FEATURE OVERVIEW. FGX Series firewall. Last updated February 2012

Transcription

1 FEATURE OVERVIEW FGX Series firewall Last updated February 2012

2 Celestix FGX Features Deep Packet Firewall VPN Virtual system DoD/DDoS attach defense Intrusion protection Anti-virus Anti-spam URL iltering Application identiication and control Dynamic routing High availability and load balancing Multiple management modes FGX Series feature overview All-in-one application security protection Integrating IPS, anti-virus, anti-spam, URL iltering, and application protocol identiication and control, FGX is a comprehensive and all-in-one application security gateway. It provides quick, precise, and in-depth security protection against known and unknown risks. Granular content security protection FGX provides granular security protection based on contents against multiple applications, including IM, Web, Web TV, stream media, P2P transfer, web games, stock trading, remote login, encryption agent, and clients, ensuring all-around reliance on content security for users. Expansible virtual firewall FGX supports virtual systems (Vsys). Each virtual irewall can be seen as a totally independent irewall, thus meeting requirements on special deployment, reducing users investment, and enhancing users RoI. Celestix leads green IT by advocating energy-saving and user-friendliness. Flexible network adaptability FGX has lexible network adaptability. It supports functions, such as NAT, static routing, dynamic routing, VLAN, channels, and DHCP. It supports the hybrid working mode of Layer 2 and Layer 3. It supports different numbers of extension interfaces so it is applicable to different network environments. Multiple link redundancy FGX allows control of trafic over multiple WAN links by delivering comprehensive trafic management capability and optimizing the links. It offers high-speed connectivity while maximizing ROI, making optimal use of low-cost, small pipes in combination with high cost links. FGX Series competitive analysis with Sonicwall Sonicwall overview Founded in 1991 Approximately 1,000 employees 28 Global ofices Over 10,000 channel partners worldwide Over 1.8 million security appliances shipped Over 40 million end users protected 125 patents and patent application Sonicwall appliances Low end Mid level High end NSA 240 NSA 3500 NSA E5500 NSA 2400 NSA 4500 NSA E6500 NSA E7500

3 FGX Series feature overview FGX 900 Competitive landscapes Firewall Celestix Sonicwall Cisco Juniper Check Point Fortinet WatchGuard Model FGX 900 NSA 240 ASA 5505 SSG 20 UTM-1 Edge FG 100A Edge X55e Firewall Performance 850 Mbps 600 Mbps 150 Mbps 160 Mbps 190 Mbps 100 Mbps 100 Mbps IMIX Performance 240 Mbps 195 Mbps N/P 90 Mbps N/P N/P N/P VPN Performance 84 Mbps 150 Mbps 100 Mbps 40 Mbps 35 Mbps 100 Mbps 35 Mbps GAV Performance 220 Mbps 115 Mbps N/A N/P N/P 100 Mbps N/P IPS Performance 192 Mbps 195 Mbps N/A N/P N/P 100 Mbps N/P UTM Performance 160 Mbps 110 Mbps N/A N/P N/P N/P N/P New Connections/Sec 14,000 2,000 4,000 2,800 N/P 4,000 N/A Maximum Connections 150,000 32,000/50,000 10,000/25,000 8,000/16,000 8, ,000 10,000 Base HW interfaces 4 x GbE 3 x GbE 6 x 10/100 8 x 10/100 2 x PoE 5 x 10/100 4 x 10/100 8 x 10/100 6 x 10/100 VLAN 10 10/25 3/20 25/ n.p. Virtual System 2 No No No No No No FGX 1500 Competitive landscapes Firewall Celestix Sonicwall Cisco Juniper Fortinet Check Point WatchGuard Model FGX 1500 NSA 2400 ASA 5510 SSG 140M FG 200A w HD UTM X 750 Firewall Performance 1,000 Mbps 775 Mbps 300 Mbps 350 Mbps 150 Mbps 400 Mbps 750 Mbps VPN Performance 100 Mbps 300 Mbps 170 Mpbs 100 Mbps 70 Mbps 100 Mbps 50 Mbps GAV Performance 480 Mbps 160 Mbps N/P N/P 30 Mbps N/P 70 Mbps IPS Performance 360 Mbps 275 Mbps N/A N/P N/P N/P N/P UTM Performance 288 Mbps 150 Mbps N/A N/P N/P N/P N/P New Connections/Sec 34,000 4,000 6,000 8,000 4,000 N/P N/P Maximum Connections 250, ,000 50,000 32, , ,000 75,000 VPN Tunnels N/P 100 VLAN N/P Base HW interfaces 6 x GbE 6 x GbE 5 x 10/100 8 x 10/100 2 x GbE 8 x 10/100 4 x GbE 8 x GbE Fail-over A/A A/P w sync A/P w sync (Optional) A/P A/A A/P A/A A/P A/A A/P A/P Application Firewall Yes (Optional) Yes Yes Limited No Limited Limited Virtual System 4 No No No No No no

4 Celestix FGX FGX 3200 Competitive landscapes Firewall Celestix Sonicwall Cisco Juniper Fortinet WatchGuard WatchGuard Model FGX 3200 NSA 3500 ASA 5510 SSG 140M FG 200A w HD Core X750 Core X1250e Firewall Performance 1,500 Mbps 1,500 Mbps 300 Mbps 350 Mbps 150 Mbps 750 Mbps 1,500 Mbps VPN Performance 272 Mbps 625 Mbps 170 Mpbs 100 Mbps 70 Mbps 50 Mbps 100 Mbps GAV Performance 960 Mbps 350 Mbps N/P N/P 30 Mbps 70 Mbps 100 Mbps IPS Performance 720 Mbps 750 Mbps N/A N/P N/P N/P N/P UTM Performance 560 Mbps 240 Mbps N/A N/P N/P N/P N/P New Connections/Sec 51,000 7,000 6,000 8,000 4,000 N/P N/P Maximum Connections 450, ,000 50,000 32, ,000 75, ,000 VPN Tunnels VLAN NP NP Base HW interfaces 6 x GbE 6 x GbE 5 x 10/100 8 x 10/100 2 x GbE 8 x 10/100 8 x GbE 8 x GbE Fail-over A/A A/P w sync A/P w sync (Optional) A/P A/A A/P A/A A/P A/P A/P Application Firewall Yes (Optional) Yes Yes Limited No Limited Limited Virtual System 6 No No No No No no FGX 6200 Competitive landscapes Firewall Celestix Sonicwall Cisco Juniper Check Point Fortinet WatchGuard Model FGX 6200 NSA 3500 ASA 5510 SSG 320M UTM FG 200A w HD Peak X5500e Firewall Performance 2,950 Mbps 2,750 Mbps 300 Mbps 450 Mbps 400 Mbps 150 Mbps 2,000 Mbps VPN Performance 1,516 Mbps 1,000 Mbps 170 Mpbs 175 Mbps 190 Mbps 70 Mbps 400 Mbps GAV Performance 1,240 Mbps 690 Mbps N/P N/P N/P 30 Mbps 140 Mbps IPS Performance 1,088 Mbps 1,400 Mbps N/A N/P N/P N/P N/P UTM Performance 840 Mbps 600 Mbps N/A N/P N/P N/P N/P New Connections/Sec 65,000 10,000 6,000 10,000 N/P 4,000 N/P Maximum Connections 650, ,000 50,000 48, , , ,000 VPN Tunnels 1,500 1, n.p VLAN N/P Base HW interfaces 6 x GbE 6 x GbE 5 x 10/100 4 x GbE 4 x GbE 8 x 10/100 8 x GbE Fail-over A/A A/P w sync A/P w sync 8 x GbE Application Firewall Yes (Optional) Yes Yes Limited Yes No Limited Virtual System 8 No No No No No no

5 FGX Series feature overview Competitive Strength of Celestix FGX Vsys (virtual system) Allows partitioning into multiple irewall systems, each with a unique set of administrators, policies, VPNs and other security control. High availability features: FGX supports multilayer high availability. L2: FGX supports Ethernet Channel and Redundant Interface (these two types of interface are not available features in SonicWALL products). This feature provides multiple interface communication capability providing good stability and disaster recovery. For instance, 4 interfaces are bound into 1 channel. If 1 interface fails, only the bandwidth of 1 interface is lost without impacting communications on the whole irewall. So it is a fundamental method to ensure the interface scalability and reliability. L3~L7: FGX supports active/active mode in HA (Sonicwall support only active/ standby mode in HA). The Active-Active unavailability will make two irewalls unable to process trafic simultaneously. One irewall can only take over the trafic of the other that has failed. FGX supports VPN redundant gateway: VPN connection is usually site to site, while FGX irewalls can provide VPN redundant gateways based on it, that is, the irewall can connect the backup redundant gateway automatically if the peer gateway is invalid. This feature is used to ensure real-time and reliability for users business, so it is a fundamental feature of VPN. IPS engine Celestix FGX Event Language (CFEL) engine provides event descriptions in plain English language. By analyzing application protocols in a granular manner, events are reported with more accuracy and higher performance. To protect the popular applications such as http, mail, ftp, dns and so on, FGX will check each element in these protocols. e.g. Administrator can control the method in http: put, get, push... Information about FGX Anti-Virus, Anti-Spam and URL Filtering ClamAV Founded in 2002, ClamAV is one of the most commonly-used open source antivirus and antimalware products in the world. Nearly one million unique IP addresses download ClamAV updates daily from 120 mirror servers located in 38 countries. Renowned for its speed and accuracy, ClamAV has been adopted by network security solution and service providers worldwide and is currently integrated within leading enterprise solutions, including Uniied Threat Management Systems (UTM), Secure Web Gateways and Secure Mail Gateways, to identify deeply embedded threats such as viruses, trojans, spyware, and other forms of malware. ClamAV s cutting edge security technology is a triumph of the open source model. In addition to continual innovations to the ClamAV antivirus engine, the ClamAV core team and ClamAV community deliver daily signature updates to its ever-growing virus database of over 300,000 signatures.

6 Celestix FGX Contact USA +1 (510) UK +44 (0) Singapore India Japan +81 (0) High performance antivirus protection ClamAV s open source antivirus delivers quality and coverage comparable to leading commercial antivirus solutions. At LinuxWorld 2007, the live Fight Club event, conducted by network gateway vendor Untangle, pitted 10 industry-leading antivirus solutions against each other to see which products could detect all 25 viruses in the test. ClamAV detected 100% of the viruses encountered one of only three antivirus products to catch all 25 viruses. The ClamAV engine The ClamAV signature database, updated multiple times a day, currently contains more than 300,000 signatures, including generic signatures that are able to detect new variants at a very high rate of detection. Features command-line scanner fast, multi-threaded daemon with support for on-access scanning milter interface for sendmail advanced database updater with support for scripted updates and digital signatures virus scanner C library on-access scanning virus database updated multiple times per day (see home page for total number of signatures) built-in support for various archive formats, including Zip, RAR, Tar, Gzip, Bzip2, OLE2, Cabinet, CHM, BinHex, SIS and others built-in support for almost all mail ile formats built-in support for ELF executables and Portable Executable iles compressed with UPX, FSG, Petite, NsPack, wwpack32, MEW, Upack and obfuscated with SUE, Y0da Cryptor and others Spam Assassin Spam Assassin is a free rule-based spam ilter which also supports several blacklists, Spam Assassin is a Perl-based application which is usually used to ilter all incoming mail for one or several users. It can be used as a standalone application, as a client or as a combination of both. Spam Assassin comes with a large set of rules which are applied to determine whether an is spam or not. To decide, speciic ields within the header and the body are typically searched for certain regular expressions, and if these expressions match, the is assigned a certain score, depending on the test, and several headers are added to the mail. DMOZ FGX URL iltering is based on open source signature library DMOZ. DMOZ or the Open Directory Project is a web directory with almost 5 million websites listed in different categories. It is a human edited directory run by volunteers, but owned by AOL. Webmasters are always keen to get their sites listed in DMOZ as it is a widely held belief that having a website listed at DMOZ will help a site rank higher in the search engines. There certainly is plenty of doubt that this is actually the case. Because of this widely held belief, webmasters are very keen to get their sites listed and sometimes go to great lengths to get listed Celestix Networks Inc. All rights reserved. Version 1.0