Planet Networking & Communication | CS-2001 | Check Datasheet!

CS-2001
UTM Content Security Gateway
The innovation of the Internet has created a tremendous worldwide
opportunities for e-business and information sharing, however, it also brings
network security problems. The request of information security becomes the
primary concern for the enterprises. To fulfill the demand, PLANET introduces
the UTM Content Security Gateway CS-2001, the next generation of CS-2000,
to support the enterprises build up the secure network protection. For further
IP compatibility, it supports IPv6 as well.
The CS-2001 adopts Heuristics Analysis to filter spam and virus mails, and its auto-training system can increase the identify rate of spam. The built-in 500GB
Hard Disk can store the spam mail in quarantine. The Anti-Virus application has dual virus scan engines - Clam and Sophos to detect viruses, worms and other
threats from E-mails and Internet. It helps the administrators to monitor the mail status easily by providing mail reports by Daily, Weekly, Monthly and Yearly.
Besides filtering spam and virus mail, the CS-2001 presents the IDP and firewall functions to defense hackers and blaster attacks from Internet or Intranet. The
comprehensive functions in one device provide enterprises security solutions and better secure environment than ever.
The CS-2001 supports most of popular security features including Content Blocking to block specific URL, Scripts, IM/P2P program, Authentication, IPSec, PPTP
VPN server/Client, SSL VPN, QoS, High Availability, Inbound Load-Balancing and etc. Furthermore, it provides higher performance with all Gigabit Ethernet
interfaces which offer faster speeds for your network applications. The user defined interfaces provide flexible requirement for the network nowadays, and
multiple WAN interfaces enable the CS-2001 to support Outbound/Inbound load balance and WAN fail-over features. As the result, the VPN not only can
configure Trunk mode but also provide VPN fail-over and load balance features which is a VPN redundant mechanism to keep the VPN always alive.
Applications
UTM Content Security Gateway
PLANET UTM Content Security Gateway, CS-2001, is a specially designed security gateway with virus and spam filtering features. As the gatekeeper of
corporate security network, the CS-2001 prevents corporate intranet from being infected by virus and its network resource being occupied by useless spam
mails. Furthermore, IDP, User Authentication and Content Filter features of the security gateway offer the corporate intranet highly secure protection. The CS2001 also provides the IPSec, SSL VPN, and PPTP VPN solutions for secure data delivery via VPN tunnel.
Branch Office
Vendor
Firewall Gateway
Firewall Gateway
PC
001101010
001101010
ADSL
Modem
Modem
Internet
IPSec VPN Tunnel
IPSec VPN Tunnel
PC
b/g
Access Point
Laptop
ADSL
001101010
Modem
Attack Virus
Access Point
Spam
SSL VPN Tunnel
Firewall CS-2001
Firewall
DMZ
PC
b/g
ADSL 2/2+
ADSL
100Base-TX UTP
1000Base-T UTP
Laptop
Finance-Server
PC
Headquarters
Data Sheet
1
Web-Server
Mail-Server
b/g
Home
2.4GHz 802.11b/g
CS-2001
Key Features
All Gigabit user defined Interface
IDP
The CS-2001 not only supports all Gigabit Ethernet interfaces to
provide higher performance but is also able to be defined the
interface role for your network environment.
IPv6
Built-in IDP function can detect the intrusions and prevent the
network from Hacker attacks, Anomaly Flow and Signatures from
the Internet. The CS-2001 provides three kinds of the signatures
to complete the intrusion detection system, and users can select
to configure “Anomaly”, “Pre-defined” and “Custom” according
to the current environment request.
IPv6 is designed to success the IPv4 version. The CS-2001
implements the new IP version for further compatibility of
network environment.
Policy-Based Firewall
Anti-Spam Filtering
Multiple defense layers (Spam Fingerprint, Blacklist & Whitelist,
Bayesian Filtering, Spam Signature, Graylist, Checking sender
account and IP address in RBL), and Heuristics Analysis help to
block over 95% of spam mails. Customizable notification options
and spam mail report are provided for administrators. Varied
actions to spam mails include Delete, Deliver, Forward and Store
in the quarantine. It also has built-in auto-training system to
improve the identify rate of spam mails substantially.
QoS
Network packets can be classified based on IP address, IP subnet
and TCP/UDP port number and offer guarantee of maximum
bandwidth with three levels of priority.
Anti-Virus Protection
User Authentication
Built-in dual virus scan engines can detect viruses, worms and
other threats from email transfer and can scan mission-critical
content protocols, SMTP and POP3 in real time to provide
maximum protection. It provides customizable notification options
and virus mail report for administrators. Varied actions to virus
mails include Delete, Deliver, Forward and Store in the quarantine.
Web-Based authentication allows users to be authenticated by
web browser. User database can be configured on CS-2001 and
it also supports the authenticated database through external
RADIUS, POP3 and LDAP server.
Anti-Virus for HTTP, FTP, P2P, IM, NetBIOS
The CS-2001 can filter the virus from various protocols. The virus
pattern can be updated automatically or manually.
WAN Backup
The CS-2001 can monitor each WAN link status and automatically
activate backup links when a failure is detected. The detection is
based on the configurable target Internet address.
Outbound Load Balancing
VPN Connectivity
The CS-2001 supports several VPN features -- IPSec VPN, SSL
VPN and PPTP server/client. The VPN Tunnel with DES / 3DES
/ AES encryption and SHA-1 / MD5 authentication provides
secure network traffic over public Internet. VPN Wizard helps the
administrators to configure VPN settings easily.
The network sessions are assigned based on the user configurable
load balancing modes including “Auto”, “Round-Robin”, “By
Traffic”, “By Session” and “By Packet”. Users can also configure
IP or TCP/UDP type of traffic and assign which one of the two
WAN ports for connection.
Inbound Load Balancing
SSL VPN
SSL VPN allows users to easily establish VPN connections for
transferring the data by SSL encryption via web browser without
the need of any software or hardware installation.
The CS-2001 provides the Inbound Load Balancing for enterprises
internal server. The Inbound Load Balancing can reduce the server
loading and system crash risks in order to improve the server
working efficiency.
VPN Trunk
Multiple NAT
VPN trunk function provides VPN load balance and VPN fail-over
feature to keep the VPN connection more reliable.
Multiple NAT allows local ports to be set in multiple subnets and
connect to the Internet through different WAN IP addresses.
Content Filtering
VLAN
The CS-2001 can block network connection based on URLs,
Scripts (The Pop-up, Java Applet, cookies and Active X), P2P
(eDonkey, Bit Torrent, WinMX and more), Instant Messaging
(MSN, Yahoo Messenger, ICQ, QQ, Skype and Google Talk) and
Download / Upload. If there are update versions of P2P or IM
software in client side, the CS-2001 will detect the difference
and update the Content Filtering pattern to renew the filtering
mechanism.
The CS-2001 provides IEEE 802.1Q Tagged VLAN and the VLAN
groups which allows administrator to install the network flexibly.
Data Sheet
2
The built-in Policy-Based firewall prevents many well-known
hacker attacks including SYN attack, ICMP flood, UDP flood, Ping
of Death, and etc. The access control function specifies WAN or
LAN users to use authenticated network services only on specified
time.
High Availability
The CS-2001 provides the High Availability function and the
redundant system to keep the network traffic active when the
device crash down.
PLANET Technology Corporation
11F, No. 96, Min Chuan Road, Hsin Tien, Taipei, Taiwan, R.O.C.
Tel: 886-2-2219-9518 Fax: 886-2-2219-9528
Email: sales@planet.com.tw www.planet.com.tw
VoIP Gateway: vip.planet.com.tw
PLANET reserves the right to change specifications without prior notice. All brand names and trademarks are property of
their respective owners. Copyright © 2008 PLANET Technology Corp. All rights reserved.
CS-2001
Specification
Product
UTM Content Security Gateway
Model
Hardware
CS-2001
Ethernet
Console
Hard Disk
Hardware Watch-Dog
Software
Management
Operation Mode
Routing Protocol
Concurrent Sessions
New session per sec.
Email Capacity per Day
(mail size 1098 bytes)
Firewall Performance
SSL VPN Performance
IPSec VPN Performance
(With 3DES)
Multiple subnet
VPN Tunnels
(Connection/Configure)
Content Filtering
IDP
Anti-Virus
Anti-Spam
QoS
User Authentication
Logs
Data Sheet
3
Web (English, Traditional Chinese, Simplified Chinese)
DMZ_Transparent, DMZ_NAT, NAT
Static Route, RIPv2, OSPF, BGP
1,000,000
10,000
2,000,000
1.6Gbps incoming and outgoing
80Mbps
100Mbps
Policy-Based access control
Stateful Packet Inspection (SPI)
NAT / NAPT
Max. 64 multiple subnets
With VLAN id feature can assign multiple subnets
VLAN trunk support
Firewall Security
VPN Function
Undefined Ethernet Port
4 x 10/100/1000Base-T RJ-45, Auto-Negotiation, Auto MDI / MDI-X
1 x RS-232 (9600, 8, N, 1)
500 GB
Auto reboot when detecting system fail
200 / 1000
IPSec, SSL VPN, PPTP server and client
DES, 3DES and AES encrypting
SHA-1 / MD5 authentication algorithm
Remote access VPN (Client-to-Site) and Site to Site VPN
URL Blocking
Script Blocking (Popup, Java Applet, cookies and Active X)
IM blocking (MSN, Yahoo Messenger, ICQ, QQ, Skype, Google Talk and more)
P2P blocking (eDonkey, Bit Torrent, WinMX and more)
Download and Upload blocking
Anti-Virus for HTTP, FTP, P2P, IM, NetBIOS
Automatic or manual update virus and signature database
Anomaly: Syn Flood, UDP Flood, ICMP Flood and more
Pre-defined: Backdoor, DDoS, DoS, Exploit, NetBIOS and Spyware
Custom: User defined based on TCP, UDP, ICMP or IP protocol
Yearly, Monthly, Weekly and Daily Report support
Virus scan engine: Two scan engines - Sophos and Clam
Email attachment virus scanning by SMTP, POP3
Inbound scanning for internal and external Mail Server
Action of infected mail: Delete, Deliver to the recipient, forward to an account and store in quarantine
Automatic or manual update virus database
Inbound scanning for external and internal Mail Server
Supports Spam Fingerprint, Bayesian, Signature, RBL and Graylist filtering,
checking sender account and IP to filter the spam mail
Black list and white list support auto training system
Action of spam mail: Delete, Deliver to the recipient, forward to an account and store in quarantine
Yearly, Monthly, Weekly and Daily Report support
Policy-Based bandwidth management
Guarantee and maximum bandwidth with 3 priority levels
Classify traffics based on IP, IP subnet, TCP/UDP port
Built-in user database with up to 500 entries
Supports local database, RADIUS, POP3 and LDAP authentication
Traffic Log, Event Log and Connection Log
Log can be saved from web, backup by e-mail or syslog server
PLANET Technology Corporation
11F, No. 96, Min Chuan Road, Hsin Tien, Taipei, Taiwan, R.O.C.
Tel: 886-2-2219-9518 Fax: 886-2-2219-9528
Email: sales@planet.com.tw www.planet.com.tw
VoIP Gateway: vip.planet.com.tw
01-08
C-POE-100SK
PLANET reserves the right to change specifications without prior notice. All brand names and trademarks are property of
their respective owners. Copyright © 2008 PLANET Technology Corp. All rights reserved.
CS-2001
Accounting Report
Statistics
Others
Record Inbound and Outbound traffic’s utilization by Source IP, Destination IP and Service
Backup Accounting Report for Outbound and Inbound traffic
WAN Ports traffic statistic and policies statistic with graph display
Dynamic DNS
NTP support
Multiple Server load balancing
Outbound / Inbound load balancing
High Availability
SNMP v1, v2, v3
Ordering Information
CS-2001
Data Sheet
4
12-10
UTM Content Security Gateway ( Multiple WAN, LAN, DMZ )
PLANET Technology Corporation
11F, No. 96, Min Chuan Road, Hsin Tien, Taipei, Taiwan, R.O.C.
Tel: 886-2-2219-9518 Fax: 886-2-2219-9528
Email: sales@planet.com.tw www.planet.com.tw
C-CS-2001
PLANET reserves the right to change specifications without prior notice. All brand names and trademarks are property of
their respective owners. Copyright © 2010 PLANET Technology Corp. All rights reserved.
Download PDF