Product Description
PRI-2000 Firewall Series

General Description

The PRI-2000 firewall series are designed to protect the perimeter of the user network. It filters and inspects inbound packets and denies unauthorized access and blocks malicious codes according to the predefined set of policies. The firewall combines powerful data analysis capabilities, effective packet filtering techiques, and various antispoofing measures together. An intuitive graphic user interface (GUI) is provided through which the user can perform security policy writing, user management, log audition and query, traffic control etc.

Features

Establishes secure tunnels using interface-to-interface security policies.
User-oriented design, capable of authentication, authorization and accounting.
Multiple user identity authentication schemes: User name and password, one time password (OTP), PAM, PAP/CHAP, MS-CHAP, NT-domain, Radius, Kerberos and LDAP etc.
Prevents address spoofing by binding IP addresses with corresponding MAC addresses
Real-time connection monitoring, dynamically opens ports for authorized visitors and shut up them automatically when connections are terminated.
Three types of NAT: Source address translation for outbound packet, target address translation for inbound packet, source address translation for inbound packet.
Multi-thread and multi-session transparent proxy.
Controls user access to web page as well as website even a third party proxy is used.
Multiple working modes: Routing, transparent or mixing working mode
Embedded intrusion detection system (IDS).
Centralized management from a management client that communicates with firewall through SSLlink.
Powerful events auditing and alerting capabilities.
Hot standby.
QoS bandwidth management, guarantee sufficient bandwidth for mission critical data
Hardened Linux operating system.
Net Guard IP Sec VPN

NetGuard IPSec VPN protects user data traversing public networks by establishing virtual private network (VPN) and enabling secure remote access for telecommuters. It uses IPSec protocol to encapsulate and en
Crypt IP packets, setting up secure "tunnels" between LANs or between LAN and individual hosts. The centralized rekeying and management is achieved through the use of the KDMC (Key Distribution and Management Center) with user-friendly GUI.
SCI provides a whole range of IP encryptors and remote access client modules to meet the requirements of different customers ranging from large-scale enterprises to small-sized companies.

Features

Able to establish independent secure tunnels between different nodes
IC card-based user identity authentication, password protection, mutual authentication between encryptors
Real-time traffic accounting, statistical data is reported to KDMC automatically
Centralized, automatic online rekeying by KDMC
Centralized management of all encryptors on the network through KDMC
Comprehensive events logging, log data is automatically sent to KDMC
Self-test and status indication, anomaly alerting
Tiple key protection
Provides data compression to improve the actual throughput
Automatic restores from system failure, ensuring unattended long-duration operation
Tamper-proof enclosure
Hot standby
Packet-filtering firewall functionality