Alcatel-Lucent VPN Firewall User Manual

Alcatel-Lucent VPN Firewall Portfolio At-A-Glance

Complete, Cost-effective and Carrier Class VPN Firewall Network Security Solution

The Alcatel-Lucent VPN Firewall portfolio offers a broad range of enterprise and carrier-class security solutions to protect corporate and service provider networks delivering mission-critical IP applications to headquarter employees, branch offices, trading partners, road warriors and customers.

Alcatel-Lucent VPN Firewall solutions can help stretch IT budgets with superb price/performance and low total ownership costs. Leadingedge technology with timesaving, work-saving features help maximize IT staff resources. And ample flexibility, availability and

scalability can simplify deployment and management of diverse applications including:

• Advanced security services

• VPN services for site-to-site and remote access

• Bandwidth management capabilities

• Secure data center Web and application hosting

• Storage network secure solution

• Mobile data security

• Packet Data Gateway and Packet Data Interworking Functions for Dual-Mode Wireless/WiFi VPN and VoIP/Data Security

The Alcatel-Lucent VPN Firewall Portfolio forms a unique 3-tier security architecture and includes:

VPN Firewall Brick®platforms –

• Security appliances that integrate application layer inspection, firewall functionality with advanced VPN capabilities for small-office through data-center requirements

• Alcatel-Lucent Security Management

Server (SMS)

– Software for robust, tightly synchronized firewall, VPN, service quality, VLAN and virtual firewall policy management.

Alcatel-Lucent IPSec Client – Software

• that provides secure remote access VPN services for mobile workforce and telecommuters.

IPSec Client 9.0

Easy to use IPSec w/IKE

• Auto policy download

•

• Stateful Firewall

• Client “status logs” Managed client option

•

• Interoperable with full portfolio

350 and Brick®1100 are not available in Europe.All other models are

* Brick

compliant with European RoHS (Restriction of Hazardous Substances) directive.

Road Warrior SOHO ROBO Small Enterprise Mid Enterprise Large

VPN Firewall

Brick

• (3) 10/100 ports 195 Mbps fir

•

• 75 Mbps 3DES

• 135,000 sessions 1000

•

• 50 virtual firewalls

ewall

VPN tunnels

VPN Firewall

150

Brick

• (4) 10/100 ports 330 Mbps fir

•

• 127 Mbps 3DES

• 245,000 sessions 1000

•

• 150 virtual firewalls

ewall

VPN tunnels

VPN Firewall

350*

Brick

• (7) 10/100 ports (1) 10/100/1000 port

•

• 787 Mbps firewall

• 404 Mbps 3DES 1,000,000 sessions

•

• 5400 VPN tunnels 300 virtual firewalls

•

VPN Firewall

700

Brick

• (8) 10/100/1000 port

•

• 425Mbps 3DES

• 1,000,000 sessions

•

• 350 virtual firewalls

1.7 Gbps fir

VPN tunnels

7500

ewall

VPN Firewall

1100*

Brick

• (4) GigE Fiber or (13) GigE Copper (7) 10/100

ewall

3 Gbps fir

•

• up to 1 Gbps 3DES 4,000,000 sessions

•

VPN tunnels

20000

•

• 1,000 virtual firewalls Brick 1100A has AES

•

Accel

H/W

Alcatel-Lucent Security Management Server

Software for robust, tightly synchronized firewall, VPN, service quality, VLAN and virtual firewall policy management.

VPN Firewall

1200/1200HS

Brick

• (2) or (6) mini-GBIC SFP (8) or (14) 10/100/1000 port

3.0 or 4.75Gbps fir

•

• 1.1 or 1.7Gbps 3DES 2,000,000 or 3,000,000

• sessions

10000 or 20000

• tunnels

• 500 or 1100 virtual firewalls

Data Center

ewall

VPN

VPN Firewall Brick®platforms deliver bullet-pr

and compr for service pr ranging fr

ehensive, high-performance VPN capabilities

nment, and enterprise envir

, gover

ovider

om small of

fices to large data centers.

oof security

onments

Active/Active Management

VLAN 100

xtranet Server

VLAN 200

AP Server

VLAN 300

ail Server

VLAN 400

ublic Server

VLAN 400

Public Server

IP Network

Data Center

ervices

etwork-based

Services

Mobile/IPSec Client

Services

entralized Management

ith Alcatel-Lucent SMS

CPE-based

Services

xisting

outer

xisting

outer

xisting

Router

PN Firewall

Brick

50/150

PN Firewall Brick

350

VPN Firewall

Brick

700

Alcatel-Lucent

ecurity

anagement

Server

Alcatel-Lucent

Security

Management

Server

MEA NOC

SA NOC

PN Firewall

Brick

1100

VPN Firewall

rick

200 HS

IPSec

Client

Key Features and Benefits

Alcatel-Lucent VPN Firewall Portfolio At-A-Glance

The Alcatel-Lucent VPN Firewall portfolio offers flexible deployment options to suite service provider, government, and enterprise network strategies and users’ diverse needs.

• Simplified management – unique client/server design; centralized staging, real-time monitoring and no-touch management of all VPN, security and service-quality assurance capabilities via scalable, proven Alcatel-Lucent SMS

• Full-featured bridging – enables stealthy, depth-of defense security that conventional router-based firewalls cannot match

• Advanced security safeguards – denial-of-service attack protection; high-speed content security; premium authentication services; with no occurrences of reported advisories or vulnerabilities and no backdoors.

• Uniquely granular bandwidth

management

– maximize service quality via flexible class-based queuing (CBQ) technology, serverlevel and user-level limits and guarantees

• Carrier-grade reliability – native high-availability architecture with no single point of failure

• Rules Based Routing – Routes all packets matching the rule to a proxy server, router or other device utilizing third party software to perform content filtering functions such as command blocking, URL filtering and virus scanning. Allows transparent interaction with any third party equipment.

• High-performance packet

processing

– supports up to 4 million simultaneous sessions, 1100 virtual firewalls, 20,000 VPN tunnels

• Ultra-thin, highly secure operating

system

– virtually impenetrable to hacker attacks; frees memory for packet processing, policy management

• Virtual firewall and VLAN support – easily assign and enforce security policies for diverse user groups

• Plug-and-play deployment – implement secure mission critical applications without costly, timeintensive network reconfiguration

• Low ownership costs – no ongoing feature-licensing expenses; easy installation, management and upgrades save IT staff time and effort; high-performance, high capacity features reduce the need to purchase additional equipment

o learn more about our comprehensive portfolio, contact your

T Alcatel-Lucent sales representative or business partner.

You can also visit our web site at www.alcatel-lucent.com.

Alcatel, Lucent, Alcatel-Lucent, and the Alcatel-Lucent logo, are trademarks of Alcatel-Lucent. VPN Firewall Brick is a registered trademark of Alcatel-Lucent. All other trademarks are the property of their respective owners. Alcatel-Lucent assumes no responsibility for the accuracy of the information presented, which is subject to change without notice.

LVF v1 0107