Firewall/IPS

30/06/2016 - 12:05

1. Cisco - Firewall ASA with FirePower service
The outstanding features:

  • Full range of features of the new generation firewall such as IPS, anti-virus, and VPN IPSec /SSL technologies offers high security capabilities.
  • Manage User and Application-based access control, reduce the ability being attacked by viruses and worms, malware protection, content filtering and connection remote user or remote Site.
  • Scalability and adaptable recognition and Mitigation Services architecture: This product line is built on a modular architecture, so scalability of the device is very large and can fully meet the security requirements for the network.
  • Minimize operating and development costs: Multiple features product line Cisco ASA 5500-X allows users to configure and administer follow a system and a defined standard, which helps reduce operating and system administration costs.
  • Cisco ASA Solution with FirePower use the system Cisco FireSIGHT Management Center to manage, monitor, configure. The system will monitor the entire IT system in real time and give administrators an overview of the state of security of the whole system.
  • ASA firewall equipment integrated with FirePower to help protect the safety of the entire information system. Whenever there is any danger (threat): Unauthorized access connection into the area that policy does not allow, appears intentional attacks as malware, denial of service attacks from outside the Internet, access the system attacks, with sessions illegal websites and provide alerts to the administrator.

Some product lines:

ASA5512-SSD120-K8

Cisco ASA 5512-X Firewall Edition; includes firewall services, 250 IPsec VPN peers, 2 SSL VPN peers, 6 copper GE data ports, 1 copper GE management port, 1 AC power supply, DES encryption, and solid-state drive (SSD) 120 GB

ASA5512-SSD120-K9

Cisco ASA 5512-X Firewall Edition; includes firewall services, 250 IPsec VPN peers, 2 SSL VPN peers, 6 copper GE data ports, 1 copper GE management port, 1 AC power supply, 3DES/AES encryption, SSD 120 GB

ASA5515-SSD120-K8

Cisco ASA 5515-X Firewall Edition; includes firewall services, 250 IPsec VPN peers, 2 SSL VPN peers, 6 copper GE data ports, 1 copper GE management port, 1 AC power supply, DES encryption, SSD 120 GB

ASA5515-SSD120-K9

Cisco ASA 5515-X Firewall Edition; includes firewall services, 250 IPsec VPN peers, 2 SSL VPN peers, 6 copper GE data ports, 1 copper GE management port, 1 AC power supply, 3DES/AES encryption, SSD 120 GB

ASA5525-SSD120-K8

Cisco ASA 5525-X Firewall Edition; includes firewall services, 250 IPsec VPN peers, 2 SSL VPN peers, 6 copper GE data ports, 1 copper GE management port, 1 AC power supply, DES encryption, SSD 120 GB

ASA5545-2SSD120-K9

Cisco ASA 5545-X Firewall Edition; includes firewall services, 250 IPsec VPN peers, 2 SSL VPN peers, 6 copper GE data ports, 1 copper GE management port, 1 AC power supply, 3DES/AES encryption, 2 SSD 120 GB

ASA5555-2SSD120-K8

Cisco ASA 5555-X Firewall Edition; includes firewall services, 250 IPsec VPN peers, 2 SSL VPN peers, 6 copper GE data ports, 1 copper GE management port, 1 AC power supply, DES encryption, 2 SSD 120 GB

 

ASA integration firepower service:

ASA5506-FPWR-BUN

ASA 5506-X with FirePOWER Svcs. Chassis and Subs. Bundle

ASA5506W-FPWR-BUN

ASA 5506W-X with FirePOWER Svcs. WiFi Chassis and Subs. Bundle

ASA5508-FPWR-BUN

ASA 5508-X with FirePOWER Svcs. Chassis and Subs. Bundle

ASA5516-FPWR-BUN

ASA 5516-X with FirePOWER Svcs. Chassis and Subs. Bundle

ASA5512-FPWR-BUN

ASA 5512-X with FirePOWER Svcs. Chassis and Subs. Bundle

ASA5515-FPWR-BUN

ASA 5515-X with FirePOWER Svcs. Chassis and Subs. Bundle

ASA5525-FPWR-BUN

ASA 5525-X with FirePOWER Svcs. Chassis and Subs. Bundle

ASA5545-FPWR-BUN

ASA 5545-X with FirePOWER Svcs. Chassis and Subs. Bundle

ASA5555-FPWR-BUN

ASA 5555-X with FirePOWER Svcs. Chassis and Subs. Bundle

 

2. Checkpoint - Firewall Checkpoint
The outstanding features:

  • All in one Security Solutions

+ Next Generation Firewall (NGFW): Identify and control applications by the user and the content inside scanned to analyze and block threats using IPS and Application Control

+ Next Generation Secure Web Gateway (SWG): Activating security using Web 2.0 with multi-layer protection in real time against the dangers of malware with Application Control, URL Filtering, Antivirus và SmartEvent.

+ Next Generation Data Protection (NGDP): Protect sensitive information accidentally lost, allowing users to have policies appropriate data processing to troubleshoot in real time with IPS, Application Control và DLP

+ Next Generation Threat Prevention (NGTP): Allows multi-layer protection to prevent threats with IPS, Application Control, Antivirus, Anti-bot, URL Filtering và Email Security

+ With just one device, you have in hand more security solutions. With Software Blade technology, you can easily expand the other security features.

  • Integrated Security Management: Devices can be managed with the integrated security management or from the unified management centralize. When using the local management, the device can manage it and other neighboring devices.
  • Connect remotely from mobile devices: Each device will allow 5 remote users to connect to use Mobile Access Blade. This license provides a secure remote connections to company resources from a large number of devices added as smartphones, tablets, PCs.
  • GaiA- Secure operating system consolidation: Is the next generation security operating system for the device checkpoint, open servers and virtualized gateways. GAiA combines the best features from IPS and SecurePlatform into a consolidated operating system better efficiency and more robust performance. When update the operating system, customers will be beneficial from the expansion of connectivity and reducing operating costs.

CPAP-SG2200-NGFW

2200 Next Generation Firewall Appliance (with FW, VPN, ADNC, IA, MOB-5, IPS and APCL Blades); bundled with local management for up to 2 gateways.

CPAP-SG4400-NGFW

4400 Next-Gen Firewall (with FW, VPN, ADNC, IA, MOB-5, IPS and APCL) bundled with local management for up to 2 gateways

CPAP-SG4800-NGFW

4800 Next-Gen Firewall (with FW, VPN, ADNC, IA, MOB-5, IPS and APCL) bundled with local management for up to 2 gateways

CPAP-SG12400-NGFW

12400 Next-Gen Firewall (with FW, VPN, ADNC, IA, MOB-5, IPS and APCL) bundled with local management for up to 2 gateways

 

3. Pfsense -Firewall Pfsense
The outstanding features:
- Loadbalancing: With network traffic mainly used by many businesses is access to the Internet, so load balancing features are important when incidents occur congestion, pfsense supports load balancing capabilities to avoid bottlenecks in the important point. Policy base routing feature help allocate the traffic load on the 2 line, the priority for the VIP customers, who use higher bandwidth internet, also supports the backup transmission line when a failure.
-  VPN: Interconnection "virtual private network" via the internet infrastructure of service provider helps management centralize.

-  App control: Implementing access control, blocking users from accessing malicious websites, download torrent,... affecting network

-  Firewall, IPS: Access control and intrusion prevention, increase the security of the system

Some product lines:

 
     SG- 2220

 

CPU: Intel "Rangeley" Atom C2338 1.7 Ghz, CPU Cores: Two Cores, Networking: 2x Gigabit Intel Ethernet Ports, Storage: 4GB eMMC Flash on board, Memory: 2GB DDR3L, Expansion: 1x M.2, 1x miniPCIe, Port: Mini USB,USB Ports: 1x 2.0

 
 
     SG- 4860

 

CPU: Intel "Rangeley" Atom C2558 2.4 Ghz with Intel QuickAssist, CPU Cores: Quad Core, Networking: 6x Gigabit Ethernet Ports total: 4x Intel I350 (SoC Intel I354 Quad GbE on-die MACs) 2x Intel I211, Storage: 4GB eMMC Flash on board, Memory: 8GB DDR3L, Expansion: 1x mSATA, 2x miniPCIe,Console Port: Mini USB,USB Ports: 2x 2.0

 
 
       SG- 8860

 

CPU: Intel "Rangeley" Atom C2758 2.4 Ghz with Intel QuickAssist, CPU Cores: 8 Core, Networking: 6x Gigabit Ethernet Ports total: 4x Intel I350 (SoC Intel I354 Quad GbE on-die MACs), 2x Intel I211, Storage: 64GB eMMC Flash on board, Memory: 8GB DDR3L, Expansion: 1x mSATA, 2x miniPCIe, Console Port: Mini USB, USB Ports: 2x 2.0, LED: Power/Status/SATA Activity

 

4. Fortinet - Firewall Fortigate
The outstanding features:

  • Full of features of next-generation firewall such as IPS, anti-bot, anti-virus and VPN IPSec/SSL technology, bring high security capabilities.
  • Manage User and Application-based access control, reduce the ability being attacked by viruses and worms, malware protection, content filtering and connect remote users or remote Site.
  • Ability to expand the device is very large and can fully meet the requirements for network security.
  • Reduce operating costs and development: product line for users the ability to configure and manage a system and a defined standard, which helps reduce operating and system management costs.
  • The ability to integrate with AD help manage access by users with flexibility, easy to use.

Some product lines:

Fortigate 60D

1.5 Gbps throughput performance ensures your network security won’t be a bottleneck, Integrated switch and options for PoE simplify your network infrastructure, Up to 2x WAN, 7x LAN and 1xDMZ interface ports (2x Power over Ethernet ports on PoE models)

Fortigate 100D

FG-100D 20x GE RJ45 ports (including 1x DMZ port, 1x Mgmt port, 2x HA ports, 16x internal switch ports), 2x shared media pairs (including 2x GE RJ45, 2x GE SFP slots), 32 GB onboard storage. Maximum managed FortiAPs (Total / Tunnel) 64 / 32.

FortiGate 140D

40x GE RJ45 (including 36x switch ports, 2x Mgmt/HA ports, 2x WAN ports), 2x GE SFP DMZ slots, 32 GB onboard storage.Maximum managed FortiAPs (Total / Tunnel) 64 / 32.

FortiGate 140D-POE

FG-140D-POE 40x GE RJ45 (including 16x PoE ports, 20x switch ports, 2x Mgmt/HA ports, 2x WAN ports), 2x GE SFP DMZ slots, 32 GB onboard storage.Maximum managed FortiAPs (Total / Tunnel) 64 / 32.

FortiGate 600D

2x 10 GE SFP+ slots, 10x GE RJ45 ports, 8x GE SFP slots, FortiASIC NP6 and CP8 hardware accelerated, 120 GB onboard SSD storage

FortiGate 800C

2x 10 GE SFP+ slots, 12x GE RJ45 ports, 8x Shared Media pairs (including 8x GE RJ45, 8x GE SFP slots), 4x GE RJ45 with Bypass Protection, FortiASIC NP4 and CP8 hardware accelerated, 60G SSD onboard storage

 

Contact us for more information here.