ba 'mele bo nang le boima ba' mele, khokahanyo e nyane ea boima, le robin e boima

• Ts'ireletso ea seboka, ho phehella ha nako, le ho lekola maemo a seboka

• Tlhahlobo ea bophelo bo botle ba seva, ho lekola likopano, le ts'ireletso ea nako

Khokahano ea Mojaro oa Khokahano

• Khokahano ea mojaro oa likamore tse peli

• Ho leka-lekanya mojaro oa khokahano o tsoang ka ntle ho kenyelletsa sephethephethe se thehiloeng ho leano, ECMP le boima ba 'mele, tsamaiso ea ISP e kenelletseng le phumano e matla

• Ho leka-lekanya mojaro oa khokahanyo e kenang ho tšehetsa Smart DNS le phumano e matla

• Ho ikamahanya ka tsela e iketsang ho ipapisitse le bandwidth, latency, jitter, khokahano, ts'ebeliso, jj.

• Kopanya tlhahlobo ea bophelo bo botle le ARP, PING le DNS

VPN

• IPSec VPN

- Mofuta oa 1 oa IPSEC: mokhoa o mabifi le o ka sehloohong oa ts'ireletso ea ID

- Likhetho tsa kamohelo ea lithaka: ID efe kapa efe, ID e ikhethileng, ID sehlopheng sa basebelisi ba dialup

- E tšehetsa IKEv1 le IKEv2 (RFC 4306)

Mokhoa oa netefatso: setifikeiti le senotlolo se arolelanoeng pele

- IKE mode mode tšehetso (joalo ka seva kapa moreki)

- DHCP holim'a IPSEC

- Konopo ea "encryption" e lokisehang e ka fetohang, maqhubu a NAT traversal a phelisang

- encryption ea tlhahiso ea Phase 1 / Phase 2: DES, 3DES, AES128, AES192, AES256

Tlhatlhobo ea Phase 1 / Phase 2: MD5, SHA1, SHA256, SHA384, SHA512

Ts'ehetso ea Phase 1 / Phase 2 Diffie-Hellman: 1,2,5

- XAuth e le mokhoa oa seva le bakeng sa basebelisi ba dialup

- Ho fumanoa ha lithaka tse shoeleng

Pheta phumano

- Autokey e lula e phela bakeng sa Phase 2 SA

• Ts'ehetso ea sebaka sa IPSEC VPN: e lumella li-logins tse ngata tsa tloaelo tsa SSL VPN tse amanang le lihlopha tsa basebelisi (litsela tsa URL, moralo)

• IPSEC VPN khetho ea khetho: e ipapisitse le tsela kapa e ipapisitse le melaoana

• Mekhoa ea ho tsamaisa IPSEC VPN: heke-to-heke, letlooeng le felletseng, hub-and-speak, kotopo e sa hlokeheng, ho emisoa ha VPN ka mokhoa o hlakileng

• Ho kena ka nako e le 'ngoe ho thibela ho kena ka nako e le' ngoe ka lebitso le tšoanang la mosebelisi

• Basebelisi ba li-portal tsa SSL ba lekanang

• Mojule oa ho fetisa boema-kepe oa SSL VPN o kentse lintlha tsa moreki ebe o romella data ho seva ea ts'ebeliso

• E tšehetsa bareki ba tsamaisang iOS, Android, le Windows XP / Vista ho kenyelletsa 64-bit Windows OS

• Ho amohela ho hlahloba botšepehi le ho hlahloba OS pele ho likhokahano tsa kotopo ea SSL

• Ho hlahlojoa ha moamoheli oa MAC ka portal e ngoe

• Khetho ea ho hloekisa li-cache pele u qeta seboka sa SSL VPN

• Mochini oa L2TP le mofuta oa seva, L2TP ka IPSEC, le GRE ka IPSEC

• Bona le ho rulahanya dikgokelo tsa IPSEC le SSL VPN

• PnPVPN

IPv6

• Tsamaiso ho IPv6, IPv6 ho rengoa ha lifate le HA

• IPv6 tunneling, DNS64 / NAT64, jj

• IPv6 routing protocols, static routing, policy routing, ISIS, RIPng, OSPFv3, and BGP4 +

• IPS, Boitsebiso ba kopo, Taolo ea phihlello, ts'ireletso ea tlhaselo ea ND

VSYS

• Kabo ea lisebelisoa tsa sistimi ho VSYS ka ngoe

• Khokahano ea CPU

• VSYS e se nang motso e tšehetsa firewall, IPSec VPN, SSL VPN, IPS, URL filtering

• Tlhokomelo le lipalo-palo tsa VSYS

Ho fumaneha ho Holimo

• Likarolo tse fokolang tsa ho otla ha pelo

• E mafolofolo / E sebetsang ebile e mafolofolo / Passive

• Kamahanyo ea nako ea standalone

• Sebopeho sa HA se bolokiloeng

• Failover:

- Boikarabello ba li-port, tsa lehae le tse hole

- Ho failover ea mmuso

- Sub-ea bobeli failover

- Tsebiso ea ho hloleha

• Likhetho tsa ho tsamaisa:

- HA e nang le khokahanyo ea khokahanyo

- Letlooa le felletseng HA

- E hasane libakeng tsa naha HA

Boitsebiso ba mosebelisi le sesebelisoa

• Setsi sa database sa basebelisi ba lehae

• Netefatso ea mosebelisi ea hole: TACACS +, LDAP, Radius, Active

• Ho saena ka le leng: Windows AD

• Netefatso ea lintlha tse 2: Ts'ehetso ea mokha oa boraro, seva e kopaneng ea li-tokens ka 'mele le SMS

• Maano a basebelisi le lisebelisoa

• Khokahano ea sehlopha sa basebelisi e ipapisitse le AD le LDAP

• Ts'ehetso ea Proxy ea 802.1X

Tsamaiso

• Phihlello ea botsamaisi: HTTP / HTTPS, SSH, telnet, console

• Central Management: DCN Security Manager, web service APIs

• Ts'ebetsong ea Sisteme: SNMP, Syslog, likamano tsa selekane

• Phumants'o e potlakileng: Ts'ebetso ea auto-auto ea USB, ts'ebetsong ea script ea lehae le e hole

• Boemo ba `` dashboard '' ea 'nete ea nako e matla le ho epa li-widgets tsa ho lekola

• Ts'ehetso ea puo: Senyesemane

Likutu le Tlaleho

• Lisebelisoa tsa ho rema lifate: memori ea lehae le polokelo (haeba e teng), li-server tse ngata tsa Syslog

• Ho patiloe ho rema lifate le ho kenya li-batch log tse hlophisitsoeng

• Ho rema lifate ka mokhoa o tšepahalang u sebelisa khetho ea TCP (RFC 3195)

• Lits'ebetso tse qaqileng tsa sephethephethe: li fetisitsoe, linako tse tlotsitsoeng, sephethephethe sa lehae, lipakete tse sa sebetseng, URL, jj

• Likalo tse akaretsang tsa ketsahalo: tlhahlobo ea ts'ebetso ea tsamaiso le tsamaiso, ho tsamaisa le ho hokahanya marang-rang, VPN, netefatso ea mosebelisi

• IP le tšebeletso lebitso la khetho ea khetho ea lebitso

• Khetho ea sebopeho sa lintlha tse khutšoane tsa sephethephethe

• Litlaleho tse tharo tse boletsoeng esale pele: Ts'ireletso, Phallo le litlaleho tsa marang-rang

• Tlaleho e hlalositsoeng ke mosebelisi

• Litlaleho li ka romeloa ka PDF ka Email le FTP

Litlhaloso

Tloaelo Kopo
Bakeng sa likhoebo le bafani ba litšebeletso, DCFW-1800E NGFW e ka sebetsana le likotsi tsohle tsa ts'ireletso ka IPS, tlhahlobo ea SSL le ts'ireletso ea ts'okelo. Letoto la DCFW-1800E le ka tsamaisoa moeling oa khoebo, setsing sa data sa lebasetere le likarolong tsohle tsa kahare. Lits'oants'o tse ngata tse lebelo, li-port tse phahameng, tšebetso e phahameng ea ts'ireletso, le phallo e phahameng ea letoto lena li boloka marang-rang a hau a hokahane ebile a sireletsehile.

Tlhaiso-leseling