Desktop Firewall - HERHSIANG Information Co., Ltd.

Home Page

Member sign up | Member login

Home Page Services Small Companies / SOHO Firewall New Performance Desktop Firewall

Services

New Performance

Product Name

Desktop Firewall

Model

NGS 3H

Introduction

Maximum number of connections: 150,000 | Maximum processing speed: 1.8Gbps | VPN performance: 200Mbps

1 LAN / 3 can define PORT | All Giga Port (10/100/1000M)

Planable mode 1LAN / 3WAN or 2LAN / 2WAN or 3LAN/1WAN

Support 3G / 4G / LTE USB mobile wireless network card

Support IPSEC / SSL / PPTP / L2TP (IOS available) VPN

Applicable branch office / small office / dormitory / community broadband

(Installation fee is extra, free remote setting and technical service are available, please click to contact us)

Product Specification

In today's information-developed generation, the network system has become a tool that the world depends on, and its security and danger have also become the most important piece. Therefore, in the pursuit of using the Internet, people not only choose speed, but also have to be able to take into account defense in order to help companies protect private data and create a stable working environment.

HERHSIANG NGS 3H is a next-generation firewall device with both speed and security, and supports USB2.0 port. It can connect 3G and 4G / LTE USB as another WAN network backup option. The NAT processing performance is up to 1.8 Gbps. . In addition to the firewall function, NGS 3H also has many powerful functions such as bandwidth management, load balancing, content filtering, and virtual private tunnel (IPSec VPN).

NGS 3H is suitable for small and medium-sized enterprises and SOHO network environments of different sizes, and once meets the needs of professional customers for network security defense. It helps enterprises to block all kinds of virus threats on the front line of the network gateway in real time, while still keeping the network with satisfactory high-quality performance.

Balance performance and function

HERHSIANG NGS 3H, its hardware platform is carefully designed with X86 hardware devices, so that enterprise users can fully appreciate the security protection provided by HERHSIANG New Generation Firewall. For customers with high connectivity requirements, provide high-performance security modules to improve connectivity and support USB fast restore mechanism.

IP v4 / v6 dual frequency technology

The IP v4 address is in short supply, and the IP v6 era is coming sooner or later, so HERHSIANG has integrated this trend when developing the next generation of Firewall. The same network interface, whether it is defined as WAN or LAN, can be bound at the same time. The IP address of v4 or v6, so NGS 3H is the same regardless of the pure v4 environment, v4/v6 hybrid, and pure v6 environment.

Support SDN controller

Supporting SDN controller, more than one port group can be combined into ZONE, which is directly managed by SDN controller, and ZONE and ZONE packets are transmitted, and will also be detected by NGS 3H packet. It also has the function of VLAN 802.1Q, which can cut the internal network into several independent subnet segments, each of which has independent operation and does not interfere with each other.

SSL encrypted connection detection

With the ability to detect SSL traffic, it can apply intrusion detection defense, gateway anti-virus, content filtering and application bandwidth management when faced with SSL-encrypted connection traffic.

Load balancing

Provides outbound and inbound load balancing, and provides multiple load balancing algorithms. When one of the lines is disconnected, all network packets will automatically switch to another normal line, ensuring that the internal user network is unblocked. When the line is restored, the packet is buffered. It will be automatically assigned. The enterprise can set the load balancing rules according to the requirements, and the network access can perform the network traffic load balancing guidance by referring to the set rules. The algorithms are: automatic allocation, manual allocation, source IP allocation, and destination IP allocation.

Abnormal IP analysis

Any network behavior, regardless of which software the user performs, is roughly divided into the number of connected and downloaded Connect Sessions, Flows, and Durations from the perspective of network packets. The combination of quantities estimates whether the user is using the network normally or has abnormal behavior. When an internal user's abnormal behavior is discovered, the administrator can take various strategies, such as blocking the Internet, immediately limiting its maximum bandwidth, enabling the collaborative defense mechanism to notify the switch to block it or notify the administrator.

Bandwidth Management (QoS)

Help network administrators control network traffic, effectively slow down corporate network congestion, improve serviceability and bandwidth usage. With QoS (Bandwidth Management), it can distribute limited bandwidth to all users. The difference from the general bandwidth manager is that NGS 3H has a guaranteed bandwidth function in addition to maximum bandwidth and priority management. It also has a personalized bandwidth management design that allows for bandwidth management settings for individual users. If bandwidth management is used with personalized bandwidth management, the bandwidth reserved by the bandwidth management function can be allocated to users under the enterprise, which can effectively prevent the bandwidth from being exclusive to the user.

Content filtering

Provide Web Filter (Web Filter) to block inappropriate access to web pages (such as pornography, violence) and offensive web pages (such as hackers, viruses), and to set up filtering conditions to block inappropriate websites.

URL database management

The built-in "cloud URL database" automatically classifies web pages. Managers can easily control against harmful URLs. You can easily control them without having to enter the IP address and keywords of the website one by one. Any choice of harmful URLs is a source of sin. The best way to prevent blocking is to ban the use of the Internet. If it is not completely banned, using a constantly updated URL database is the best protection mechanism.

Online behavior record

Some employees of the company go online during work hours, do things that are not for work purposes, have small chats, and have a lot of secrets. In addition to limiting the permissions used by user-related applications, NGS 3H can also record related online behaviors, including browsing web pages and mail delivery. When a company has a leak, the information that has been saved is the best evidence used to prove it.

Traffic Analysis

Provides traffic analysis tools, whether it is the internal user computer on/off status, network traffic instant display, protocol assignment and traffic leaderboard, when the line is fully loaded, you can immediately find the traffic murderer.

Application management

Various network application softwares are not only difficult to manage, but also easier to become the best conduit for data leakage and virus attacks. NGS 3H has built-in multiple application management functions, including instant messaging, audio and video services, file transfer, P2P software, remote control, browser, VOIP, online games, network protocols, etc., which can easily control employees to use application software. Permissions to protect corporate network security.

VPN function

Use IPSec, PPTP, L2TP, and SSL VPN to secure connection between Site to Site, Point to Site, and remote users. Through these VPN mechanisms, users can connect to different devices, such as laptops, branch offices, business offices, mobile devices or homes, from different locations, including home and external public information service stations and the Internet. …Wait.

Among them, SSL VPN is the most important long-distance secure transmission connection between most enterprises, customers and partners.

Graphical traffic report (DashBoard purchase)

Provides a flow report of the WEB interface, and draws the historical state of the system into a chart, so that the administrator can keep abreast of the current system operation status. NGS 3H provides system status chart (including CPU load map, memory load map, system load), network traffic graph (LAN traffic, WAN1~WAN2 traffic and DMZ traffic), and provides query conditions to quickly search each traffic status history.