click pentru a vedea toate pozele
Huawei Quidway® Eudemon 100/200 Firewall
Product Overview
The Quidway® Eudemon 100/200 Firewall (hereinafter referred to as the Eudemon 100/
200) is the new generation of high-speed status firewall, not only supporting a variety of
status detection and address translation functions for protocols, but a powerful attacking
protection capability. It provides such functions as static/dynamic blacklist filtering as well
as a variety of functions in statistical analysis and log. In addition, it supports such features as QoS and VPN, and provides a perfect networking application solution. It has a wide application range, properly supporting the voice and video services (supporting RTSP, H. 323, SIP, and RTSP), and is widely applied in NGN and multimedia.
The Eudemon 100 and Eudemon 200 are based on the Huawei carrier-class hardware
platform and the VRP software platform, which are different in performance levels and
interface specifications, applicable to providing security guarantee to the small and mediumsized networks.
At present, the product has been applied in a great scale both at home and abroad, and it
is sold as far as Europe, Middle-East, South America and Southeast Asia.
Product Features
A Powerful Security Protector
The Eudemon 100/200 100M firewall adopts the latest security technology in this industry,
with its core based on ASPF (Application Specific Packet Filter) of streams, to implement
the maintenance and monitoring of each connection status information and dynamically
filtering the data packets, and it is a powerful protection for internal networks.
It is effectively protected from all kinds of network attacks, for example, eavesdropping
packets, IP address spoofing, source route attacks, address port scanning, Deny of
service attacks; application layer attacks (detection of Java, ActiveX controls, “Trojan”);
as well as intelligent worm virus protective function.
It provides support for a variety of protocols, and implementing status monitoring on
HTTP, FTP, RTSP, SIP, H.323 (including T.120, Q.931, RAS, H.245), HWCC and
general TCP and UDP application.
It has a perfect traffic monitoring feature; Monitoring the data traffic and connection
status, dynamically controlling the connections and bandwidth of each IP, which can
effectively and flexibly prevent the ISP and IDC network from traffic attacks. The perfect
QOS feature can implement the bandwidth control service of such feature streams as
user-defined traffic and attack traffic.
Support for a variety of firewall logs, providing the follow-up function. And it can output
the log in the binary format, except for the text format, in a high-speed way to meet the
application environment requirements for heavy traffic.
The enhanced blacklist function can control the network authority of the users being
attacked by viruses, through which the service of next step can be provided (such as
announcement and online virus-killing).
It provides an open IDS cooperative interface protocol and LIB, which can quickly
cooperate with the IDS system of other manufacturers, such as VenusTech, Is-One,
Orient Legendmaker, Kingnet Security, to jointly construct a comprehensive network
security protection. It adopts the embedded operating system dedicated to Huawei,
which avoids the security holes that are exposed to the general operating system on which common firewalls are used.
It implements the AAA concept according to the RADIUS protocol, to construct the
distributed customer/server security access application control.
Full-featured VPN GW
The Eudemon 100/200 100M firewall is still a full-featured VPN gateway that can securely
transmit data via public networks, and it can construct various kinds of VPN networking
such as remote access and network-to-network. Huawei was the first to put forward the
philosophy of dynamic VPN in this industry, and its headquarters and branches can be
accessed with the dynamic IP address or private IP address, and the (maintenance) tunnels can be automatically created between the VPN equipments. The DVPN technology can realize the establishment of only N -1 channels for the interconnection of the whole network, and the addition of a VPN node requires only one maintenance link, with a good expandability. Compared to the traditional IP VPN network, it is lower in the maintenance cost and more flexible in the network application. The dynamic VPN provides a perfect authentication and encryption feature, to totally ensure the network security of users.
The Eudemon series supports multiple IP VPN access modes, for example, L2TP,
GRE and IPSec, as well as the DVPN that is dedicated to Huawei.
It supports multiple encryption algorithms, 56-bit data encryption standard (DES) or
168-bit 3DES, and it implements the key exchange function following the ISAKMP
protocol frame, IKE.
To obtain a more powerful encryption performance, the Eudemon200 supports the high-speed encryption card. It also provides a dedicated VPN client software, and is user friendly.
Various VPN protocols are implemented strictly following the RFC or related standards,
to ensure that the product can be interconnected and interworked with the VPN equipment of other manufacturers.
NAT Service with Multiple Services
With the development of the Internet, the shortage of IP addresses has become an
increasingly serious problem. In view of the position and technical features of a firewall, it is appropriate to provide the perfect address translation technology on the Eudemon.
The Eudemon series can implement such features as multi-to-multi-address translation,
restriction of local address translation and internal server service. It can simultaneously
translate addresses and ports (PAT), and provide a “Privacy” protection to the internal
network.
The service features of the Eudemon firewall support NAT, including FTP, ICMP, NBT,
QQ and MSN, and it can pass the “User defined” ALG functions.
It supports the perfect multimedia service. It can implement the service that is based
on H.323 (including T.120, RAS, Q.931 and H.245), SIP and RTSP, and it can be
flexibly networked with multimedia MCU, GK, videoconferencing terminal and the VOIP
equipment, supporting the calls between public network and private network and
between private networks.
The Eudemon firewall can not only ensure the security of the multimedia service
network, but it can also implement the isolation of data service from voice service.
Carrier-class Firewall Product
Outstanding processing performance
The firewall requires the configuration of a large amount of ACL rules in the actual application, especially in the current spreading of the worm virus. There are a great number of ACL configurations to close the related ports. The Eudemon 100/200 firewall adopts a fast stream classification algorithm, and the performance of the system cannot
be affected basically in its searching among millions of ACL rules, and its processing speed keeps unchanged, thus ensuring the high speed of ACL searching to improve the integrated performance of the system. The Eudemon 100/200 firewall is based on a dedicated hardware structure. Compared with those firewalls at the same level, it provides a high capacity for adding connections per second, which gives the firewall a powerful anti-attacking capacity.
Flexible service and routing feature
The Eudemon series supports such dynamic routing protocols as RIP and OSPF as well as policy route. It is available with the multi-ISP function, that is to say, the firewall can allocate traffics on the ISP line with different bandwidths as needed so that the users can adjust different Internet-accessing lines based on charges when there are several ISP egresses. When a line fails, the traffic can be switched to other lines automatically to improve the reliability.
Perfect configuration management
The system can be maintained through dialup or remote logging, and it supports the remote management of the VPN tunnel (IPSec); supports two kinds of user management interface modes, CLI and GUI; supports SNMP (V1/V2c/V3). It can be uniformly managed under the large-sized integrated NM software; in addition, it can provide a dedicated high capacity log server software for supporting purposes, as well as a powerful analysis functions and the free mini-log server software.
High Reliability
The Eudemon firewall gives a complete consideration on the high reliability of network application, with the reliability technology of the telecommunication equipment integrated, for example, the chassis and board hardware of Eudemon 200 is of special design; it supports the dual power (1+1 backup), supports the monitoring of the temperature inside the chassis, automatically adjusts the rotary speed of the fans; supports AC/DC input power module, the power supply can adapt to the great changes in AC 85V ~ 264V and DC 36 ~ 75V; interface card, fan and power supply support hot swapping, to fully meet the requirements of network maintenance, upgrading and optimization.
It provides the hot backup mechanism for dual-system status, supporting the Active- Active and Active-Standby mode. Two or more equipments form a hot backup group to avoid the single-point fault of networking, to meet the most complex networking and high reliability requirements for such industries as telecommunication.
Certification and sales license
It obtained the UL, CE, FCC and security specification certification in China, North America, Europe, Austria and Japan and other countries and areas, as well as sales license from the Security Ministry, and such competent authorities as China Information Technology Security Certification Center (CNITSEC), State Secrecy Bureau and the PLA.
At present, this product is being widely applied at home and sold to Europe, Middle
East, South America and Southeast Asia, and it also gets a wide application in NGN,
multi-media, wireless telecommunication network, large/medium-sized enterprise
network and industry network.