Eudemon200E-X Firewall_Overview

aamallik
aamallik  Diamond  (1)
7 years 8 months ago  View: 1736  Reply: 4
1F

Product Appearance of the Eudemon200E-X1 Series

Product Model

The Eudemon200E-X1 series has the following models::

  • Eudemon200E-X1 (two WAN Ethernet interfaces; eight switching LAN Ethernet interfaces)
  • Eudemon200E-X1W (two WAN Ethernet interfaces; eight switching LAN Ethernet interfaces; the WLAN function is supported)
  • Eudemon200E-X1AW (one WAN Ethernet interface; eight switching LAN Ethernet interfaces; one ADSL interface; the WLAN function is supported)
  • Eudemon200E-X1AW-W (one WAN Ethernet interface; eight switching LAN Ethernet interfaces; one ADSL interface; the WLAN and WCDMA 3G functions are supported)
  • Eudemon200E-X1AW-C (one WAN Ethernet interface; eight switching LAN Ethernet interfaces; one ADSL interface; the WLAN and CDMA2000 3G functions are supported)

For the model with the 3G function, the 3G data card is already installed and thus no additional 3G data card is required; For other models, external USB 3G data cards are required to implement the 3G function.


Product Appearance of the Eudemon200E-X2 Series


The Eudemon200E-X2 series include the following models, which are all 1U devices:

  • Eudemon200E-X2 (two MIC slots, without WiFi)

  • Eudemon200E-X2W (two MIC slots, with WiFi)

Software Structure


DPI Subsystem

The deep packet inspection (DPI) subsystem examines the application-layer contents of packets to prevent application-layer attacks. The functions of the DPI subsystem include application-layer protocol control, intrusion prevention, anti-virus, mail filter, web filter and FTP filter.

Forwarding Subsystem

The forwarding subsystem forwards packets and supports blacklist, ACL, NAT, VPN, attack defense, fragmentation, GTP, MPLS, and IPv6.

Configuration Management Subsystem

The configuration management subsystem manages the entire system and interacts with users. This subsystem also provides interfaces for configuration, testing, and maintenance. It manages the device, configurations, file systems, logs and alarms, software patches, licenses, and routing.

Drive Module and Hardware Interface

The drive module and hardware interface enable the communication between software and hardware.


Product Features


Integrated Service

  • Integrates security, routing, switching, VPN, and wireless functions, which greatly enhances the product integration capability.
  • Completely integrates the functions of the Ethernet switch.
  • Provides the Wireless Local Area Network (WLAN) function and Internet access through the Ethernet, ADSL2+, SHDSL, E1/CE1, serial, and 3G.
  • Provides users with all the router, firewall, switch, VPN, and wireless features on a single device.

Refined Management over Thousands of Application Programs, Building an Efficient Network

  • Identifies wide ranges of application layer protocols, providing visibility into the applications running on the network.
  • Equips with mass Web sites, blocking Trojan horse-embedded and phishing Web sites, isolating pornographic and gambling Web sites, and preventing employees against maloperations.
  • Offers multi-dimensional control measures specific to time, application, user, bandwidth, and connection number, effectively providing bandwidths for mission-critical applications, improving bandwidth usage and working efficiency.

Professional Content Security Defense, Providing a Secure Network

  • Provide 99% detection ratio by using the AV engine that is built on the anti-virus technologies of Symantec and has file-level scanning capability, and the world-leading emulation environment and virtual execution technology.
  • Provides professional vulnerability patching technology to prevent attack variants: In the traditional attack code-based defense mode, a huge signature database needs to be maintained and updated due to the transformation of attack types, which overloads the IPS engine and leads to low detection performance and high false negative and false positive ratios. The Eudemon is backed by Symantec advanced vulnerability defense technology and delivers virtual patches for vulnerabilities (not attack code), preventing attack variants.
  • Maintains a professional team to provide updates, tracking the latest, most widespread, and most dangerous system and software vulnerabilities, and defending against attacks quickly, to improve the security of office networks.

One-Key Configuration, Freeing Users from Complicated Policy Optimization

  • Provides a Web interface to make device management and configuration simple and intuitive.
  • Provides wizards for key configurations, guiding administrators through the configuration processes.
  • Provides one-key enabling of IPS and AV, freeing the administrators from repeated, strenuous, and time-consuming policy configuration efforts and make the device plug-and-play.

Identification-based Intranet Control and Policy Unification

  • Provides multiple user authentication mechanisms: local user database authentication, portal authentication, and transparent authentication based on the data imported from the connected third-party servers.
  • Delivers unified security policies, providing refined traffic control by users or user groups, application protocols categories, time periods, IP segments, and ports based on the accurate identification of users or user groups and application protocol categories; Completes the configurations such as packet filtering, UTM, and application detection and control at one time.

Flexible Scalability

Uses the independently developed software platform and Huawei Symantec-proprietary security operating system, separating the data plane and the management plane, which enhances the system security; provides brilliant flexibility and configurability with open Application Programming Interfaces (APIs), for further development and evolution.

Supports multiple new storage media such as the USB disks, and microSD cards, providing high scalability.

Provides FE ports, GE ports, console ports, USB ports, WLAN interfaces, microSD card slots, and optional MIC, DMIC, FIC, and DFIC expansion slots; uses a modular design, improving scalability, facilitating future upgrade and maximizing investment protection.


Product Orientation

The Eudemon200E-X series is a new-generation product launched by Huawei to meet the requirements of small and medium-sized enterprises, branches of large enterprises, SOHO users, and cyber bars.Figure 1 shows the application of the Eudemon200E-X series.

Based on the modular design, the Eudemon200E-X series integrates multiple features such as security, routing, switching, and wireless (WiFi and 3G) features. With varieties of interface types and industry-leading performance, the Eudemon200E-X series delivers sound security protection for small and medium-sized enterprises, branches of large enterprises, SOHO users, and cyber bars. In addition, the Eudemon200E-X series provides the integrated network egress security and interworking solution, which helps enterprises decrease cost and increase production efficiency. The Eudemon200E-X series, as a security protection device, is an ideal option for small and medium-sized enterprise networks.

The Eudemon200E-X series integrates multiple services, and is excellent in terms of the reliability, processing capability, modular port, and service capability, which greatly reduces the initial investment and long-term operation and maintenance costs of the construction of enterprise networks.

Figure 1 Eudemon200E-X series application 

afm.nasher
afm.nasher  Jackeroo 
7 years 8 months ago
2F
good one
aamallik
aamallik  Diamond 
7 years 8 months ago
3F

Quote 2 #

good one
afm.nasher Posted on 2014-08-14 14:10


thank you

BAZ
BAZ  Silver 
6 years 8 months ago
4F
Can we post content from Hedex..???
EchoW
EchoW  Senior 
6 years 8 months ago
5F

Reply 4 #

Do you mean that you want share the content from HedEx to GS?
HedEx does not support share function.

But You can copy the content or problem from HedEx lite to share with GS friends.