SSL VPN

advertisement
Qno Technology Inc.
Multi-Core Router Expert
Presentation of QVF7411 & 7412
Broadband Product Series
FQR Broadband Saring Series
ARM
FQR7103 3WAN
MIPS64 Dual-Core
FQR7111 2WAN
FQR7109 2WAN
FQR7110 4WAN
FQR7200 3~4WAN
MIPS64 Dual-Core 1G
FQR7201 5WAN
MIPS64 Advance Dual-Core
FQR7202 4WAN
FQR7203 5WAN
FQR7204 8WAN
10/100M
Gigabit
VPN Product Series
QVF VPN Series
IPSec, PPTP
ARM
QVF7301 3WAN IPSec: 10
MIPS64 Dual-Core
QVF7307 2WAN IPSec: 40
MIPS64 Single-Core
QVF7303 2WAN IPSec: 100
MIPS64 Dual-Core
QVF7305 4WAN IPSec: 200
MIPS64 Dual-Core 1G
MIPS64 Advanced
MIPS64 Advanced
Dual-Core
All-in-One
QVF7411 2WAN SSL: 35
QVF7412 4WAN SSL: 60
QVF7413 5WAN SSL: 100
QVF7306 4WAN IPSec: 1000
FQR7414 4WAN SSL: 100~300
FQR7415 4WAN SSL: 100~700
10/100M
Gigabit
QVF Features I
Online behavior management improves working efficiency
→ Block online video, stock websites, P2P software and special files
Co-control of Qno Classical QoS and SmartQoS
→ Classical QoS for important services and SmartQoS for allocating bandwidth flexibly
Exclusive Web QoS for Bandwidth Management can restrict the bandwidth of
webpage browsing and videoing
→ No more slow speed of browsing the webpage because of web video viewing.
High-Speed transmitting rate allows to connect several Internet lines
→ The transmitting rate of 64 byte packet surpasses 96Mbps
Group Setting
→IP/Application Services can be arranged in group for easy set up
QnoDDNS
→Free & stable DDNS service, assisting companies to establish own Domain Names
QVF Features II
E-Bulletin presents newest Information
→ Noticeable information will pop up when users open the browser. Allows to redirect
users to specific web site when they close the pop out page.
QRTG presenting the usage of CPU, RAM, WAN
→Intuitive figure of using ratio. Don’t need to calculate by numbers any more
High Availability, back up each other or use both devices at the same time
→ It used to be implemented in high-end equipment and is realized in FQR7109 &
7110(Optional).
Inbound load balance distributes all the incoming traffic equally to each lines
→ Users don’t need to spend huge money on buying big bandwidth to offer application
services such as web service(Optional)
Coordinating with QnoSniff
→Mirror port connects with QnoSniff to monitor online activities and network resources
( Optional)
Typical Application Topology
Administration Dept. ... Sales Dept. Finance Dept. ...
OA Server
ERP Server E-Mail Server
Webpage Server…
Intranet
Switch
Switch
SSL VPN
Internet
VPN
QnoSniff
Mirror Port
QVF7412
QVM Series
IPSec VPN
SSL VPN
QVM VPN
Branch I
IPSec VPN
Mobile User
IPSec VPN
QVM Series
Branch II
QVM Series
Branch X…..
- ERP
- Webpage E-Mail
- My Desktop
- Network Neighborhood
All-in-One VPN
Multiple choices to establish VPN
Different internet environment, different people( Executives, Sales & Technical Person
and Customer services), could choose the most appropriate VPN Type
Headquarter
SSL/ QnoKey
SSL
On the way QnoKey
PPTP
In business
SSL/ QnoKey
SSL/QnoKey
IPSec / QVM
Internet Cafe
Branch/Standalone
Cooperation/
Supplier
SSL VPN
Connect to Headquarter safely anytime anywhere
Access by opening the webpage
SSL VPN
Safe Access and Anti-Cracking
- Anti password cracking
-Graphic code for certification
- On screen keyboard
Fast SSL VPN
Quickly establish safe tunnel
Fast SSL VPN - Virtual Passage safe tunnel
- Webpage services: webpage application(ERP, CRM..), internal pages(Intranet)
- FTP services
SSL VPN Host safety check
Double-check mechanism
- Account/Password Access
- Host safety check (Windows XP)
Antivirus software version
Browser version
Firewall
Registry
Specific files
Access
SSL VPN
Virtual Routing
- This function allows IP visiting to the 3rd ISP’s webpage and gaming server
- Gaming players、VoIP caller、Web surfers can breakthrough the filter among nations
Browsing news webpage/playing games
Web Server
SSL VPN Center
ISP No. 3
Internet
SSL Connection
Gaming Server
China IP
SSL VPN
Demanding different requirement
Informational Applications in
Businesses
People in different position
access different application
services
Businessmen
Financial person
Qno SSL
Internet
Technical person
AD/Radius
Database
Control on user privilege
simply by Identification
SSL VPN
Work anywhere even there is no computers
News editor without
notebook
Authentication & Authorization
Qno SSL VPN
SSL
Internet
Mobile user Encryption
Internet café/Other PC
Editors could finish the article and
send the E-mail even there is no
Word/Outlook in Internet café/PC !
Encryption
Intranet
Well done!
Servers
SSL VPN User Portal UI after access
Different privilege access different user portal
Bookmarker can be self-defined
SSL VPN
Access Control
Qno SSL Access Control Permission Legend
Different privilege access different resources
Open all the resources
Open Remote Desktop,
Network Neighborhood
and VPN, but Internet
items is only FTP
Executives
Mobile users
Administrator
Only open Internet
service FTP and Microsoft
Terminal Services
Partners
SSL VPN Easy managing configuration
Administrators can set different privileges for different people in the managing UI
SSL VPN SSO-Single Sign on
SSO (Single Sing On) only require users to login one time
to get SSL VPN connection and application services.
ERP
Headquarter
Agencies
Temporary Areas
Branch
Partners
IPSec VPN Able to connect with other VPN devices
Headquarter
VPN
Branch
VPN
1. Passing VPNC and compatible with all
other VPN devices
2. Flexible in setting
3. Heartbeat can improve the stability
of VPN connections
Smart Link VPN
Easy and quick to establish VPN
Highly security: deploying IPSec encryption
Simple to use: only need to set IP, account and password
Headquarter
Branch
VPN
VPN
Smart Link VPN
VPN Back-up
Highlight:VPN Back-up – Establishing VPN from other WAN port when original
one lost connection.
Headquarter
Multi-WAN
VPN
Branch
Smart Link VPN
VPN Hub
Highlight: VPN Hub –realizing intercommunication among branches by each connecting
to Headquarter, which simplifies the management and solves the problem of small
bandwidth between branches
Branch
Headquarter
Branch
Branch
Smart Link VPN
Central Management
Highlights: Central Management – directly get into each branches’ UI and make
settings or check problems
Headquarter
QnoKey
One-key VPN connection in Client
Managing user, server
and resources centrally
QnoKey Managing Side
ERP/OA Servers
Qno VPN Router
QnoKey Client
IPSec VPN
System Administrator
Giving to use after doing
QnoKey settings here
Remote User
Input PIN, and VPN will connect automatically
Performance Improve 1.5 times
Small & Medium businesses now can experience the extreme speed of QVF7411 & 7412.
Comparison figure of Multi-core CPU, Intel IXP266,533
64BytePacket Forwarding
Unit:Mbps
100
90
80
70
60
50
40
30
20
10
0
96Mbps
64
30
IXP 266
IXP 533
MIPS64 Dual-Core
QVF7411、QVF7412
Comparing of Multi-core and IXP Platform
Following figure shows the usage rate of Intel IXP and multi-core’s CPU when handling
40,000 sessions
Router with Intel IXP CPU usage ration is increasing all the time and reaching nearly
40%. However, multi-core is keeping no more than 10% stably.
100.00
80.00
60.00
Intel IXP
40.00
20.00
MIPS64 Multi-Core
0.00
1
6
11 16 21 26 31 36 41 46 51 56 61
200 sessions/sec, Total volumn up to 40000 sessions
Services Accelerating
Be able to speed up specific services’ data transmitting
By hardware optimization, you can
set some application services
(service ports) to have higher
priority in tansmittion, thus realizing
the speed accelerating.
Top Priority
Internet
SmartQoS
Smart QoS operates according to a
Bandwidth Using Ratio.
!
Detecting illegal usage
When Bandwidth Using Ratio
exceeds the setting value, SmartQoS
will be automatically activated and
take actions in case of bandwidth
shortage/waste.
Exclusive Web QoS for Bandwidth Management
Under this function, users could set
bandwidth for applications using
port 80 respectively to avoid tarrific
jam. For example, a rational
bandwidth setting on web video
could eliminate influent on web
browsing and let users enjoy a
smooth surfing.
Internet
Webpage Browsing
Web Video
Online Behavior Management I
Restriction for Special Webpage Access
Java、 Cookies 、ActiveX 、Access to HTTP Proxy Servers
Services Could Block:
Specific File Type Block:
RAR、Zip、EXE、Type、Flash、Gif、JPEG、MP3、PDF、PNG
Online Behavior Management II
Online Video Websites Block
Total 31 Websites
Bi-direction ARP Binding
Except Router can bind IP and MAC of intranet computers, users can also
download ARP binding utility to bind IP and MAC of router to reach
Router and Intranet PCs binding each other.
E-Bulletin
Administrators could put the noticeable information on E-Bulletin. When
users get online and open browser, the bulletin will pop up immediately.
Notice
No online game during working hours
Administration Dept.
Qno DDNS
Free Dynimic Domain Name Service
Free to provide exclusive dynamic domain name, which helps administrator to manage
the routers of headquarter and branches by the domain names
QRTG Graphical statistic I
Sessions and CPU usage status are displayed in figures
QRTG Graphical statistic II
The traffic through WAN ports is presented in figures
HA (High Availability)
Two Qno Routers can be placed in one site to back up each other when main device
is broken or work at the same time to share the loading.
Internet
WAN 1
WAN 2
Work at the same time
or
Use 2nd device as Backup
LAN
Business men
Technique staff
others
Inbound load balancing
The incoming requests from Internet to the Router will be distributed equally to each
active WAN port.
3
2
4
5
6
1
Internet
WAN 1
2
3
7
4
Qno Router
Switch
Switch
Intranet
OA Server
ERP Server E-mail Server
Web Server
USB Interface Support Wireless broadband accessing
USB port could connect 3G/3.5G card to provide Wireless broadband Service.
Load Balance& Back-up
WAN
USB Wireless Broadband Energy-Saving Mode
Router can automatically detect wire Internet status. If the connection is lost or
the using ratio is surpassing the threshold, 3G/3.5G Wireless will be turned on
to back up or share the traffic loading.
LAN
LAN
LAN
Detect ADSLs & Traffic
Application Server
ERP, OA, Web, Email
EX:
3G/4G
ADSL
ADSL
Internet
Q&A
Thank you
Download