فایروال سایبروم CR50ING

نقد و بررسی فایروال سایبروم CR50ING

Firewall Cyberoam CR50ING

دیوار آتش یا فایروال (Firewall) به برنامه‌ها یا سخت افزارهایی گفته می‌شود که از دسترسی غیرمجاز به کامپیوتر شخص جلوگیری کرده و ترافیک رد و بدل شده در شبکه را کنترل می‌کند.

مشخصات فنی فایروال سایبروم CR50ING

• Cyberoam Firewall Interfaces:
  • Copper GbE Ports: 8
  • Configurable Internal/DMZ/WAN Ports: yes
  • Console Ports (RJ45): 1
  • USB Ports: 2
  • Hardware Bypass Segment: 2
• System Performance:
  • Firewall Throughput (UDP) (Mbps): 6500
  • Firewall Throughput (TCP) (Mbps): 4000
  • New sessions/second: 45000
  • Concurrent sessions: 1000000
  • IPSec VPN Throughput (Mbps): 850
  • No. of IPSec Tunnels: 2000
  • SSL VPN Throughput (Mbps): 300
  • WAF Protected Throughput (Mbps): 450
  • Anti-Virus Throughput (Mbps): 1500
  • IPS Throughput (Mbps): 1600
  • UTM Throughput (Mbps): 850
  • Stateful Inspection Firewall:
  • Layer 8 (User - Identity) Firewall
  • Multiple Security Zones
  • Location-aware and Device-aware Identity-based Access
• Control Policy:
  • Access Control Criteria (ACC): User-Identity, Source and
  • Destination Zone, MAC and IP address, Service
  • Security policies - IPS, Web Filtering, Application
  • Filtering, Anti-virus, Anti-spam and QoS
  • Country-based Traffic Control
  • Access Scheduling: Policy based Source and Destination NAT, Gateway
• Specific NAT Policy:
  • H.323, SIP NAT Traversal
  • DoS and DDoS attack prevention
  • MAC and IP-MAC filtering
  •  Spoof Prevention
  • Intrusion Prevention System
  • Signatures: Default (4500+), Custom
  • IPS Policies: Pre-configured Zone-based multiple policies, Custom
  • Filter based selection: Category, Severity, Platform and
  • Target (Client/Server)
  • IPS actions: Recommended, Allow Packet, Drop Packet,
  • Disable, Drop Session, Reset, Bypass Session:
  • User-based policy creation
  • Automatic signature updates via Cyberoam Threat
• Research Labs:
  • Protocol Anomaly Detection
  • SCADA-aware IPS with pre-defined category for ICS and
  • SCADA signatures