::: SECUI.COM :::

Home > 製品 > IPS

セキュアイIPSシリーズは、様々な攻撃タイプに対して正確に探知・遮断するための高度な分析技術を採用し、更に優れたセッションSetup性能により、急激なセッション増加を引き起こすワームやDos/DDoSなどの攻撃を效果的に防御しながらネットワークサービスの可用性を保障するIPSソリューションです。

[Line UP]

Target	Product	Performance	Chassis
Large Scale Enterprise Network	eXshield	Max 6Gbps, Rec 3Gbps
Large Scale Enterprise Network	SECUI NXG 2000I	2Gbps
Medium Scale Network	SECUI NXG 800I	1.6Gbps
Medium Scale Network	SECUI NXG 400I	1Gbps
Small Scale Network	SECUI NXG 200I	400Mbps
Small Scale Network	SECUI NXG 100I	100Mbps

* Functions *

Item	Function	Support
Operation Mode	Layer 2 Mode (Transparent Mode)	Yes
	Layer 3 Mode (Route Mode, NAT Mode)	Yes
	PAT (Port Address Translation)	Yes
HIGH AVAILABILITY	Active / Stand by	Yes
	Active-Active HA with L3 Switch	Yes
	Active-Active HA with L2 Switch	Yes
	Redundant Interfaces	Yes
	Configuration Synchronization	Yes
	Session Synchronization for Firewall and VPN	Yes
	Session Failover for Routing Change	Yes
	Device Failure Detection	Yes
	Link Failure Detection	Yes
	Authentication for New HA Members	Yes
LOAD BALANCE & QoS	Traffic Shaping	Yes
	Load Balancing without L4 Switch	Yes
	Server Load Balancing	Yes
	Multiline IPSec Load Balancing by Packet (VPN)	Yes
FIREWALL - MAJOR FEATURES	Stateful Inspection Firewall
	* Dynamic Rules Settings	Yes
	* Session Synchronization at Kernel Level	Yes
	* Classification Algorithm	Patented Algorithm
	* Providing Secure Channel to Applications Using Dynamic Ports	SUN RPC, SQL*NET, TFTP, FTP H.323, Dialpad, PPTP, L2TP, IPSec, PING,Real Player, Window Media Player,MSN
	* Secure Proxy Supported	HTTP Transparent Proxy, SMTP,POP3
	* Split DNS (External DNS & Internal DNS)	Yes (External, Internal)
IPS - USER AUTHENTICATION	Third Party User Authentication	RADIUS, LDAP, SecureID, S/Key
IPS - USER AUTHENTICATION	Web-Based Authentication	Yes
DEEP INSPECTION	Deep Inspection Firewall
	* Web Application Attacks Detected	Yes
	* Protocol Anomaly	HTTP, SMTP, POP3
	* Stateful Protocol Signatures	Yes
	Intrusion Protection
	* DoS and DDoS Protection	SYN Flooding Attack, UDP Flooding Attack, Ping Flooding Attack, etc
	* Packet Dropping TCP Reassembly for Segmented Packet, Malformed Packet,etc Inbound Packet having Internal Source IP Address Inbound Packet having Abnormal Source IP Address	Yes
	* Protection against Attacks Targeting Vulnerability of TCP/IP Stack	Land Attack, Ping of Death Attack, IP Forge Attack, etc
	* Protection against Attacks Targeting Web Security Hole Nimda Virus, Code-Red Virus,UNI-Code Bugs etc	Yes
	* Detection and Protection of Scanning Attempt	Yes
	* Session Shaping	Yes
IPS - MAJOR FEATURES	Traffic Analysis Features	Yes
	Scanning Pattern Blocking
	* Scanning Pattern Detection	FIN, NULL, XMAX SCAN, etc
	* Blocking Time Control	Yes
	Session Monitoring & Shaping
	* Monitoring Area	All Internet IP & Service
	* Police Based Threshold Setup	Yes
	* Auto Configuration	Yes
	Protocol Analysis Features	Yes
	Web Application Defense	HTTP
	* HTTP Header & Body Analysis	Yes
	* Command Attack Detection Area SQL, LDAP Injection / OS Command Injection / Cross-Site Scripting / Directory Traversal, etc	Yes
	* Website Cloaking	Yes
	* Dynamic Profiling	Yes
	Anti-spam	SMTP, POP3
	* Session Connection Based Detection	Spam Relay, Black List, Bomb Mail
	* Content Based Detection	Signature, Keywords
	Denial of Service Attacks Blocks
	* Protocols & Pattern Detection SYN Flooding, Ping Flooding, UDP Flooding, Fragmented Packet, Ping Death, Smurf	Yes
	* Blocking Methodology	Dynamic Black Lists
	Client Quarantine	Yes
	Isolation of Infected Worm and Virus	Yes
	Block Agent Auto & All Installation	First Web Traffic Detect
CONTENTS FILTERING	Contents Inspection
	* External Anti-Virus
	* Embedded Anti-Virus	Yes
	* Embedded Anti-Spam	Yes
	* Malicious URL Filtering	over 300,000 URL's
	* Keyword Filtering	Yes
	* Fast A/V Card	Yes
	Signature Filtering	Yes
	* Signature Pattern List	2,000 AVE
	* Policy Based Signature Filtering	Yes
	* Pattern Update	Push/Pull/Manual
	Keyword Filtering
	* Pattern String Emergency Input	Yes
	* Concurrent Pattern String No.(10)	Yes
ROUTING	Dynamic Routing	Yes(OSPF)
ROUTING	Static Routing	Yes
NETWORKING SUPPORT	VLAN Trunking(802.1q)	Yes
	VoIP	Yes
	Port Aggregation(802.3ad)	Yes
SYSTEM MANAGEMENT	Java Based User Interface
	Command Line Interface	Console, Telnet, SSH
	All Management via VPN Tunnel on Any Interface
	SNMP Full Custom MIB
MANAGEMENT	Central Management	Yes
	Root Admin, Admin and Read Only User Levels	Yes
	Secure Connection with User Authentication	Yes
	Configuration Rollback	Yes
LOGGING & MONITORING	Syslog (Multiple Servers)	External, Up to 3 servers
	E-mail (2 Addresses)	Yes (Unrestriced)
	SNMP (Version 2)	Yes (ver 1, 2)
	Activity Log & Counter Log	Yes
	Log File Format	Binary, CSV, TSV, WELF
	Log Analyzer	Yes
	Interoperbility with ESM Solutions	Yes
	Reporting	Yes (HTML Format)
IP ADDRESS ASSIGNMENT	Static IP Address	Yes
	DHCP, PPPoE Client	Yes
	Internal DHCP Server	Yes
	DHCP Relay	Yes
CERTIFICATION	Security Certification	CC

* Performance *

Target	Product	Performance
Large Scale Enterprise Network	eXshield	Throughput : Max 6Gbps Rec 3Gbps Concurrent Session: 3,000,000 Number of Policies : Max 65,000 Number of Signatures : Over 2600
Large Scale Enterprise Network	SECUI NXG 2000I	Throughput : 2Gbps Concurrent Session: 1,500,000 Number of Policies: Max 65,535 Rec 20,000 Number of Signatures : Over 2600
Medium Scale Network	SECUI NXG 800I	Throughput : 1.6Gbps Concurrent Session : 1,000,000 Number of Policies: Max 65,535 Rec 7,000 Number of Signatures : Over 2600
Medium Scale Network	SECUI NXG 400I	Throughput : 1Gbps Concurrent Session: 500,000 Number of Policies: Max 65,535 Rec 3,000 Number of Signatures : Over 2600
Small Scale Network	SECUI NXG 200I	Throughput : 400Mbps Concurrent Session: 500,000 Number of Policies: Max 65,535 Rec 2,000 Number of Signatures : Over 2600
Small Scale Network	SECUI NXG 100I	Throughput : 100Mbps Concurrent Session: 375,000 Number of Policies: Max 65,535 Rec 1,000 Number of Signatures : Over 2600