Alcatel-Lucent VPN Firewall User Manual

Alcatel-Lucent VPN Firewall Portfolio At-A-Glance

Complete, Cost-effective and
Carrier Class VPN Firewall
Network Security Solution

The Alcatel-Lucent VPN Firewall
portfolio offers a broad range of
enterprise and carrier-class security
solutions to protect corporate and
service provider networks delivering
mission-critical IP applications to
headquarter employees, branch
offices, trading partners, road
warriors and customers.

Alcatel-Lucent VPN Firewall solutions
can help stretch IT budgets with
superb price/performance and low
total ownership costs. Leading­edge technology with timesaving,
work-saving features help
maximize IT staff resources. And
ample flexibility, availability and

scalability can simplify deployment
and management of diverse
applications including:

• Advanced security services

• VPN services for site-to-site and
remote access

• Bandwidth management
capabilities

• Secure data center Web and
application hosting

• Storage network secure solution

• Mobile data security

• Packet Data Gateway and Packet
Data Interworking Functions for
Dual-Mode Wireless/WiFi VPN and
VoIP/Data Security

The Alcatel-Lucent VPN Firewall
Portfolio forms a unique 3-tier
security architecture and includes:

VPN Firewall Brick®platforms –

•
Security appliances that integrate
application layer inspection,
firewall functionality with
advanced VPN capabilities for
small-office through data-center
requirements

• Alcatel-Lucent Security Management

Server (SMS)

– Software for robust,
tightly synchronized firewall, VPN,
service quality, VLAN and virtual
firewall policy management.

Alcatel-Lucent IPSec Client – Software

•
that provides secure remote access
VPN services for mobile workforce
and telecommuters.

IPSec Client 9.0

Easy to use IPSec w/IKE

•
Auto policy download

•

• Stateful Firewall

• Client “status logs”
Managed client option

•

• Interoperable with
full portfolio

®

350 and Brick®1100 are not available in Europe.All other models are

* Brick

compliant with European RoHS (Restriction of Hazardous Substances) directive.

Road Warrior SOHO ROBO Small Enterprise Mid Enterprise Large

VPN Firewall

®

50

Brick

• (3) 10/100 ports
195 Mbps fir

•

• 75 Mbps 3DES

• 135,000 sessions
1000

•

• 50 virtual firewalls

ewall

VPN tunnels

VPN Firewall

®

150

Brick

• (4) 10/100 ports
330 Mbps fir

•

• 127 Mbps 3DES

• 245,000 sessions
1000

•

• 150 virtual firewalls

ewall

VPN tunnels

VPN Firewall

®

350*

Brick

• (7) 10/100 ports
(1) 10/100/1000 port

•

• 787 Mbps firewall

• 404 Mbps 3DES
1,000,000 sessions

•

• 5400 VPN tunnels
300 virtual firewalls

•

VPN Firewall

®

700

Brick

• (8) 10/100/1000 port

•

• 425Mbps 3DES

• 1,000,000 sessions

•

• 350 virtual firewalls

1.7 Gbps fir

VPN tunnels

7500

ewall

VPN Firewall

®

1100*

Brick

• (4) GigE Fiber or
(13) GigE Copper
(7) 10/100

ewall

3 Gbps fir

•

• up to 1 Gbps 3DES
4,000,000 sessions

•

VPN tunnels

20000

•

• 1,000 virtual firewalls
Brick 1100A has AES

•

Accel

H/W

Alcatel-Lucent Security Management Server

Software for robust, tightly synchronized firewall, VPN, service quality, VLAN and virtual firewall policy management.

VPN Firewall

®

1200/1200HS

Brick

• (2) or (6) mini-GBIC SFP
(8) or (14) 10/100/1000
port

3.0 or 4.75Gbps fir

•

• 1.1 or 1.7Gbps 3DES
2,000,000 or 3,000,000

•
sessions

10000 or 20000

•
tunnels

• 500 or 1100 virtual
firewalls

Data Center

ewall

VPN

VPN Firewall Brick®platforms deliver bullet-pr

and compr
for service pr
ranging fr

ehensive, high-performance VPN capabilities

nment, and enterprise envir

, gover

ovider

om small of

fices to large data centers.

oof security

onments

Active/Active
Management

VLAN 100

E

xtranet Server

VLAN 200

S

AP Server

VLAN 300

M

ail Server

VLAN 400

P

ublic Server

VLAN 400

Public Server

IP Network

Data Center

S

ervices

N

etwork-based

Services

Mobile/IPSec Client

Services

C

entralized Management

w

ith Alcatel-Lucent SMS

CPE-based

Services

E

xisting

R

outer

E

xisting

R

outer

E

xisting

Router

V

PN Firewall

Brick

®

50/150

V

PN Firewall
Brick

®

350

VPN Firewall

Brick

®

700

Alcatel-Lucent

S

ecurity

M

anagement

Server

Alcatel-Lucent

Security

Management

Server

E

MEA NOC

U

SA NOC

V

PN Firewall

Brick

®

1100

VPN Firewall

B

rick

®

1

200 HS

IPSec

Client

Key Features and Benefits

Alcatel-Lucent VPN Firewall Portfolio At-A-Glance

The Alcatel-Lucent VPN Firewall
portfolio offers flexible deployment
options to suite service provider,
government, and enterprise network
strategies and users’ diverse needs.

• Simplified management – unique
client/server design; centralized
staging, real-time monitoring and
no-touch management of all VPN,
security and service-quality
assurance capabilities via scalable,
proven Alcatel-Lucent SMS

• Full-featured bridging – enables
stealthy, depth-of defense security
that conventional router-based
firewalls cannot match

• Advanced security safeguards –
denial-of-service attack protection;
high-speed content security;
premium authentication services;
with no occurrences of reported
advisories or vulnerabilities and no
backdoors.

• Uniquely granular bandwidth

management

– maximize service
quality via flexible class-based
queuing (CBQ) technology, server­level and user-level limits and
guarantees

• Carrier-grade reliability – native
high-availability architecture with
no single point of failure

• Rules Based Routing – Routes all
packets matching the rule to a
proxy server, router or other
device utilizing third party
software to perform content
filtering functions such as
command blocking, URL filtering
and virus scanning. Allows
transparent interaction with any
third party equipment.

• High-performance packet

processing

– supports up to 4
million simultaneous sessions,
1100 virtual firewalls, 20,000 VPN
tunnels

• Ultra-thin, highly secure operating

system

– virtually impenetrable to
hacker attacks; frees memory for
packet processing, policy
management

• Virtual firewall and VLAN support –
easily assign and enforce security
policies for diverse user groups

• Plug-and-play deployment –
implement secure mission critical
applications without costly, time­intensive network reconfiguration

• Low ownership costs – no ongoing
feature-licensing expenses; easy
installation, management and
upgrades save IT staff time and
effort; high-performance, high
capacity features reduce the need
to purchase additional equipment

o learn more about our comprehensive portfolio, contact your

T
Alcatel-Lucent sales representative or business partner.

You can also visit our web site at www.alcatel-lucent.com.

Alcatel, Lucent, Alcatel-Lucent, and the Alcatel-Lucent logo, are
trademarks of Alcatel-Lucent. VPN Firewall Brick is a registered
trademark of Alcatel-Lucent. All other trademarks are the
property of their respective owners. Alcatel-Lucent assumes no
responsibility for the accuracy of the information presented,
which is subject to change without notice.

Copyright © 2007
Alcatel-Lucent
All rights reserved

LVF v1 0107