Example: barber

Eudemon8000E-X Series - huawei.com

6-1 Eudemon8000E-X SeriesAs networks enter the IP era, more applications are integrated into the traditional broadband network. The network bandwidth, threats, and network attack intensity have multiplied exponentially, forcing companies and carriers to constantly evolve their network architectures. With data communication entering the era of terabit, the Eudemon8000E-X steps up the demand by providing a scalable and highly reliable security service platform with terabit capacity. It offers a range of security services, such as IPv6 security, virtual security systems, VPN, and intrusion prevention, to satisfy the highly integrated, rapidly responsive, high-speed processing, and continuously evolving network demands from data centers, carriers, ISPs, and SeriesComprehensive High-End Security Gateway6-2 Eudemon8000E-X SeriesDescriptionHighlightsThe Eudemon8000E-X Series products include three sub-categories: Eudemon8000E-X3, Eudemon8000E-X8, and Eudemon8000E-X16, providing industry-leading security protection and scalability with up to Tbit/s firewall throughput, over billion concurrent connections, and up to 720 Gbit/s VPN the dedicated multi-core processing chip and distributed hardware platform, the Eudemon8000E-X breaks the security limitations on CPU capability, providing leading service processing

6-2 Eudemon8000E-X Series Description Highlights The Eudemon8000E-X series products include three sub-categories: Eudemon8000E-X3, Eudemon8000E-X8, and

Tags:

  Product

Information

Domain:

Source:

Link to this page:

Please notify us if you found a problem with this document:

Other abuse

Transcription of Eudemon8000E-X Series - huawei.com

1 6-1 Eudemon8000E-X SeriesAs networks enter the IP era, more applications are integrated into the traditional broadband network. The network bandwidth, threats, and network attack intensity have multiplied exponentially, forcing companies and carriers to constantly evolve their network architectures. With data communication entering the era of terabit, the Eudemon8000E-X steps up the demand by providing a scalable and highly reliable security service platform with terabit capacity. It offers a range of security services, such as IPv6 security, virtual security systems, VPN, and intrusion prevention, to satisfy the highly integrated, rapidly responsive, high-speed processing, and continuously evolving network demands from data centers, carriers, ISPs, and SeriesComprehensive High-End Security Gateway6-2 Eudemon8000E-X SeriesDescriptionHighlightsThe Eudemon8000E-X Series products include three sub-categories: Eudemon8000E-X3, Eudemon8000E-X8, and Eudemon8000E-X16, providing industry-leading security protection and scalability with up to Tbit/s firewall throughput, over billion concurrent connections, and up to 720 Gbit/s VPN the dedicated multi-core processing chip and distributed hardware platform, the Eudemon8000E-X breaks the security limitations on CPU capability, providing leading service processing capability and scalability.

2 At the same time, all components are redundant, establishing a strong reliability equivalent of core routers, and further ensuring service continuity under high-speed network environment. The distributed technology uses line-rate intelligent traffic splitting for data forwarding. Starting with the first packet, all data flows will be evenly distributed to service modules to avoid bottleneck; so that service processing keeps up with linearly increasing service modules, sustainably supporting long-term user network Eudemon8000E-X provides various I/O interface modules (LPU) for external connections and data transmissions. The I/O interface and service processing modules use similar interface slots, where they may customize security solutions by matching user network interface and capability demands with I/O interface and service processing modules.

3 The Eudemon8000E-X provides 10G POS, 10GE, 40GE, and 100GE interfaces and cross-board port bundling, flexibly adapting to various conditions, such as high interface capacity and density. The Eudemon8000E-X Service Processing Unit (SPU) processes all services. Each SPU has a subslot, which can house an expansible subcard, implementing flexible service combination. The Eudemon8000E-X also provides 40 Gbit/s to 160 Gbit/s throughput. The SPU uses multi-core and multi-processor hardware to achieve various service features and software to achieve the heartbeat detection mechanism between an SPU and LPU as well as the backup mechanism between SPUs. If a security service module fails, all functions immediately re-distribute services to other service units without interrupting Advanced "NP + Multi-Core + Distributed" Architecture Linear Multiple Capability Breaks Traditional BottleneckThe Eudemon8000E-X employs the core router hardware platform to provide modularized components.

4 The interface module, based on dual NPs, ensures the line rate forwarding of interface traffic. The SPU, based on the multi-core and multi-thread architecture, ensures high-speed concurrent processing of various services, such as NAT and VPN services. The processing capability is not affected by CPU's processing capability limits. The LPU and SPU function separately. Multiple SPUs are deployed to linearly increase the overall performance, which provides unparalleled expandability and flexibility in protecting the network security, and ensures low investments up front with capability expansion Service Processing Capability Effectively Protecting Key ServicesBecause of its evolutionary architecture, the Eudemon8000E-X takes the leading role in many areas, including firewall throughput and maximum number of concurrent connections. Because the Eudemon8000E-X employs the dedicated traffic splitting technology, the overall performance multiplies linearly as the number of SPUs increases.

5 The maximum firewall throughput has reached world leading position of Tbit/s; the maximum number of concurrent connections is billion; the maximum number of virtual firewalls is 4,096. These features satisfy the strong demands from carriers, financial service providers, government sectors, and energy SeriesMost Stable and Reliable Security Gateway product - Fully Redundancy Ensuring Security Service ContinuityNetwork security has always been a key element of enterprise operation. In order to ensure service continuity under high-speed network environment, while supporting key technologies, such as active/standby networking, active/active networking, interface aggregation, VPN redundancy, and SPU load balancing, the Eudemon8000E-X also supports unique dual-MPU active/standby switchover, providing a firewall with high-end router reliability and ensuring service continuity at key nodes. The mean time between failures (MTBF) of the Eudemon 8000E-X reaches up to 200,000 hours, and the failover time is less than 1 second, which truly ensures consistent and stable service VPN Performance Adapting the Demands for Encrypted Transfer of Massive ServicesWith a rising number of network applications, more services require secure transmissions over the public network.

6 Subsequently, services that need 100-Gigabit VPN access gateway emerge, such as mobile security access, short message service (SMS) push, and email push services. The Eudemon8000E-X supports VPN gateway redundancy. It provides a maximum of 720 Gbit/s encryption performance and supports one million concurrent VPN tunnels and is the VPN access gateway with the highest performance for the moment. It also supports 4over6 and 6over4 VPN technologies to meet VPN traffic needs during network evolution. Besides, the Eudemon8000E-X supports the IKEv2 protocol, enhancing functions, such as user authentication, packet authentication, and NAT traversal, thereby eliminating the risks of man-in-the-middle attacks and denial of services. It also supports EAP-SIM and EAP-AKA wireless authentication protocols to ensure the security during access to wireless Practical Application Security Features Preventing External Threats & Improving Network SecurityBesides supporting basic firewall functions, the Eudemon8000E-X also provides the next-generation firewall features, such as intrusion prevention, antivirus, and URL filtering.

7 With the advanced intrusion prevention engine and signature database, the Eudemon8000E-X is capable of defending against threats, such as system vulnerabilities, unauthorized automatic downloads, and abnormal protocols. A single vulnerability signature covers thousands of attacks. Supplemented by the globally-deployed honeypot system, the Eudemon8000E-X captures the latest attacks, worms, and Trojans horses, providing the capability to defend against zero-day attacks. In antivirus processing, the Eudemon8000E-X employs an intelligent awareness engine (IAE) for in-depth traffic analysis, identifies the protocol type, and then matches up with the antivirus signature database, effectively improving the virus detection accuracy and efficiency. Based on the more than 85 million URL categories, the Eudemon8000E-X is capable of managing and controlling user's Internet access to comply with national law and regulation as well as company requirements on Internet order to further enhance the practicality of application security, the Eudemon8000E-X uses internal bypass and dedicated module technology, bypassing services in need of intrusion prevention into dedicated service modules for processing.

8 The process not only improves the service processing capability, but also does not affect firewall's basic services, ensuring overall service SeriesSpecificationsModelEudemon8000E-X3 Eudemon8000E-X8 Eudemon8000E-X16 Performance and CapacityFirewall throughput (maximum)120 Tbit/sFirewall throughput (composite traffic)120 Tbit/sMaximum number of concurrent sessions160,000,000720,000,0001,440,000, 000 IPSec VPN performance (AES)56 Gbit/s336 Gbit/s720 Gbit/sMaximum number of concurrent IPSec VPN tunnels128,000768,0001,000,000 Expansion and I/OExpansion slots3816 MPU slots2 SPUF irewall and application security SPUsLPUS upports GE, 10GE, 40GE, and 100GE Comprehensive CGN Features For Flexible IPv6 TransitionWith the exhaustion of IPv4 addresses, networks need to smoothly transit into IPv6 networks while ensuring the sound service experience. The Eudemon8000E-X supports various transition technologies, including NAT44(4), DS-Lite, 6RD, and NAT64, providing a highly-efficient, flexible, reliable, and economy solution for carrier network evolution and service transition.

9 NAT44 (4) greatly increases the utilization of IPv4 addresses, easing the IPv4 address exhaustion problem. DS-Lite not only allows a new network directly entering IPv6 networks, but also is compatible with many IPv4 applications on the live networks. Based on the existing IPv4 infrastructure, 6RD rapidly provides users with IPv6 intervention capability. NAT64 enables IPv6 networks to access IPv4 networks. The Eudemon8000E-X also provides the NAT tracing function for NAT44 and Abundant Virtualization For Cloud Network DeploymentWith advent of the cloud computing era, cloud computing, a technology founded on virtualization and high-speed Internet, faces security challenges. The Eudemon8000E-X provides high throughput capability and abundant virtual system functions. It supports multi-faceted virtualization function, including resource virtualization, configuration virtualization, and forwarding virtualization, responding to each and every user's network security needs.

10 Resource virtualization provides customized virtual resources by allocating different resources for different virtual systems. Based on tenant's management strategy, management virtualization supports personalized policies, log management, and auditing for each standalone virtual firewall. Forwarding virtualization provides customized service processing. The forwarding places between virtual systems are isolated. When the resource of one virtual system is depleted, it does not affect other virtual systems' operations. The virtual systems are logically isolated, thereby securing tenants' data in each virtual SeriesSecurity FeaturesModelEudemon8000E-X3 Eudemon8000E-X8 Eudemon8000E-X16 Dimensions, Power Supply, and Operating EnvironmentDimensions (H x W x D)175 mm x 442 mm x 650 mm (4 U, DC)220 mm x 442 mm x 650 mm (5 U, AC)620 mm x 442 mm x 650 mm (14 U)1420 mm x 442 mm x 650 mm (32 U)WeightEmpty: 15 kg (DC)Full configuration: 32 kg (DC)Empty: 25 kg (AC)Full configuration: 42 kg (AC)Empty: kgFull configuration: 113 kgEmpty: kgFull configuration: 229 kgAC power supply90 V AC to 275 V AC; 175 V AC to 275 V AC (recommended)DC power supply 72 V to 38 V.


Related search queries