入侵防禦系統
  • NK-Eulen
• NK-3,5000系列
• NK-6,7,8000系列
整合式縱深防禦管理系統
  • SAC
P2P/流量管理系統
  • Flow Manager 3,5系列
• Flow Manager 7,8系列
網路安全實體隔離系統
  • DisKeeper
網路加速/優化系統
  • WAK-IA
• WAK-TA3.5
• WAK-TA15.45
網路側錄鑑識系統
  • ContenTrek
UTM 系列
  • OneKeeper
BroadWeb安全管理服務
  • BSST安全情報服務
 
OneKeeper
OneKeeper系列產品透過整合多項網路安全功能來達到此一目標;包括將防火牆、VPN、IPS、細部的網路程式管理、針對網路程式的流量控制、防毒、網頁內容過濾、以及防止垃圾郵件的功能,全部整合至一台高效能且易於管理的網路設備之中。
功能特色

OneKeeper系列產品透過整合多項網路安全功能來達到此一目標;包括將防火牆、VPN、IPS、細部的網路程式管理、針對網路程式的流量控制、防毒、網頁內容過濾、以及防止垃圾郵件的功能,全部整合至一台高效能且易於管理的網路設備之中。透過靈活的管理政策、定時自動更新機制和24x7不間斷檢查監控,來保證網路行為的適切性以及針對Zero Day攻擊做出最立即的反應。另外,對於單一網路應用程式的各種服務,OneKeeper「三層式管理」(包括:種類、應用程式和行為) 給予網管人員針對不同使用者設定不同管理政策的能力,來制訂最符合其企業文化與運作模式的管理政策;而僅僅非「全面的開放或禁止」兩種選擇而已。

規格速覽
   防火牆 (Firewall)
-     Policy numbers: 2000
-    Performance:300 Mbps
-     Stateful inspection
-     NAT mode: one-to-one/one-to-many/many-to-many
-     Policy-based NAT
-     Popular NAT ALGs
-     DDoS/DoS and Port scan prevention
-     IP/MAC binding    虛擬私有網路 (VPN)
-    VPN tunnels:200
-     168-bit 3DES performance:140 Mbps
-     Tunneling protocols: PPTP, L2TP, IPSec
-     Tunneling server: PPTP, L2TP
-     Hardware-based Encryption methods: DES, 3DES, AES
-     SHA-1 / MD5 authentication
-     PPTP and L2TP pass-through and IPsec NAT traversal
-     Hub and Spoke VPN support
-     IKE certificate: x.509 v3, PKCS#10
-     IKE authentication: RSA signature, DSA signature, Xauth
-     Dead peer and tunnel detection
  入侵偵測 (IPS)
-     Performance:100 Mbps
-     New session/sec:4000
-     Maximum sessions:512000
-     Support user-defined IPS rule
-     IPS rules:2000+
-     Operation mode: Inline, Monitor, Bypass
-     Layer 3/Layer 4 integrity check
-     Protocol decoders:              HTTP, FTP, telnet and others
-     Segment reassembly from the network layer to application layer
   應用程式管理
-     Support 50+ IM, P2P, Web access, FTP, Mail, and Multi-media applications
-     3-level Application control: Category/Application/Behavior
-     Control on login, chatting, file transfer, conferencing for IM, including MSN, Skype, Yahoo Messenger, QQ, ICQ and others
   流量管理
-     Traffic shaping and quota limit on 50+ IM, P2P, Web access, FTP, Mail, and Multi-media applications
-     Policy-based traffic shaping and quota limit by application categories
-     Control on bandwidth for P2P, including BT, eDonkey, Thunder, Share, Winny, and others
   防毒功能
-     The streaming detection method
-     Performance:30 Mbps
-     Detect over 2000+ popular viruses
-     The ClamAV solution selected and fine-tuned by BSST
-     Scan HTTP, FTP, SMTP, POP3, IMAP and VPN Tunnels
-     Check compressed files with passwords
-     Destroy the infected file segment
-     White list for IP and mail addresses
   內容過濾
-     Highly scalble SurfControl CPA solution
-     Support user-defined URL exempt list
-     Support user-defined URL block list
-     Blocks Java applet, Cookies, Active X (by file extension)
-     Anti-SPAM by RBL approach by 2007 Q3
   高備援與負載平衡
-     Built-in Dual-WAN Failover and redundancy in Active-Passive mode
-     Load balancing on WAN links
-     HA in Active-Passive mode with configuration, VPN tunnel, and session state synchronization by 2007 Q3
   即時監測與日誌
-     Graphical real-time monitoring in WebUI
-     Top-N application statistics
-     Firewall/IPS/AV statistics and network statistics
-     VPN tunnel monitor
-     System CPU, memory and FLASH utilization
-     Syslog to remote BroadWeb Security Event Reporter (SER) or 3rd party NMS
   警告與通知
-     Real-time events in WebUI
-     SNMP
-     Email
-     Windows popup message
-     Alarm filtering
   系統管理
-     Web UI (HTTPS), Command Line Interface (CLI), and Secure Command Shell (SSH)
-     Setup wizard
-     SNMP management
-     Multi-language support
   管理與維護
-     Export and import the IPS, firewall, anti-virus, application management policies and system configuration
-     Upgrade the policies and kernel image from BroadWeb Data Update Center (DUC) automatically or via UI manually
   使用者認證
-     Xauth over RADIUS support for IPsec VPN
-     Support Local database by 2007 Q3
-     Support RADIUS database by 2007 Q3
   網路功能
-     VLAN Tagging (IEEE 802.1q)
-     PPPoE, static IP, DHCP client on WAN interfaces
-     DHCP server, static IP for LAN nodes
-     DHCP relay
-     DNS query proxy and dynamic DNS support
-     Static routing and dynamic routing (RIP)
   網路介面
-     LAN port (GbE):1
-     WAN ports (GbE):     2
-     Configurable port (GbE):1 (DMZ/HA/Mirror)
-     USB ports: 2
-     Serial port:1 (console)
   硬體
-     Dimensions: 1U Rack-mount, 426 x 358 x 44 mm, 4.2 kg
-     Compliance: FCC Class A Part 15, UL/CUL, C Tick, CE, VCCI
-     Operating Temperature: 0 to 40℃ (32 to 104℉) (depends on CPU)
-     Storage Temperature: -20 to 70℃ (-4 to 158℉)
-     Humidity: 0% to 90%RH, non-condensing
-     AC power: 90 to 264 V full range @ 47 to 63 Hz
   資安認證
-     ICSA: Firewall, IPSec, IPS
-     NSS: IPS
下載區
BSST 論壇
 
尋求協助