2024年4月28日发(作者：捷鹏鲲)
Burgeoning services such as high-speed Internet access, video, and
media stream lead to the rocketing of network traffic and ever-
increasing service requirements of large organizations, intranets,
and data centers in the 10-Gigabit epoch. New applications emerge
and occupy the fixed ports of traditional services, making traditional
port-dependent firewalls inadequate to cope with such applications.
For the sake of illegal profits, hacker attacks and malware are
spreading at will. Under this background, false positive and false
negative are frequently seen in traditional traffic-based attacks.
IT administrators find it difficult to deal with so many problems;
therefore, large organizations, intranets, and data centers have to
be confronted with such predicaments:
•
How to select a cost-effective product to deal with ever-
increasing service requirements at present and in the future?
•
How to block abuse and provide sufficient bandwidths for mission-
Eudemon1000E-X3
Eudemon1000E-X5
Highlights
10-Gigabit Multi-Core Hardware Platform
■
Prominent performance, realizing mass service processing
•
Provides 15G firewall throughput, 200,000 new connections
per second, 4,000,000 concurrent connections, and 15,000
concurrent VPN tunnels.
•
Supports high-capacity NAT.
■
High-density 10G interfaces, suiting different application
scenarios
HUAWEI TECHNOLOGIES CO., LTD.
critic applications in the case of so many new applications?
•
How to deal with flooding worms, effectively protecting intranets
and securing office environments?
With in-depth understanding of service and customer requirements,
Huawei launches its Eudemon1000E-X series. This series employs the
new 10-Gigabit multi-core hardware platform and constructs a more
high-speed network with no delay for processing mass services. By
integrating advanced Symantec intrusion prevention and anti-virus
technologies, it delivers content security protection and builds a secure
network; with Huawei industry-leading deep packet inspection (DPI)
technology, it manages thousands of application programs subtly and
provides an effective network. All in all, the Eudemon1000E-X series
brings "continuous, cost-effective, and secure" network experience
for large organizations, intranets, and data centers.
Eudemon1000E-X6
•
Delivers 64 Gigabit+14 x 10-Gigabit high-density interfaces.
■
Super-long mean time between failures (MTBF), safeguarding
service continuity
•
Supplies redundant key components and mature link conversion.
•
Provides built-in bypass cards for both optical and electrical links.
•
Relies on a stable software platform for over 10 years'
commercial use, and more than 100,000 devices concurrently
online in the world.
Refined Management over Thousands of
Application Programs, Building an Efficient
Network
■
Wide application identification, providing visibility into the
applications running on your network
•
Possesses 150 application identification experts, and over 850
identifiable categories.
■
Massive Web site categories, constructing a green Internet
access environment
•
Equips with 65 million Web sites and over 130 content
categories, blocking Trojan horse-embedded and phishing
Web sites, isolating pornographic and gambling Web sites,
and preventing employees against maloperations.
■
Refined application management, creating an efficient
working network
•
Offers multi-dimensional control measures specific to time,
application, user, bandwidth, and connection number,
effectively providing bandwidths for mission-critic applications,
improving bandwidth usage and working efficiency, and
making P2P/IM//Web sites at your mercy.
Professional Content Security Defense,
Providing a Secure Network
■
Industry-leading anti-virus engine with 99% high identification
accuracy
•
Bases on Symantec accumulative anti-virus technologies,
adopts the anti-virus engine with file-level content scanning,
combines the globally leading emulation environment and
virtual execution technology, provides a 99% identification
ratio, and gains good reputation from the international
assessment organization.
Application Scenarios
Network Isolation and VPN Interconnection
■
Customer challenges
•
Because user networks reside in different network areas,
problems such as unclear borders, improper access control
management, and disordered mutual access may occur.
When branches and mobile employees communicate with the
headquarters, data may be intercepted or tampered.
■
Solution strengths
1
■
Dedicated vulnerability patching, making transformation
illuminated
•
Maintains and updates the huge signature database by the
traditional attack code-based defense mode due to the
transformation of attack types, which imposes overload on the
IPS engine and leads to low detection performance and high
false negative and false positive ratios. The Eudemon1000E-X
is backed by advanced Symantec vulnerability defense
technology and delivers virtual patches for vulnerabilities (not
attack code), disabling various attacks from transforming.
■
Real-time update by a professional team, realizing zero-day
attack defense
•
Supplies the honeynet system deployed globally together
with a professional team of over 300 experts to keep tracking
the latest, hottest, and most dangerous system and software
vulnerabilities, and to defend against zero-day attacks quickly.
One-Key Configuration, Freeing You from
Complicated Policy Optimization
■
GUI, a farewell to CLI
•
Delivers the Web page–based configuration and management,
visualized and simple.
■
Professional configuration wizard, simplifying policy configuration
•
Provides a professional configuration wizard for each independent
service.
■
One-key enabling of IPS and anti-virus, reducing maintenance
workload
•
Builds the IPS/anti-virus rule base, with a 99% detection
ratio, which can be directly enabled without commissioning.
Therefore, administrators are freed from time-consuming,
strenuous, and complicated policy optimization, and quick
deployment comes true, that is, plug and play.
•
Delivers 15G processing performance, avoiding the bottleneck
of border deployment.
•
Divides security zones on demand, clearly planning network
borders.
•
Provides the flexible packet filtering policies, accurately
controlling mutual access.
•
Comes with 15,000 concurrent VPN tunnels, 7G VPN
encryption and decryption capabilities, ensuring mass secure
interconnection and securing data communication.
2024年4月28日发(作者：捷鹏鲲)
Burgeoning services such as high-speed Internet access, video, and
media stream lead to the rocketing of network traffic and ever-
increasing service requirements of large organizations, intranets,
and data centers in the 10-Gigabit epoch. New applications emerge
and occupy the fixed ports of traditional services, making traditional
port-dependent firewalls inadequate to cope with such applications.
For the sake of illegal profits, hacker attacks and malware are
spreading at will. Under this background, false positive and false
negative are frequently seen in traditional traffic-based attacks.
IT administrators find it difficult to deal with so many problems;
therefore, large organizations, intranets, and data centers have to
be confronted with such predicaments:
•
How to select a cost-effective product to deal with ever-
increasing service requirements at present and in the future?
•
How to block abuse and provide sufficient bandwidths for mission-
Eudemon1000E-X3
Eudemon1000E-X5
Highlights
10-Gigabit Multi-Core Hardware Platform
■
Prominent performance, realizing mass service processing
•
Provides 15G firewall throughput, 200,000 new connections
per second, 4,000,000 concurrent connections, and 15,000
concurrent VPN tunnels.
•
Supports high-capacity NAT.
■
High-density 10G interfaces, suiting different application
scenarios
HUAWEI TECHNOLOGIES CO., LTD.
critic applications in the case of so many new applications?
•
How to deal with flooding worms, effectively protecting intranets
and securing office environments?
With in-depth understanding of service and customer requirements,
Huawei launches its Eudemon1000E-X series. This series employs the
new 10-Gigabit multi-core hardware platform and constructs a more
high-speed network with no delay for processing mass services. By
integrating advanced Symantec intrusion prevention and anti-virus
technologies, it delivers content security protection and builds a secure
network; with Huawei industry-leading deep packet inspection (DPI)
technology, it manages thousands of application programs subtly and
provides an effective network. All in all, the Eudemon1000E-X series
brings "continuous, cost-effective, and secure" network experience
for large organizations, intranets, and data centers.
Eudemon1000E-X6
•
Delivers 64 Gigabit+14 x 10-Gigabit high-density interfaces.
■
Super-long mean time between failures (MTBF), safeguarding
service continuity
•
Supplies redundant key components and mature link conversion.
•
Provides built-in bypass cards for both optical and electrical links.
•
Relies on a stable software platform for over 10 years'
commercial use, and more than 100,000 devices concurrently
online in the world.
Refined Management over Thousands of
Application Programs, Building an Efficient
Network
■
Wide application identification, providing visibility into the
applications running on your network
•
Possesses 150 application identification experts, and over 850
identifiable categories.
■
Massive Web site categories, constructing a green Internet
access environment
•
Equips with 65 million Web sites and over 130 content
categories, blocking Trojan horse-embedded and phishing
Web sites, isolating pornographic and gambling Web sites,
and preventing employees against maloperations.
■
Refined application management, creating an efficient
working network
•
Offers multi-dimensional control measures specific to time,
application, user, bandwidth, and connection number,
effectively providing bandwidths for mission-critic applications,
improving bandwidth usage and working efficiency, and
making P2P/IM//Web sites at your mercy.
Professional Content Security Defense,
Providing a Secure Network
■
Industry-leading anti-virus engine with 99% high identification
accuracy
•
Bases on Symantec accumulative anti-virus technologies,
adopts the anti-virus engine with file-level content scanning,
combines the globally leading emulation environment and
virtual execution technology, provides a 99% identification
ratio, and gains good reputation from the international
assessment organization.
Application Scenarios
Network Isolation and VPN Interconnection
■
Customer challenges
•
Because user networks reside in different network areas,
problems such as unclear borders, improper access control
management, and disordered mutual access may occur.
When branches and mobile employees communicate with the
headquarters, data may be intercepted or tampered.
■
Solution strengths
1
■
Dedicated vulnerability patching, making transformation
illuminated
•
Maintains and updates the huge signature database by the
traditional attack code-based defense mode due to the
transformation of attack types, which imposes overload on the
IPS engine and leads to low detection performance and high
false negative and false positive ratios. The Eudemon1000E-X
is backed by advanced Symantec vulnerability defense
technology and delivers virtual patches for vulnerabilities (not
attack code), disabling various attacks from transforming.
■
Real-time update by a professional team, realizing zero-day
attack defense
•
Supplies the honeynet system deployed globally together
with a professional team of over 300 experts to keep tracking
the latest, hottest, and most dangerous system and software
vulnerabilities, and to defend against zero-day attacks quickly.
One-Key Configuration, Freeing You from
Complicated Policy Optimization
■
GUI, a farewell to CLI
•
Delivers the Web page–based configuration and management,
visualized and simple.
■
Professional configuration wizard, simplifying policy configuration
•
Provides a professional configuration wizard for each independent
service.
■
One-key enabling of IPS and anti-virus, reducing maintenance
workload
•
Builds the IPS/anti-virus rule base, with a 99% detection
ratio, which can be directly enabled without commissioning.
Therefore, administrators are freed from time-consuming,
strenuous, and complicated policy optimization, and quick
deployment comes true, that is, plug and play.
•
Delivers 15G processing performance, avoiding the bottleneck
of border deployment.
•
Divides security zones on demand, clearly planning network
borders.
•
Provides the flexible packet filtering policies, accurately
controlling mutual access.
•
Comes with 15,000 concurrent VPN tunnels, 7G VPN
encryption and decryption capabilities, ensuring mass secure
interconnection and securing data communication.