Hillstone Next-generation VPN Hardware Firewall SG-6000-M8860

Hillstone Next-generation VPN Hardware Firewall SG-6000-M8860      

Hillstone M/G Series next-generation firewalls provide visibility and control of web-based application traffic regardless of port, protocol or IP address. Policies can be defined that guarantee bandwidth to mission-critical applications while restricting or blocking inappropriate or malicious applications. Administrators can control access to applications (and application features) based on users and/or user-groups regardless of IP address, location or device. Hillstone M/G Series firewalls incorporate comprehensive network security and advanced firewall features. They provide superior price performance, better energy efficiency, and a smaller size compared to competing products.

Module Options:

Granular Application Control
Hillstone M/G Series firewalls provide granular application control. Administrators can build policies that allow specific users or user-groups to access selected applications. (Allow Marketing to access Facebook). It is even possible to limit access to certain features within an application. (Allow Marketing to access MSN IM but Not file sharing). Policies can also be defined that block or limit access to applications. For example, certain games may be blocked during work hours but allowed after work hours. Alternatively, some applications may be allowed during work hours but with limited bandwidth.

Proactive Threat Protection
Hillstone M/G Series firewalls provide real-time protection for application and network attacks including viruses, spyware, worms, botnets, ARP spoofing, DoS/DDoS, Trojans, buffer overflows, and SQL injections. It incorporates a unified malware detection engine that shares packet details with multiple security defenses (IPS, URL filtering, and Anti-Virus), which significantly reduces latency.

Visibility and Control 
Hillstone M/G Series provides visibility and control of network traffic. An intuitive user interface displays all  applications traversing the network along with application categories and bandwidth. An administrator can quickly choose an application and see all the users who are accessing that application along with bandwidth consumption. If a particular user is of interest the administrator can see all the applications that user is using - now and in the past. Inappropriate applications can be blocked or limited by bandwidth or time of day.Multiple reports show top applications, top users, top URLs, top URL categories, top threats, etc.

 VPN
• PnP VPN
• SSL VPN (optional USB-key)
• L2TP
• L2TP over IPSec VPN

High Availability
• Active/passive
• Configuration and session synchronization

Virtual Firewalls
• Multiple virtual firewalls in a single device Load Balancing
• By Source IP
• Vy Destination IP
• By Session
• By Bandwidth/Latency

Centralized Mgt
• Centralized deployment and management
• Unified policy mgt.
• Performance and traffic monitoring

Zone-Base Architecture
• All interfaces assigned to security zones for policy enforcement

Threat Detection
• Over 1.3 million AV signatures
• Over 3500 IPS signatures
• Over 20 million domain names
• DoS/DDos DNS Query Flood
• SYN Flood
• ARP spoofing
• Malformed packets