::: SECUI.COM :::

Home > 製品 > UTM

ワーム、ウイルスなどによるネットワーク全体を麻痺させる脅威や、内部及び外部での違法・有害情報の流出などによるセキュリティ事故は益々知能化されています。単一ソリューションでは、このような複合的で知能的な脅威を有効に防御できないため、急変するセキュリティ環境に迅速に対応することができません。もう、多機能の統合セキュリティ・ソリューションを導入することは必須になりました。

セキュアイドットコムの統合脅威管理(UTM)ソリューションは、ファイアウォール(FW)、侵入防止システム(IPS)、仮想プライベートネットワーク(VPN)の機能的な結合により、それぞれの機能が単一ソリューション以上の性能を発揮し、競争力を取り揃えたReal-UTMソリューションです。

[Line UP]

Target	Product	Performance	Chassis
Large Scale Enterprise Network	eXshield	Firewall, IPS : Max 16Gbps, Rec 6Gbps
Large Scale Enterprise Network	SECUI NXG 2000	Firewall, IPS : 2Gbps VPN : 2Gbps
Medium Scale Network	SECUI NXG 800	Firewall, IPS : 1.6Gbps VPN : 1.6Gbps
Medium Scale Network	SECUI NXG 400	Firewall, IPS : 1Gbps VPN : 1Gbps
Small Scale Network	SECUI NXG 200	Firewall, IPS : 400Mbps VPN : 400Mbps
Small Scale Network	SECUI NXG 100	Firewall, IPS : 100Mbps VPN : 100Mbps

* Functions *

Item	Function	Support
Operation Mode	Layer 2 Mode (Transparent Mode)	Yes
	Layer 3 Mode (Route Mode, NAT Mode)	Yes
	PAT (Port Address Translation)	Yes
HIGH AVAILABILITY	Active / Stand by	Yes
	Active-Active HA with L3 Switch	Yes
	Active-Active HA with L2 Switch	Yes
	Redundant Interfaces	Yes
	Configuration Synchronization	Yes
	Session Synchronization for Firewall and VPN	Yes
	Session Failover for Routing Change	Yes
	Device Failure Detection	Yes
	Link Failure Detection	Yes
	Authentication for New HA Members	Yes
LOAD BALANCE & QoS	Traffic Shaping	Yes
	Load Balancing without L4 Switch	Yes
	Server Load Balancing	Yes
	Multiline IPSec Load Balancing by Packet (VPN)	Yes
FIREWALL - MAJOR FEATURES	Stateful Inspection Firewall
	* Dynamic Rules Settings	Yes
	* Session Synchronization at Kernel Level	Yes
	* Classification Algorithm	Patented Algorithm
	* Providing Secure Channel to Applications Using Dynamic Ports	SUN RPC, SQL*NET, TFTP, FTP H.323, Dialpad, PPTP, L2TP, IPSec, PING,Real Player, Window Media Player,MSN
	* Secure Proxy Supported	HTTP Transparent Proxy, SMTP,POP3
	* Split DNS (External DNS & Internal DNS)	Yes (External, Internal)
FIREWALL & VPN - USER AUTHENTICATION	Third Party User Authentication	RADIUS, LDAP, SecureID, S/Key
	XAUTH VPN Authentication	Yes
	Web-Based Authentication	Yes
DEEP INSPECTION	Deep Inspection Firewall
	* Web Application Attacks Detected	Yes
	* Protocol Anomaly	HTTP, SMTP, POP3
	* Stateful Protocol Signatures	Yes
	Intrusion Protection
	* DoS and DDoS Protection	SYN Flooding Attack, UDP Flooding Attack, Ping Flooding Attack, etc
	* Packet Dropping TCP Reassembly for Segmented Packet, Malformed Packet,etc Inbound Packet having Internal Source IP Address Inbound Packet having Abnormal Source IP Address	Yes
	* Protection against Attacks Targeting Vulnerability of TCP/IP Stack	Land Attack, Ping of Death Attack, IP Forge Attack, etc
	* Protection against Attacks Targeting Web Security Hole Nimda Virus, Code-Red Virus,UNI-Code Bugs etc	Yes
	* Detection and Protection of Scanning Attempt	Yes
	* Session Shaping	Yes
IPS - MAJOR FEATURES	Traffic Analysis Features	Yes
	Scanning Pattern Blocking
	* Scanning Pattern Detection	FIN, NULL, XMAX SCAN, etc
	* Blocking Time Control	Yes
	Session Monitoring & Shaping
	* Monitoring Area	All Internet IP & Service
	* Police Based Threshold Setup	Yes
	* Auto Configuration	Yes
	Protocol Analysis Features	Yes
	Web Application Defense	HTTP
	* HTTP Header & Body Analysis	Yes
	* Command Attack Detection Area SQL, LDAP Injection / OS Command Injection / Cross-Site Scripting / Directory Traversal, etc	Yes
	* Website Cloaking	Yes
	* Dynamic Profiling	Yes
	Anti-spam	SMTP, POP3
	* Session Connection Based Detection	Spam Relay, Black List, Bomb Mail
	* Content Based Detection	Signature, Keywords
	Denial of Service Attacks Blocks
	* Protocols & Pattern Detection SYN Flooding, Ping Flooding, UDP Flooding, Fragmented Packet, Ping Death, Smurf	Yes
	* Blocking Methodology	Dynamic Black Lists
	Client Quarantine	Yes
	Isolation of Infected Worm and Virus	Yes
	Block Agent Auto & All Installation	First Web Traffic Detect
CONTENTS FILTERING	Contents Inspection
	* External Anti-Virus
	* Embedded Anti-Virus	Yes
	* Embedded Anti-Spam	Yes
	* Malicious URL Filtering	over 300,000 URL''''''''''''''''s
	* Keyword Filtering	Yes
	* Fast A/V Card	Yes
	Signature Filtering	Yes
	* Signature Pattern List	2,000 AVE
	* Policy Based Signature Filtering	Yes
	* Pattern Update	Push/Pull/Manual
	Keyword Filtering
	* Pattern String Emergency Input	Yes
	* Concurrent Pattern String No.(10)	Yes
VPN - MAJOR FEATURES	Encryption Algorithm(DES, 3-DES,AES,SEED,etc )	Yes
	Authentication Algorithm	SHA-1, HAS-160
	Key Manipulation	Manual, IKE, PKI(X.509)
	Perfect Forward Secrecy	DH Group 1,2,5 support
	Prevent Replay Attack	Yes
	Remote Access VPN	Yes
	TBB (TCP Bandwidth Bonding)	Yes
	IPSec NAT Traversal	Yes
	DPD (Dead Peer Detection)	Yes
	DLD (Dead Link Detection)	Yes
	Split Tunneling	Yes
	Redundant VPN Gateways	Yes
	Zero Packet Loss SA Rekeying	Yes
ROUTING	Dynamic Routing	Yes(OSPF)
ROUTING	Static Routing	Yes
NETWORKING SUPPORT	VLAN Trunking(802.1q)	Yes
	VoIP	Yes
	Port Aggregation(802.3ad)	Yes
PKI SUPPORT	PKI Certificate Request	PKCS#7, PKCS#10
	Online Certificate Status Protocol (OCSP)	Yes
	Certificate Authorities Supported	VeriSign, Entrust
SYSTEM MANAGEMENT	Java Based User Interface
	Command Line Interface	Console, Telnet, SSH
	All Management via VPN Tunnel on Any Interface
	SNMP Full Custom MIB
MANAGEMENT	Central Management	Yes
	Root Admin, Admin and Read Only User Levels	Yes
	Secure Connection with User Authentication	Yes
	Configuration Rollback	Yes
LOGGING & MONITORING	Syslog (Multiple Servers)	External, Up to 3 servers
	E-mail (2 Addresses)	Yes (Unrestriced)
	SNMP (Version 2)	Yes (ver 1, 2)
	Activity Log & Counter Log	Yes
	Log File Format	Binary, CSV, TSV, WELF
	Log Analyzer	Yes
	Interoperbility with ESM Solutions	Yes
	Reporting	Yes (HTML Format)
IP ADDRESS ASSIGNMENT	Static IP Address	Yes
	DHCP, PPPoE Client	Yes
	Internal DHCP Server	Yes
	DHCP Relay	Yes
CERTIFICATION	Security Certification	CC

* Performance *

Target	Product	Firewall/IPS Performance	VPN Performance
Large Scale Enterprise Network	eXshield	Throughput : Max. 16Gbps Concurrent Session : 3,000,000 Number of Policies : Max 65,000	Throughput : Max. 6Gbps Concurrent Session : 3,000,000
Large Scale Enterprise Network	SECUI NXG 2000	Throughput : 2Gbps Concurrent Session : 1,500,000 Number of Policies : Max 65,535, Rec 20,000	Throughput : 2Gbps Concurrent VPN TUNNEL : Max 20,000, Rec 5,000
Medium Scale Network	SECUI NXG 800	Throughput : 1.6Gbps Concurrent Session : 1,000,000 Number of Policies : Max 65,535, Rec 7,000	Throughput : 1.6Gbps Concurrent VPN TUNNEL : Max 10,000, Rec 2,000
Medium Scale Network	SECUI NXG 400	Throughput : 1Gbps Concurrent Session : 500,000 Number of Policies : Max 65,535, Rec 3,000	Throughput : 1Gbps Concurrent VPN TUNNEL : Max 5,000, Rec 1,000
Small Scale Network	SECUI NXG 200	Throughput : 400Mbps Concurrent Session : 500,000 Number of Policies : Max 65,535, Rec 2,000	Throughput : 50Mbps Concurrent VPN TUNNEL : Max 1,000, Rec 500
Small Scale Network	SECUI NXG 100	Throughput : 100Mbps Concurrent Session : 375,000 Number of Policies : Max 65,535, Rec 1,000	Throughput : 10Mbps Concurrent VPN TUNNEL : Max 1,000, Rec 100