Multi-Function Firewall 2nd Edition - ymsys.co.kr

1 Multi-Function Firewall 2nd Edition Multi-Function Firewall 2nd Edition 1.. 2. SECUI MF2 . 3. SECUI MF2 . 4. SECUI MF2 Series . - . - . - Next Generation Firewall . 1.. UTM .. Application http(80).. https(443). PC/DDoS .. Beyond Korea, Go Global 4. 1.. / .. IPv6 .. IPv4 .. Beyond Korea, Go Global 5. Next Generation Firewall 1.. Next Generation Firewall . Next Generation Firewall (NGFW) . UTM (Multi Function Firewall ) Next-Generation Firewall Beyond Korea, Go Global 6. SECUI MF2 . - SECUI MF2. - SM DPI. - SC FDE. Multi-Function Firewall 2nd Edition 2. SECUI MF2 . Next-Generation Firewall . NGFW. '11 40G. SECUI MF2 (NG Firewall ). UTM SECUI NXG , eXshield '07 4G, 17G (UTM, Multi Function Firewall ). Appliance '03 2G. NXG ( , VPN). Software '01 1G. secuiWall ( ). Beyond Korea, Go Global 8. SM DPI (SECUI Multi-stage Deep Packet Inspection) 2. SECUI MF2.

2 ( ) Deep Packet Inspection , .. IPS/DDoS Application Control Anti-Virus/Spam - PCRE - - File-based . - - Application Control - File-based 10 . - Anti-DDoS - User ID Stream-based ( ). Policy Virtual Domain IPS/DDoS. Application Control Anti-Virus/Spam DATA HEADER. Beyond Korea, Go Global 9. SC FDE (SECUI Clustering-based Flow Distribution Engine) 2. SECUI MF2 . 64 Bit SecuiOSTM Multi-Core . (SMP) .. Balancer (Core Resource Flow). Resource Checker NIC. Multi Core CPU. FULL. Core Thread Thread NIC. Input Core Thread Output Thread NIC. Core Thread Thread NIC. Core NIC Core Core NIC Core Beyond Korea, Go Global SECUI MF2 . SECUI MF2 . - - VPN (IPsec / SSL / Mobile). - Application Control - IPS & DDoS. - Web Filter - Web Server Protection - SMART HA - Anti-Virus - SMART NAT ( Policy Based NAT ) - Anti-Spam - - . - - . - IPv6 - (SECUI CM).

3 SECUI MF2 3. SECUI MF2 . Application Control Firewall Web Server Protection VPN.. - IPSec VPN. Anonymizer . - SSL VPN. - Mobile VPN. SMART HA, By-Pass IPS & DDoS LACP, LLCF. Anti-Virus Multicast (PIM-SM, IGMP). Anti-Spam RIP, OSPF, BGP. - RBL (Real-time Blocking List) SMART NAT (Policy Based). PBR (Policy Based Routing). Beyond Korea, Go Global 12. Application Control 3. SECUI MF2 .. Application Control . - , IP User ID . Beyond Korea, Go Global 13. Web Filter 3. SECUI MF2 . URL Filter . - IP (URL IP ). - URL URI . - . Anonymizer HTTP request (Proxy ). Anonymizer Servers . Proxy . Anomymizer Update Internet .. Update Servers Beyond Korea, Go Global 14. SMART HA (High Availability) 3. SECUI MF2 . Router, Bridge Advanced HA . HA Port Bonding Port . Plug-in . HA Hot Swap . Router Mode Bridge Mode L3.. Plug-in . Hot Swap MAX . 16 .. DMZ . HA.

4 L3 HA L2 switch Beyond Korea, Go Global 15. SMART NAT (Policy Based NAT) 3. SECUI MF2 . PB NAT (Policy Based NAT) . NAT . 1:1, 1:M, N:M, 1:N NAT . ( ). Client Web server ( ). External Internal Beyond Korea, Go Global 16. (Grouping, Drag & Drop) 3. SECUI MF2 .. Drag & Drop . , / . Drag & Drop . / . Beyond Korea, Go Global 17. (URL / ) 3. SECUI MF2 . LDAP/ RADIUS . URL URL , . URL , URL . LDAP/RADIUS. SECUI MF2. Object List User Group A. Policy Source IP Object Destination IP Object . User Group B. User Group C.. Beyond Korea, Go Global 18. 3. SECUI MF2 .. One Click .. Variety . DDoS . Detail Command .. Beyond Korea, Go Global 19. IPv6 3. SECUI MF2 . IPv6 IPv6 / . IPv4/IPv6 . IPv4 IPv6 . IPv4. IPv6 IPv4 IPv6. IPv6. IPv4 IPv4. IPv6 IPv6. Beyond Korea, Go Global 20. 3. SECUI MF2 . L4 Active-Active HA( ) .. DMZ DMZ .. Beyond Korea, Go Global 21.

5 VPN (IPSec / SSL / Mobile) 3. SECUI MF2 . , IPSec, SSL, Mobile VPN . : , , . xDSL Multi-Tunnel, Bonding , Load balancing . < >. SSL VPN ERP Server USB . Web Server 2 Intranet ERP Server Web SSL VPN Server 1. Web Server 1&2. Mobile SSL VPN. ERP Server Intranet Mobile SSL VPN OS Web based Web ERP Server Server 2. ( ). IPSec VPN. / . Beyond Korea, Go Global 22. IPS & DDoS 3. SECUI MF2 . NCSC( ), ECSC( ), PCRE( ) . , . Anti-DDoS (Anti-DDoS ). PC . Virtual Domain (B). N/W IP Address TCP Client To Server Stream Port Packet Virtual Domain (A) Flooding Anti SCAN. Block Spoofing Protection N/W IP Address -Virtual Domain . PC - PC . A Network B Network Beyond Korea, Go Global 23. Web Server Protection 3. SECUI MF2 . , URL (exe, dll, bat ) . , SQL , XSS . contents / . Attacker SQL Injection XSS Injection Command Line Injection . SQL XSS. User Com- Web Server mand Beyond Korea, Go Global 24.

6 Anti-Virus 3. SECUI MF2 . Stream-based or File-based . - Stream-based File-based . File-Based : 2 ( ). Stream-Based: File-Based 10 ( ).. Anti-Virus File-Based Anti-Virus Stream-Based Input Output Input Output Full Anti-Virus Most Recently Buffer Scan Deliver DB Buffer Scan Deliver DB. (File) (File) (File) (Packet). Time Time Latency Latency Beyond Korea, Go Global 25. Anti-Spam 3. SECUI MF2 . Global Anti-Spam . - , , . DNS Query . RBL (Real time Blocking List) . - RBL ( black list ). , / , .. Mail-Server Relay .. RBL.. Beyond Korea, Go Global 26. (SCAN, NAC, , PC ) 3. SECUI MF2 .. SCAN . Blacklist Firewall VPN. SECUI SCAN IPS DDoS. Application Control . Anti Virus Anti-Spam SSL.. Management .. NAC PC .. Network / . TCO . NAC Policy PC OS / Virus Virtual . Server PC Center IT . Beyond Korea, Go Global 27. 3. SECUI MF2 .. , . CVE TOP 10.

7 Exploit DB / / .. IPS Signature . Blacklist .. / . Beyond Korea, Go Global 28. (SECUI CM) 3. SECUI MF2 .. SECUI CM. Beyond Korea, Go Global 29. SECUI MF2 Series - Line Up - ( CC, IPv6, TTA). - Specifications Line Up 4. SECUI MF2 Series MF2 6000. MF2 3000. MF2 2000. MF2 1500. Performance MF2 1000. MF2 500. MF2 300. MF2 100 10 Gbps 20 Gbps 40 Gbps Firewall Max Firewall Max Firewall Max (10G Interface) (10G Interface). 2 Gbps 4 Gbps 6 Gbps Firewall Max Firewall Max Firewall Max 500 Mbps 1 Gbps Firewall Max Firewall Max Small Scale Medium Scale Large Scale Network Network Network Beyond Korea, Go Global 31. Specifications 4. SECUI MF2 Series SECUI MF2 SECUI MF2 SECUI MF2 SECUI MF2 SECUI MF2 SECUI MF2 SECUI MF2 SECUI MF2.. 100 300 500 1000 1500 2000 3000 6000. Chassis HDD - 250GB 250GB 500GB 500GB 1TB 2TB 2TB. 1G Copper 4 Ports(2) 6 Ports(2) 6 Ports(2) 6 Ports(4) 8 Ports(4) 8 Ports(8) 8 Ports(8) 8 Ports(8).

8 (bypass). H/W. 1G Fiber - - - 2 Ports 4 Ports 8 Ports 4 Ports option 10G Fiber - - - - - - 4 Ports 8 Ports Power Supply Single Single Single Single Dual Dual Dual Dual Firewall Max 500 Mbps 1 Gbps 2 Gbps 4 Gbps 6 Gbps 10 Gbps 20 Gbps 40 Gbps 1G Fiber ByPass 2-port 1G Fiber Bypass Module (MF2 2000, 3000, 6000). Expansion Modules 10G Fiber ByPass 2-port 10G Fiber Bypass Module (MF2 3000, 6000). Beyond Korea, Go Global 32. ( CC, IPv6, TTA) 4. SECUI MF2 Series NISS-0415-2012 Logo ID 02-C-000648 TTA-058, , 060, 082, 080, 081, 059. SECUI MF2 Version SecuiOS (64bit) 100/500/1000/1500/2000/3000/6000. FW+VPN(EAL4) IPv6 Router IPv6 Router Core .. Beyond Korea, Go Global 33.