Network Security by key Business Process Solutions, SA de CV

Business Process Solutions

Network Security

Build Your Total Safety Network

UTM Content Security Gateway VPN Security Gateway Bandwidth Management Gateway

www.keybps.com

Multi-Homing Security Gateway Broadband VPN Router

Why PLANET Network Security Solution With the growth of the Internet threats, network security becomes the fundamental concerns of home and enterprise network. To enhance your business network protection, PLANET Technology offers a total network security solution to effectively defend your network against attacks at the forefront. Comprising the basic ﬁrewall function and the advanced security features including VPN, IDP, Anti-Virus, Anti-Spam and Content Filtering, PLANET security solution not only improves enterprise productivity safely but also advances the business network advantage. Firewall protects your network from unauthorized access. VPN ensures the data privacy, integrity and strong authentication to remote users. IDP/IPS helps home and business network detect and prevent external intrusion as well as virus spread internally. Anti-Virus/Anti-Spam eliminates the risk of virus infection and resources occupied from e-mails. Furthermore, Content Filtering applies for Internet application (IM, P2P/Web) to free your network from the risk of malicious attacks.

Comprehensive and Total Solution PLANET’s security solutions range from Broadband VPN router, Multi-Homing Security Gateway to Content Security Gateway for various business applications such as VPN communications, VoIP, or secure ﬁle sharing. The product portfolio ﬁts to any network size from SoHo to SME and Enterprises.

Internet

Robust Integration of Security Functions PLANET security solutions integrate a wide array of security features to provide network a cost-effective and easy deployment of security protection.

Virus

Virus Virus

Reducing the Risk of Potential Shutdown

Firewall

PLANET presents Multi-Homing Security Gateway which is built-in with two WAN ports, to ensure business network continuous connection if one of the Internet connection shall fail.

Low Operational Cost A user-friendly web GUI interface is implemented in PLANET security gateway products for centralized conﬁguring, monitoring, logging and troubleshooting. It frees users from complicated security management and reduces the technical support cost related to user authentication problems. PC

Network Security

www.keybps.com

Network Security Application Government Solution

Office

Network Security is the top priority for MH-2001

governmental organizations in the high-tech

001101010

Modem

environment. PLANET UTM Content Security

VPN Tunnel

CS-1000

Gateway acts as the gatekeeper of government

Access Point

security network, prevents government intranet

Internet 001101010

Modem Firewall

Attack

Virus

Furthermore, the IDP, User Authentication and

Home

Firewall

Spam

Content Filter features of the security gateway offer the government intranet highly secure

VPN Tunnels

protection. The CS-2000 also provides the

CS-2000

Access Point

from being infected by virus and its network resource occupied by useless spam mails.

IPSec, SSL VPN, and PPTP VPN solutions

Main Office

for the data being securely delivered via VPN DMZ

Finance-Server

tunnel.

Web-Server

100Base-TX UTP

Mail-Server

1000Base-T UTP

Enterprise VPN Solution New model of PLANET’s VPN Security Gateway, SG-1000, a special designed VPN security gateway provides mid-sized to large enterprises enhanced and secure network protection with its SSL, IPSec, and PPTP VPN tunneling technologies. The SSL VPN function supports up to 50 SSL VPN connection tunnels. The IPSec VPN feature provides IPSec VPN Trunk and IKE, SHA-1, and MD5 Authentication. The PPTP VPN function supports PPTP server and client. The SG-1000 also offers Content Blocking feature to block speciﬁc URL, Script, IM, P2P, and download ﬁle. Furthermore, its built-in Anomaly Flow IP function supports Hacker and Blaster Alerts for administrator easily watches and tracks an attacker.

IAS Server

File Server

Firewall

PDA

VPN Tunnel

Internet

SG-1000

Web Server

Laptop

Certificate Server 100Base-TX UTP

+[52] [55] 24.87.30.00

+[52] [55] 53.70.97.90

Remote Access Clients

Pioneer of IP Innovation 03 ventas@keybps.com

Network Security Applications SOHO Bandwidth Management Solution The PLANET BM-525 is speciﬁcally designed for SOHO networks. For bandwidth management,

Internet

packets can be classiﬁed based on IP address, IP subnet, and TCP/UDP port number. The device has more than 40 of the most common protocols such as H.323, Oracle, HTTP, FTP,

Switch

and so on for easy deﬁnition. The administrator

001101010

can then deﬁne policies to ensure committed and maximum bandwidth levels for inbound and V

outbound trafﬁc in each class. The administrator

BM-525

VoIP Gatewway

NAT + Bandwidth Management

can also deﬁne three priority levels for each

XDSL/Cable Modem

policy to ensure high priority packets receive the maximum available bandwidth. In addition, each policy can have a schedule deﬁned for when the policy is activated or inactivated in

Oracle

increments of 30 minutes.

SMB Solution ADSL

ADW-4401

XDSL / Cable Modem

WAN Load Balancing

Internet

Firewall

ADN-4000

Multi-Homing Security Gateway

Multi-Homing

Security

Gateway, the MH-2001, integrates with

VPN

cutting-edge technology including Load

Content Filter

Balancing, QoS, VPN, Authentication,

QoS

and Firewall functions for central

ADSL

XDSL / Cable Modem

PLANET’s

sites establishing ofﬁce network and connecting with branch ofﬁces as well

DMZ

as remote access users. It is designed MH-2001

Web / FTP Server

LAN

for required application-based network solution of business with low investment and a perfect service to the security needs of SoHo and small business. No more complex connections and settings

Win Vista

Win 2003

Win XP

MAC

RADIUS Server ADSL

ADSL 2/2+

by integrating different security products on the network are required.

100Base-TX UTP

Network Security

www.keybps.com

VPN Broadband Router / Multi-Homing Security Gateway Product Series

Model

VRT-311S

VRT-401

MH-2001

Product Image

Dimension Networking

Management Security

VPN

Others

Desktop Size

1 x WAN, 3 x LAN, 1 x DMZ

1 x WAN, 4 x LAN, 1 x DMZ

2 x WAN, 1 x LAN, 1 x DMZ

Maximum Concurrent Session

2,600

45,000

Management

Web

Interface

SPI Firewall



DoS / DDoS Prevention



P2P, IM Blocking



Download/Upload Blocking



Authentication User: Built-in Database

200 entries

RADIUS Authentication



POP3 Authentication



Content Filtering



URL Filtering



ACL



VPN Tunnels

100

200

IPSec VPN (DES, 3DES, AES)



PPTP Server / Client



Outbound Load Balancing



Bandwidth Management



Transparent



Multiple Subnet



Server Load Balancing

4 groups

XRT-401D

XRT-401E

XRT-501

1 x WAN, 4 x LAN

1 x WAN, 4 x LAN (All Gigabit Ports)



Broadband Router Product Series

Model

Product Image

Networking Security

Interface SPI Firewall Content Filtering

Others

ACL



URL Filter



DMZ



DDNS



Virtual Server



IGMP Snooping



Packet Capture



Diagnostics



QoS VPN Pass Through

+[52] [55] 24.87.30.00

+[52] [55] 53.70.97.90

ventas@keybps.com

VPN Security Gateway Model

Product Series

SG-500

SG-1000

Product Image

Dimension Networking

Interface Maximum Concurrent Session

Security

VPN

19” Rack Mount 2 x WAN, 1 x LAN, 1 x DMZ

20,000

110,000

Firewall



Authentication User



RADIUS Authentication



Content Blocking



URL Filtering



Hacker Alert



DoS, DDoS Protections



VPN Tunnel

100/200

VPN Performance

10 Mbps

17 Mbps

DES, 3DES, AES

SHA-1, MD5

Encryption IPSec Authentication

Others

Desktop 1 x WAN, 1 x LAN, 1 x DMZ

SSL VPN



SSL VPN Tunnel

WAN Load Balancing

QoS



DMZ Transparent



Static Route



NAT, PAT



H/W Watch-Dog



Bandwidth Management Gateway Model

Product Series

BM-525

Product Image

Networking

Interface Maximum Concurrent Session

Management

Operating Mode Management

Bandwidth

Bandwidth Management Maximum Bandwidth

Security

20,000 NAT, Transparent Web Guarantee and Maximum Bandwidth NAT: 25Mbps NAT + logging + statistics: 9Mbps

Policy-based Firewall



URL Filter



Virtual Server/DMZ



Anomaly Flow Detection



P2P Blocking



IM Blocking



Download/Upload Blocking



User Authentication by Built-in Database Others

1 x WAN, 1 x LAN, 1 x DMZ

Server Load Balancing

 Up to 4 virtual IPs 

Target Market

Network Security

SOHO

www.keybps.com

UTM Content Security Gateway Product Series

Model

CS-1000

CS-2000

2 x WAN, 1 x LAN, 1 x DMZ

2 x WAN, 1 x LAN, 1 x DMZ (DMZ can switch to WAN3, All Gigabit Ports)

Maximum Concurrent Session

110,000

1,000,000

New Sessions / Second

10,000

20,000

Firewall Performance

100Mbps

300Mbps

3DES Performance

17Mbps

30Mbps

VPN Tunnel

100/200

200/1000

200



POP3, SMTP

Local Database, RADIUS, POP3

Local Database, RADIUS, POP3, LDAP

1(Clam)

2(Clam & Sophos)

Product Image

Networking Interface

Performance

VPN

SSL VPN Tunnel Security

IDP IDP Report Email Filtering User Authentication Anti-Virus Engine Action of Virus Mail

Forward and Store in quarantine

Virus Mail Retrieved / Search



FTP/HTTP Outbound Anti-Virus



Alert by Email



Action of Spam Mail

Others

Forward and Store in quarantine

Spam Mail Retrieved / Search



Mail Report



Spam or Ham Mail Training System



QoS Max. Bandwidth

100

WAN Load Balancing

Outbound

Outbound / Inbound

Mail Account



Mail Notice



High Availability



Event Log and Alarm



Syslog Server Support



Accounting Report



WAN & Policy

Statistic

+[52] [55] 24.87.30.00

+[52] [55] 53.70.97.90

ventas@keybps.com

Business Process Solutions

key Business Process Solutions S.A. de C.V.

t f w

Cerro de las Campanas No. 3, Int. 520 Col. San AndrĂŠs Atenco, Tlalnepantla Estado de MĂŠxico, C.P. 54040 +[52] [55] 24.87.30.00 +[52] [55] 53.70.97.90 www.keybps.com