Billion Electric Company S100N Network Card User Manual

802.11n Gigabit SSL / IPSec VPN Gateway
with Portal-based Wireless NAC
Features & Specifications
Capabilities
• Recommended for small offices and SMBs
• Concurrent SSL VPN tunnels:
up to 30, basic 10 tunnels
with employees from 50 to 200
Access Connections
• Network Extender (TCP / UDP)
• Personalized web portal
• Standalone Network Extender client
• SSL hardware accelerator
• Network Place
• Single Sign-On (SSO)
• 10 IPSec VPN tunnels
• AES 128 / 192 / 256 encryption
• Manual key, Internet Key Exchange (IKE)
• IP Authentication Header (AH)
authentication and key management
• Concurrent sessions: 25,000
• IP Encapsulating Security Payload (ESP)
• Authentication (MD5 / SHA-1)
• Dynamic VPN (FQDN) support
• DES / 3DES encryption
• Supports remote access and
Applications & Management
• WPS (Wi-Fi Protected Setup)
and 802.11b standards
• 64 / 128 bits WEP supported for encryption
• 2.4 GHz – 2.484 GHz frequency range
• Network File Share (CIFS)
• WOL (Wake On LAN)
• Citrix client
• Granular user policy management
• Terminal services (RDP5, RDP6)
• Supports mobile devices
• File Transfer Protocol (FTP)
(Microsoft Windows Mobile 5.0 / 6.0 or
• Telnet
compatible)
- Up to 4 SSIDs setup
(NT LAN Management) authentication
• Wireless NAC (Network Access Control)
• SSL VPN gateway plus solid router and firewall functions
• IPSec VPN capabilities
• Gigabit for both LAN and WAN connectivity
• Supports Wi-Fi WMM prioritization
• Personalized web portal
• WDS repeater function support
• Data encryption, user authentication and access control
- Guest account auto-generating
• End Point Security (EPS) checking*3
- Guest account duration control
• Supports MS IIS NTLM
• Draft 802.11n wireless and delivers up to 300Mbps link rate
• Granular access policy management
WPA2-PSK support
• Wireless NAC (Network Access Control)
Key Features
• Rich in SSL VPN applications
• Wireless Security with WPA-PSK /
• Up to 300Mbps wireless link rate
r
ideal fo
ices
Small Off
SMBs
ents of
Departm
SMEs
Wireless
• Compliant with IEEE 802.11n, 802.11g
• Virtual Network Computing (VNC)
BiGuard S100N
office-to-office IPSec connections
• Application Proxy
• Supports MS Outlook Web Access (OWA)
Concerned about your corporate Intranet being intruded while offering WLAN Internet/Intranet access?
- With BiGuard S100N you can, with no risk or compromise to the security of your corporate network.
IPSec VPN
SSL VPN
• Host security checking
• USB 2.0 port for plugging a 3G / HSDPA modem*3
Network Protocols and Features
• Secure Shell (SSH, SSHv2) support
• SSL event log and monitor
• SRDP (Single Remote Desktop Protocol)
• Web based data (HTTP, HTTPS)
• Static IP, PPPoE and DHCP client
• DHCP server
• Supports Wi-Fi WMM prioritization
• Authentication domains: RADIUS,
• NAT, static routing and RIP1/2
• SNTP
• Quality of Service control
• Dynamic Domain Name System (DDNS)
• SNMP
• Windows / Linux / Macintosh supported
• Microsoft Windows Mobile 5.0 / 6.0 compatible mobile devices supported
Security
• SSL encryption
connection to ISP
• Web cache cleaner
LDAP, Active Directory, NT Domain
• Local database
• Host security checking
• Router mode
• Multi-NAT
• Digital certificate
• End Point Security checking*3
• Virtual server
• Transparent bridging
• Self-signed certificate
Compatible Web Browsers*1
versions
• Netscape 7.0 and newer versions
• Opera 9.0 and newer versions
Supported Operating Systems*1
• Firefox 1.5 and newer versions
• Safari 2.0 and newer versions
• E-mail alerts and intrusion logs
• System log
• System status monitoring
Physical Specifications
• 1 x 10 / 100 / 1000Mbps
• Dimensions: 19" x 6.93" x 1.65"
Gigabit WAN ports
• 4 x 10 / 100 / 1000Mbps
Gigabit LAN ports
(1 port can be configured as DMZ)
• 3 detachable 2.4GHz 2dBi SMA antenna
• Instruction detection
• Denial of Service (DOS) prevention
• URL filter
• Packet filter
• Java Applet / Active X / Cookie
blocking
• BiGuard Central Management System*3
• BiGuard One-Time Password
Physical Interface
• Stateful Packet Inspection (SPI)
• BiGuard SSL VPN Tunnel Upgrades
Hardware Specifications
• Sun JRE 1.3 and newer versions
Firewall & Content Filtering
With the increasing availability of wireless technology, small offices and SMBs are
• 1 x USB 2.0 host (Future extension)
finding that WLAN deployment can allow them to increase the overall efficiency of
• Power switch
their business but they still remain on the sideline. The most important reason is
• Reset button
that they are concerned about the exposure of their sensitive corporate
Power Requirements
information over the WLAN network. Billion’s BiGuard S100N is the perfect
• Input: 15V DC, 1.6A
solutions for SMBs that need a flexible, secure wired and wireless connection,
Operating Environment
• Operating temperature: 0 to 40°C
and always-on connectivity to the corporate resources. Integrated with
portal-based wireless NAC (Network Access Control), the BiGuard S100N
• Humidity: 20 to 95% non-condensing
enables workers or visitors to roam freely, securely and seamlessly between
• Storage temperature: -20 to 70°C
Quality of Service Control
• Supports DiffServ approach
• Centralized logs
• Mozilla 1.7 and newer versions
• Microsoft Windows, Linux, and Apple Macintosh
• MAC filter
Options for Business Growth
Logging and Monitoring
• User access control
• Microsoft Internet Explorer 6.0 and newer
• Supports Wi-Fi Protected Setup (WPS) and WPA-PSK / WPA2-PSK
• Hardware DMZ
• Traffic prioritization and bandwidth
management based on IP protocol,
subnets in an office building, or between different network types – LAN, WLAN
Support and Service*2
• Hardware Warranty for 1 years
and WAN – without the risk of unauthorized access to the corporate network. By
• Features and Firmware Upgrade
establishing encrypted SSL VPN tunnels, mobile workers can securely access the
for 1 year
port number and IP address
intranet from any location, such as a branch office, home, or even a public kiosk.
Gigabit WAN and LAN ports provide the bandwidth and speed needed for heavy
Web-Based Management
• Easy-to-use web based user interface
• Group account settings on access
applications
• Firmware upgrades through web-based
interface
bandwidth consuming applications like video streaming and critical business
• Local and remote management
through HTTP and HTTPS
applications. “Energy efficient” features such as Smart Power Saving and Wake
• Multi-language web interface
On LAN (WOL) allow the corporate networks to be more environmentally friendly
• Supports BiGuard CMS for
and to increase cost savings without the compromise of their network
centralized management
performance.
Notes:
1. Please refer to http://www.billion.com/product/biguard/sslvpnbrowser.htm for updates of all supported browsers and OS platforms.
2. Users are strongly recommended to register the products on www.biguard.com in order to be able to use the update feature and firmware updates
3. To be available
4. All the specifications are subject to change without prior notice.
Copyright © Billion Electric Co., Ltd. All rights reserved.
Billion Electric Co., Ltd.
8F, No.192, Sec.2, Chung Hsing Road,
Hsin Tien City, Taipei County 23146, Taiwan
TEL : +886-2-2914-5665
FAX : +866-2-2918-6731,+886-2-2918-2895
E-mail : sales@billion.com
www.billion.com
• BiGuard SSL VPN Tunnel Upgrades
• BiGuard Central management System*3
• BiGuard One Time Password
Access Applications and Business Activities
Benefits
Corporate Resources
Comprehensive Security for WLAN, LAN and WAN Connection
Billion’s BiGuard S100N delivers comprehensive security features to meet with the need of SMBs who concern about the security issue for the corporate network.
Wireless NAC
(Network Access Control)
End Point Security*3 and Host
Security Checking
SSL VPN and IPSec VPN
Firewall
Branch Office with
IPsec VPN Client
Software installed
IPSec
VPN
SY
Email and File
User’s
Desktop
Web-based
Application
Service &
Application
ST
EM
Wir
ele
ss
US
B
1000M
100M
WA
N
Link
Active
LAN
Employee at
Home Desktop
PC
1
DM
Z
2
3
SSL VPN
4
N
The BiGuard S100N supports an array of
enterprise-class security features including
IPSec and SSL encryption to ensure the security
of data transmission and user access
authorization. This combination provides
excellent deployment flexibility to small business
operations for meeting the requirements of any
remote access users – visitors to the
organization, business partners, branch offices,
mobile workers…etc.
The End Point Security (EPS) function enables
IT administrators to configure and assure that
the client-side PCs are protected with authorized
security settings such as anti-virus software,
patches, browsers, and files in order to prevent
potential threats from the endpoint PC.
Simultaneously, the host security checking
feature enables IT managers to configure the
identities of a remote PC by host name, IP
address and MAC address in order to assure the
authorized users and protect the corporate
network from potential security threats.
L
SS
Business
Traveler at
Airport Kiosk
Remote Users
Wireless Protected Access(WPA-PSK / WPA2
-PSK) and Wireless Encryption Protocol (WEP)
ensure high-level data protection and WLAN
access control.
Easy Management with
Portal-based Wireless NAC
- Guest account auto-generation
- Guest account duration control
Authorized Guest
Employee’s
Laptop
Guest’s
Laptop
Un-authorized
Intruder
Info
Desk
Un-authorized Access
Two-factor authentication with
BiGuard One-Time Password
(Optional)
Robust Firewall Security
Firewall, Stateful Packet Inspection (SPI),
Denial of Service (DoS) prevention and URL
filtering are all integrated to guard your network
against malicious attacks. In addition the
firewall features an e-mail alert service,
activated whenever an attack occurs.
Receptionists
Internet Access
Employee
WPA-PSK / WPA2-PSK and WEP
VP
SSL VPN
The Wireless NAC (Network Access Control)
technology allows IT manager to set up 4
separated SSIDs (Service Set Identified) which
enable a variety of WLAN users to have different
security levels and privileges to access different
parts of the network so that employees or visitors
to the organization can enjoy the mobility without
compromising security. Also, its rich guest
access services allow administrator to configure,
update, monitor and easily adjust the security
policy of guest user accounts by using a
customized web portal.
BiGuard One-Time Password, a car-key sized
dongle, can be used with BiGuard S100N to
enhance the security and the credibility of audit
trails with strong, two-factor authentication. It
can dynamically generate a 6-digit PIN.
Combined with your existing static password this
results in a greatly reduced risk of unauthorized
access to corporate network resources by
intruders.
Great Mobility and Productivity
By deploying the wireless NAC feature of Billion’s BiGuard S100N, you can provide your workers with more flexibility and secure wireless connection to the corporate
network, and raise productivity as well as increase the overall efficiency of the business. In addition, the guest account setting allow visitors to your organization to access
the wireless network, providing tools they need to help grow their business and yours. It also creates a professional and positive image of your company with customers,
partners and visitors. Moreover, the BiGuard S100N offers industry-advanced SSL VPN applications such as Network Extender and supports a wide range of browsers,
platforms and operating systems, providing remote users, mobile workers and external business partners with remote access to the corporate network to share files,
check e-mail, and download documents as if they never left the office. A business traveler can log in via a mobile device like PDA, the SOHO or a graphic freelancer on
Macintosh can even connect his Apple PC to customers’ networks to remotely collaborate on a project. Secure remote access with BiGuard S100N is possible via any
SSL VPN
- Wider range of comprehensive SSL VPN applications, feels like you’ve
never left the office…
• Network Extender
• Application Proxy
• Network Places
- Wide range of supported browsers, OS, and platforms
• IE, Netscape, Firefox, Mozilla, Opera, Safari, Sun
• Microsoft Windows, Linux, Macintosh
• Mobile devices supported
(Microsoft Windows Mobile 5.0 / 6.0 compatible)
device from anywhere at anytime.
Wireless NAC (Network Access Control)
- Multiple SSIDs, up to 4 SSID, to separate the traffic of guests and employees
- Three different types of WLAN access privileges
• Bypass: temporary Internet access without authenticated SSL web portal
• Authentication: authenticate Internet access via SSL web portal
• Authentication plus SSL VPN: authenticate Internet access plus secure
Intranet access via SSL VPN tunnels
- Easy management on guest accounts
• Auto generation of guest accounts : even office receptionists can create new
accounts for visitors simply via SSL portal page.
• Guest account duration control: easy to set up how long the guest accounts
will be used, like 30 minutes, 1 hour for guests and visitors, or even 3
months for short-term contractors.
Optimal Wireless Speeds and Coverage and Powerful Gigabit Connectivity
With an integrated draft 802.11n Wireless Access Point, the BiGuard S100N delivers up to 6 times the speed and 3 times the wireless coverage of an 802.11b / g network
device. In addition, WMM (Wi-Fi Multimedia) feature prioritizes the wireless traffic and minimizes the delay in wireless networks for time-sensitive applications such as
Voice over IP and video conferencing. The BiGuard S100N features Gigabit capability for LAN, WAN and DMZ ports, enabling faster transmission speeds for remote
access, internal connections or outbound networking. This design gives small-and-medium sized enterprises an edge in today’s business environments where mobile
workers, business partners and traveling employees are increasingly on the road, and for whom connectivity problems and data security should be the last thing on their
mind.
Secure Remote Access
Wireless Connectivity
For business travelers, mobile workers, and branch offices
• General corporations to give visitors authorized Internet access over
WLAN anywhere in office buildings, separate from Intranet access
by their employees
• Remote access to the corporate Intranet
3G Mobility and Always-On Connection (Future extension)
With the BiGuard S100N you can connect a 3G / HSDPA USB modem to its built-in USB port. This enables you to use a 3G / HSDPA, UMTS, EDGE, GPRS, or GSM
• Manufacturers to give visiting buyers authorized Internet access,
while the employees in the warehouse, in the factories, or in the
office access the Intranet securely and simultaneously
• Employee connectivity, sales discount checking, and e-learning
Internet connection, which allows downstream rates of up to 14.4Mbps possible. With the increasing popularity of the 3G standard, communication via the BiGuard
S100N is becoming more convenient and widely available. You can even share your Internet connection with others even if you're in a meeting, or speeding across the
country on a train. The auto fail-over feature ensures maximum connectivity and minimum interruption by quickly and automatically connecting to a 3G network in the
ERP
• ERP system and order system connection
• Healthcare service centers to enhance service quality by enabling
mobile doctors and workers to securely access medical records
while patients can access Internet
• E-mail box checking
• Airport operators to give travelers and their workers different
security levels of access over WLAN
event that your fixed line fails. The BiGuard S100N will then automatically reconnect to the fixed line connection when it's restored, reducing connection costs. These
features are perfect for office situations where constant connection is paramount.
Simple Ways to Go Green
• Conference / exhibition centers to provide exhibitors and visitors
with separate wireless connectivity from their employees to enhance
their service value
For external customers and business partners
Global warming is becoming a major threat in today’s world. The BiGuard S100N is designed as an environment friendly networking solution for small offices and SMBs,
allowing build up of their corporate network environment and turning their business green with energy efficient devices. With integrated Smart Power Saving technology,
ERP
• Need to connect with business’s ERP system
FTP
• Limited access to partner FTP servers for downloads and uploads
• Education / training organizations to provide quality learning
environment by giving students and lecturers separate wireless
connectivity from the access of their staff
the BiGuard S100N has the ability to automatically detect the link status of each connected device and reduces power usage of ports that are idle. Additionally, this
technology is able to analyze the length of any Ethernet cable for making the adjustment of power usage accordingly. The significant benefits for the organization are
reduction in power consumption, adding of less heat to the environment, and also reduction of the operating cost. Moreover, the Wake on LAN (WOL) feature allows IT
ON
administrators to remotely shut down or wake up any devices in the network environment via SSL VPN tunnels from anywhere at any time when necessary. Furthermore,
it complies with EU’s RoHS directive and WEEE regulation to protect our environment from harmful substances.
SA
ON
SAL
E
• Department store workers are able to access the Intranet to manage
inventory, and shoppers can gain access to the Internet whilst
shopping
• Hotels and restaurants to offer customers Internet access, separate
from their staff Intranet access over WLAN
Download PDF

advertising