Enterasys ANG-1000 Bedienungsanleitung PDF herunterladen (Seite 4)

Enabling Secure Networks

An integral part of the Secure Networks architecture from Enterasys,

the N-Series provides advanced security, priority, and bandwidth control

mechanisms without compromising network performance. Secure

Networks leverages the distributed, ﬂow-based visibility and advanced

policy-based control of the N-Series.

NetFlow Without Compromise

NetworkperformancemanagementandsecuritycapabilitiesviaNetFlow

areavailableoneveryN-SeriesDFEwithoutslowingdownswitching/

routingperformanceorrequiringthepurchaseofexpensivedaughter

cards for every blade. Enterasys tracks every packet in every ﬂow as

opposed to competitor’s statistical sampling techniques.

The N-Series’ distributed, ﬂow-based architecture allows for a very

granular level of visibility and control for each user and application

conversation, or ﬂow, while simultaneously handling a large volume

of trafﬁc. The distributed architecture enables each switch module in

a N-Series chassis to function independently of other modules and

eliminates single points of failure. Each chassis is managed as a single

systemusingasingleIPaddress.Thiscapabilityisuniqueintheindustry

and provides security and management automation.

Distributed, Flow-Based Architecture

Inordertoensurethatgranularvisibilityandcontroloftrafcis

maintained, without sacriﬁcing performance, the N-Series deploys a

distributed, ﬂow-based architecture. This architecture ensures that when

a speciﬁc communications ﬂow is being established between two end

points, the ﬁrst packets in that communication are processed through

themulti-layerclassicationengineintheswitch.Inthisprocess,the

role is identiﬁed, the applicable policies are determined, the frames are

inspected, and the action is determined. After the ﬂow is identiﬁed, all

subsequent frames associated with that ﬂow are automatically handled in

ASICswithoutanyfurtherprocessing.Ifthatowweretochangeinany

way, a new ﬂow would be identiﬁed and new policies would be applied.

InthiswaytheN-Seriesisabletoapplyaverygranularlevelofcontrolto

each ﬂow without sacriﬁcing performance.

Multi-User Authentication and Policy

Authenticationallowsenterpriseorganizationstocontrolnetworkaccess

andprovidesmobilitytousersanddevices.Itprovidesawaytoknow

who or what is connected to the network and where this connection is at

any time. The N-Series has unique, market-leading capabilities regarding

thetypesofsimultaneousauthenticationmethods.DFEscansupport

multipleconcurrentauthenticationtechniques,including802.1X

authentication;MACauthentication,whichisawaytoauthenticate

devicesonthenetworkusingtheMACaddress;andWeb-Based

authentication,alsoknownasPortWebAuthentication(PWA),wherea

user name and password are supplied through a browser. This capability

providesgreatexibilitytoenterpriseslookingtoimplementaccess

control mechanisms across their infrastructure.

Distribution

Enables simplified user/device

identification within a

Secure Network™

User authenticated/access and

application control enforced here –

up to 1024 users per port

Edge

User physically

connected here

Features

Page 4

1 2 3 4 5 6 7 8 9 10 11 12

Kommentare zu diesen Handbüchern

Keine Kommentare

Enterasys ANG-1000 Bedienungsanleitung Seite 4

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Gateways / Controller Enterasys ANG-1000