Hillstone SGSV-SUB-vSSM-IN-012: Virtuální Firewall Cloud Hive, subcription licence

Specifikace CloudHive System:

• Firewal Througput (Max): 1Tbps
• Max. Concurrent Sessions: 340 Million
• New Sessions/s: 6 Million
• IPS Throughput (Max): 200Gbps
• vSSm Scalability (Max): 200

Specifikace each vSSM:

• Firewall Throughput: 5Gbps
• Maximum Concurrent Sessions: 1.7 Million
• New Sessions/s: 30,000
• IPS Throughput: 1Gbps

Popis:

Virtuální firewall Cloud Hive se používá k ochraně virtuálních stanic uvnitř datového centra.

Cloud Hive poskytuje monitoring datového provozu mezi jednotlivými virtuálními stanicemi. Umožňuje izolovat napadené virtuální stanice, filtraci L2-L7 provozu včetně pokročilých bezpečnostních funkcí, jako je IPS, Antivir a kontrola aplikací.

Cloud Hive lze nasadit do stávajícího síťového řešení bez dopadu na provoz sítě.

VIDEO:

Vlastnosti:

Application Control

• Over 3,000 applications that can be filtered by name, category, subcategory, technology and risk
• Each application contains a description, risk factors, dependencies, typical ports used, and URLs for additional reference
• Actions: block, reset session, monitor, traffic shaping

Visibility

• Cloud asset discovery: networks and VMs
• Visualization of virtual network topology, VMs and traffic
• Deep insight and monitoring of all traffic between VMs
• Log support: session logs, threat logs and system logs

Firewall

• Policy control
• Application Layer Gateway (ALG)
• Session limit

IPS

• 7,000+ signatures, including custom signatures
• Protocol anomaly detection
• Manual, automatic signature updates
• Integrated threat encyclopedia
• IPS Actions: default, monitor, block, reset with expiry time
• Packet logging option
• Filter Based Selection: severity, target, OS, application or protocol
• IP exemption from specific IPS signatures
• IDS sniffer mode

Attack Defense

• Protection from: Malformed packets, DoS/DDoS, DNS Query Flood, SYNFlood and ARP attacks

High Availability

• Separation of management, control and service plane
• vSOM “VM shutdown” does not affect the CloudHive service
• vSCM are deployed in pairs (Active/Passive) to provide high availability
• vSSM “VM down” does not affect the workload as it is deployed on a separate VM

Scalability

• vSSM can scale up to 200 modules

Deployment

• Supports both tapping mode and inline mode
• L2 deployment without the need for network configuration changes

Cloud Management Platform

• VMware vCenter 5.5
• Interface: RESTful API, CLI, WebUI
• vMotion support
• Dynamic address book

Hypervisor Compatibility

• VMware ESXi