Network Scenarios
1. For SMB
In order to keep communication between headquarters and level-2 network through internet, level-1 and level-2 network of small and medium businesses are inter-connected.
With the deployment of Venusense UTM, small and medium businesses establish their own security infrastructure under a unified architecture to resolve problems like integration of security products, shortage of capital and technology, and lacking of solutions for their security issues.
Venusense UTM products are deployed between the internet outlet of the level-1 network in headquarters and level-2 branch network. UTM, FW, AV, and IPS functions enabled, provides total protection against virus and attack threats from internet. It can also be used as VPN gateway. When turn on the VPN tunnel between each level-2 networks and the headquarters, it is possible to guarantee the confidentiality of inter-communication. Employees on business trips can establish VPN tunnel at any time from VPN client to the headquarters side for accessing inner resources of the company and realizing efficient and secure network application.
2. For Enterprises
As for large multi-national enterprises, the network scale is large with many endpoints and business systems. The establishment of network is similar to that of the MAN. With regard to security construction, there are many construction points. In addition to the internet outlet of the group headquarters, its affiliates are also having the demands of security protection.
Venusense UTM deployed at the internet outlet of the headquarters can prevent the intrusion attacks from the internet and provide employees on business trips with VPN access to ensure the confidentiality of communication.
Venusense UTM deployed at the outlet of each branches can not only guarantee the completeness and confidentiality of business communication between each branch and the headquarters, but also effectively control unauthorized visit among different bodies, as well as protect against large-scale explosion of virus in the intranet.
Venusense UTM can provide unified management platform which manage all the UTM products in the whole network. It can also provide detailed and intuitive report. Thus, it enables the administrator to find out the security risks and their trend in the whole network quickly for formulating a security strategy.
Venusense UTM series products have various security functions, such as Firewall, VPN, Intrusion Prevention System, Anti-Virus, Internet Access Management, Anti-DOS, Contents Filtering, Anti-Spam, etc, as well as support Qos, high availability (HA), and log audit, etc. Thus, it can provide the network border with total and real-time security protection and help users to manage the increasing treats.
Perfect feature of Firewall
● Support Access Control based on the methods like Source IP, Destination IP, Source port, Destination port, Time, Service, User, Files, URL, Key words, Email, Script and MAC address
● Support Traffic Control, number of sessions control, IP+MAC binding，User Authentication, etc.
IPS – Strong protection system
● Most perfect attacking feature library in the industry, which comprises more than 50 categories, more than 2000 items of intrusion attacking features.
● Analysis technology of vulnerability mechanism, precisely protection of attacks of hackers, worms, Trojans, and backdoors.
● Application restoring ad reassembling technology, curb the spread of spyware, grayware, and fishing.
● Network abnormity analysis technology, total protection against DoS attack.
Leading network Anti-Virus technology in the industry
● Document infection virus, macro virus, script virus, worm, Trojan, malware, grayware, the total virus libraries up to more than 150,000 types.
● According to their hazard degrees, the types of virus are classified into prevalent libraries, high risk libraries, and common libraries.
Practical NetFlow monitoring system
● Usage trend analysis of historical bandwidth, bandwidth application distribution, bandwidth usage real-time statistics, and IP flow ranking, etc.
Totally removing Spam with various methods
● Black list, white list, and traceability check.
● Virus scanning, filtering by attachment types and sizes, and filtering by key words, etc.
Secure and abundant VPN make the networking simpler
●Abundant measures: GRE, IPSec, L2TP, SSL VPN.
●High performance: VPN hardware accelerating card.
●Flexible deployment: Hub-Spoken, Full-Mesh, DVPN.
Perfect control ability to P2P, IM, stream media, network game, and stock software
● P2P control: block or limit the speed of Emule, BitTorrent, Maze and Kazaa, etc.
● IM control: IM log-in control, file transferring blocking and scanning for virus based on black and white list; major IM software supported, such as QQ, MSN, Yahoo Messenger, Gtalk, Skype and etc.
●Stream media control: block or limit the speed of stream media application, support KAmun ppfilm, PPLive, PPStream, QQ live, TVAnts, Feidian network TV, and Mop Podcast Bar, etc.
●Network game control: block common network games, such as world of warcraft etc.
● Stock software control: block common stock software.
Strong log and report function
● Abundant record content: it is possible to record the log of firewall, attacks, virus, bandwidth usage, Web visit, Mail sending, key assets visit, and user log-in, etc.
● Fast inquiry of the log: can inquire the IP address, port, time, log level, and key words of the log content, etc.
● The reports are customized according to demands: according to the specific demands of users, can customize the contents of the report, the title of the report, enterprise LOGO, as well as to obtain the report file in various format.
Convenient and centralized management functions
● Through the use of centralized management center, to realize unified management, real-time monitoring, centralized update, and topological exhibition of various devices.