NS-SecPath F100-C-A2

The F100-C-A1 and F100-C-A2 firewall series are high-performance devices equipped with advanced 64-bit multi-core processors and caches, designed to deliver superior processing power and security for small to medium-sized enterprises and Telecom carriers. Here’s an overview of the key features:

Carrier-level High Availability

• Utilizes H3C’s proprietary platforms, proven by Telecom carriers and small- to medium-sized enterprises.
• Supports H3C SCF technology, virtualizing multiple devices into one for unified resource management, service backup, and improved system performance.

Powerful Security Protection Features

• Attack Protection: Detects and prevents various attacks, such as Land, Smurf, Fraggle, ping of death, Tear Drop, IP spoofing, IP fragment, ARP spoofing, and DDoS attacks like SYN flood, UDP flood, DNS flood, and ICMP flood.
• Security Zones: Configurable based on interfaces and VLANs.
• Packet Filtering: Standard or advanced ACLs can filter packets based on attributes like UDP and TCP port numbers, with customizable time ranges.
• Access Control: User and application-based access control integrated with deep intrusion prevention.
• ASPF: Application-layer protocol analysis for packet forwarding decisions.
• AAA Support: Includes Local, RADIUS/HWTACACS+, CHAP, and PAP-based authentication.
• NAT & VPN: Supports L2TP, IPsec/IKE/IKEv2, GRE, and SSL VPNs.
• Routing: Supports static routing, RIP, OSPF, BGP, and policy-based routing.
• Logs & Monitoring: Security logs, traffic monitoring, and extensive reporting capabilities.

Advanced DPI Security

• Integrated Security Service Platform: Combines basic and advanced security measures, including application layer traffic management.
• Intrusion Detection and Prevention: Employs the proprietary Full Inspection with Rigorous State Test (FIRST) engine for accurate intrusion detection and prevention.
• Real-Time Virus Protection: Kaspersky’s stream-based antivirus engine for real-time threat detection.
• URL Filtering: Supports URL filtering and querying of online URL category filtering servers.
• Updated Security Signature Database: Regular updates from H3C’s dedicated signature team.

Industry-leading IPv6 Features

• IPv6 Stateful Firewall: Provides advanced protection for IPv6 networks.
• IPv6 Transition Technologies: Includes NAT-PT, IPv6 over IPv4 tunnels, and DS-Lite, among others.
• IPv6 Routing and ACL Support: Static and dynamic routing, IPv6 ACLs, and RADIUS support.

Next-generation Multi-service Features

• Link Load Balancing: Uses state inspection to balance traffic among multiple links.
• SSL VPN Support: Provides secure mobile access with USB-Key, SMS, and enterprise authentication systems.
• Data Leakage Prevention (DLP): Advanced email, HTTP, FTP, and content filtering.
• Wireless AC Function: Supports up to 64 APs with automatic configuration and management features.
• Intrusion Prevention System (IPS): Protects against web-based attacks such as SQL injection and cross-site scripting.
• Web Application Firewall (WAF): Defends against CC attacks and common web threats.

Intelligent Management

• Security Policy Management: Detects and optimizes security policies, with recommendations for dynamically generated policies.
• Centralized Log Management: Manages and compresses various logs for storage on external devices, preventing data loss.
• Comprehensive Reporting: Customizable reports in multiple formats (PDF, HTML, Word, TXT), generated via the Web interface.
• SNMP & Web-Based Management: SNMPv3 support and an intuitive web-based GUI for simplified management.
• In-Service Software Upgrade (ISSU): Software updates with minimal downtime.

The F100-C series offers robust security and high availability for critical enterprise and carrier networks, with integrated management and advanced threat protection capabilities to meet the demands of modern IT environments.